Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098916 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098699)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098699 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited...

PT-2026-81920

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

PT-2026-82275

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-82118

In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readable reg callback regmap sdw mbq poll busy decides whether to poll the Function Busy bit by calling ctx-readable reg, which is a straight copy of config-readable reg. That callback is...

PT-2026-82059

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

PT-2026-82069

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

PT-2026-82062

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104781 advisory. Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the COP...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2026:3680-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3680-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. -...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-104829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104829 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files...

RockyLinux 9 : golang (RLSA-2026:22121)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22121 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

PT-2026-82200

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the s390/qeth component where the qeth snmp command and qeth l3 arp query functions allocate a buffer based on a user-supplied length udata len without verifying a low...

Linux Distros Unpatched Vulnerability : CVE-2026-80550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Fix out of bounds check on CCW array The routine ccwchaincalclength counts the number of channel command words CCWs that are chained together in a...

Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...

PT-2026-82061

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...

PT-2026-82105

The LoRaWAN application-layer clock-synchronization service parses downlinks in clock sync package callback subsys/lorawan/services/clock sync.c. Its command loop only guarantees that the one-byte command id is in bounds; for the CLOCK SYNC CMD APP TIME AppTimeAns command the handler then reads a...

PT-2026-81940

mp SetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

PT-2026-82306

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...

PT-2026-82054

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...