Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104555 advisory. In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range payload size recvdlessread receives a PDATAREPLY...

PT-2026-82170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where channel programs and their contained Command Chain Words CCWs are processed recursively. The vfio-ccw logic divides these channel...

PT-2026-82166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds check exists in the ccwchain calc length function. This routine counts the number of channel command words CCWs chained together in a single channel program and is...

PT-2026-82192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the drm/amdgpu component, the amdgpu cs p2 ib function fails to limit user-supplied ib bytes when passing them to ib-length dw. Because ring emit ib encodes this length into packet...

PT-2026-82075

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

EUVD-2026-66744

Comfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX 2024-01-30 build, the updateinterfacepng SET handler in /usr/bin/webmgnt fails to sanitize the displayname parameter. User-controlled input is concatenated via sprintf into the unquoted shell command /etc/rrd/graphinterface %s %s and executed by...

EUVD-2026-66746

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...

PT-2026-82058

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

PT-2026-82085

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

PT-2026-82071

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2020-15874

CVE-2020-15874 is a command injection vulnerability in LibreNMS version 1.65 , located in the /graph.php API endpoint. A remote authenticated attacker with normal privileges can leverage the flaw to execute arbitrary shell commands on the underlying system. The fix is available in LibreNMS 1.65.1...

PT-2026-82089

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus load reads the number of bus handles from the file attribute "bus handles" using attribute num data without validating an uppe...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098812 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kf5-kconfig (UTSA-2026-093173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093173 advisory. In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098687)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098687 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARNON for device endpoint command timeouts This commit addresses a rarely...

PT-2026-82046

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux versions prior to 15.81.5 Description A command injection issue exists that allows a remote attacker to execute arbitrary commands with the privileges of the current user. This occurs when a user click...

PT-2026-82052

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

PT-2026-81923

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

PT-2026-82340

A flaw was found in the ipa getkeytab module of the community.general Ansible collection. The module's bind pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no log, unlike the sibling password parameter in the same module. As a...

PT-2026-82254

Name of the Vulnerable Software and Affected Versions Dell PowerProtect One versions 20.1.0.0 and earlier Description An improper neutralization of special elements used in an OS command allows a low privileged attacker with remote access to perform OS Command Injection, which can lead to remote...