CVE-2026-103119

Buffer under-read vulnerability in Apache Tomcat meant that a large no...

CVE-2026-74049

Execution After Redirect EAR vulnerability in Apache Tomcat. This...

PT-2026-122215

The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised dns resolve init locked - register dispatcher - dns dispatcher register, with the local port left at 0 so the stack picks an ephemeral port exactly once. dns...

UBUNTU-CVE-2026-103119

Buffer under-read vulnerability in Apache Tomcat meant that a large no...

UBUNTU-CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apa...

CVE-2026-80353

Time-of-check time-of-use TOCTOU race condition vulnerability in Apa...

CVE-2026-114138

Django REST framework is a toolkit for building Web APIs. Prior to 3.1...

PT-2026-122425

Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can result in silent overflow in release builds, and result in incorrect value references in the IR resulting in arbitrary miscompilation. A very large Wasm function body, or one that is...

UBUNTU-CVE-2026-96424

Incorrect DBus policy for lomiri-upload-manager part of lomiri-downlo...

CVE-2026-113776

virtualenv is a tool for creating isolated virtual python environments...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger...

Linux Distros Unpatched Vulnerability : CVE-2026-98933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers an AMD platform issue...

Linux Distros Unpatched Vulnerability : CVE-2026-98983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed...

Linux Distros Unpatched Vulnerability : CVE-2026-99074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 net: ipv4: Cache pmtu for all packet paths if multipath enabled made iprtupdatepmtu update...

Linux Distros Unpatched Vulnerability : CVE-2026-99077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are locally delivered and quote a UDP...

Linux Distros Unpatched Vulnerability : CVE-2026-99081

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting...

Linux Distros Unpatched Vulnerability : CVE-2026-99036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix reading free memory in doresume When doresume calls dmtablegetmodenewmap, the call is done without holding any locks it only holds a reference to the md...

Linux Distros Unpatched Vulnerability : CVE-2026-99071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: do not warn on route notification size race Commit 680aea08e78c net: ipv4: Emit notification when fib hardware flags are changed added asynchronous route...

Linux Distros Unpatched Vulnerability : CVE-2026-99080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: Free any excess xarray nodes in clearinode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c...

PT-2026-122230

Name of the Vulnerable Software and Affected Versions Twisted versions prior to 26.10.0rc1 Description In the twisted.names.dns.DNSDatagramProtocol, the system accepts UDP DNS responses for pending queries based solely on a matching 16-bit transaction ID without verifying the source host and port...