CVE-2026-59567 Local privilege escalation

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

EUVD-2026-64883

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

CVE-2026-74642

A flaw was found in the ALSA USB MIDI2 EPs component of the Linux kernel. This use-after-free UAF vulnerability occurs due to a delayed release of MIDI2 endpoints, leading to an attempt to dereference an already freed Universal MIDI Packet UMP endpoint object. An attacker could potentially exploi...

CVE-2026-74608

A flaw was found in the Server Message Block SMB client of the Linux kernel. A use-after-free vulnerability exists in the cifstryaddingchannels function. This occurs when a concurrent interface list refresh removes a reference to an interface while a channel creation is in progress and fails,...

CVE-2026-73194

A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...

CVE-2026-73193

A flaw was found in DBI. On 32-bit Perl systems, a vulnerability exists in the preparse function due to an integer wraparound when calculating the output buffer size. A remote attacker can exploit this by providing a specially crafted, excessively large statement. This can lead to a heap...

CVE-2026-68766

A flaw was found in hashcat. This vulnerability allows an attacker to inject malicious command-line options when parsing restore files. By crafting a specially designed restore file, an attacker can append arbitrary content to files, potentially leading to arbitrary code execution on the system...

EUVD-2026-64849

The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loadsjoblib.loadstrmodelfile and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that...

EUVD-2026-64847

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-74631

A flaw was found in the Linux kernel's smcrxsplice function within the net: smc component. This vulnerability arises from an imbalance in the lifetime management of splice entries, where page references are not properly handled before being passed to splicetopipe. This can lead to a reference cou...

ROOT-APP-MAVEN-CVE-2019-16335 CVE-2019-16335 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-16335 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-19362 CVE-2018-19362 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-19362 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-24750 CVE-2020-24750 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-24750 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

RLSA-2026:58561 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

CVE-2026-74615

A flaw was found in the Linux kernel's vxlan module. An unprivileged user can trigger a use-after-free vulnerability by performing specific network-related operations within a new user and network namespace. This can lead to system instability, causing a denial of service, and potentially allowin...

python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

RLSA-2026:58562 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-77643

A flaw was found in Xapian xapian-core. This cross-site scripting XSS vulnerability is due to incomplete HTML escaping by the Xapian::MSet::snippet function. A remote attacker could exploit this by injecting malicious script, leading to arbitrary code execution in the user's browser context. This...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...