Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098937 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098792 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: configfs: Bound snprintf return in tgptgpmembersshow targettgptgpmembersshow format...

Linux Distros Unpatched Vulnerability : CVE-2026-79769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup...

Linux Distros Unpatched Vulnerability : CVE-2026-80570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped...

Linux Distros Unpatched Vulnerability : CVE-2026-80561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: fix multiple unsafe decodes in decodelocker decodelocker in clslockclient.c contains three unsafe decode operations that allow a malicious or compromis...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098797)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098797 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size Why & How The VBIOS...

Linux Distros Unpatched Vulnerability : CVE-2026-80536

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: bounds-check buffer log item's dirty bitmap xlogrecoverdoregbuffer replays each dirty region described by a buffer log item's bitmap into the buffer read...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098772 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfsioctlspaceinfo slotcount TOCTOU which can lead to info-leak btrfsioctlspaceinfo h...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104791 advisory. FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder...

Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2026-104827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104827 advisory. A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event...

goshs v2.1.6

You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and python3 -m http.server won't cut it. goshs is a single-binary file server built for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/...

CVE-2026-80201 Kimai before 2.53.0 API Token Leakage via Invoice Template

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

CVE-2026-80201 Kimai before 2.53.0 API Token Leakage via Invoice Template

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

CVE-2026-80201

Kimai before 2.53.0 fails to block sensitive User methods within its Twig invoice template sandbox , allowing privileged users to invoke getApiToken() and getPlainApiToken(). Attackers holding template creation permissions can embed these method calls in invoice templates, causing hashed API toke...

CVE-2026-80201 Kimai before 2.53.0 API Token Leakage via Invoice Template

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...

CVE-2026-80194

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_project_view_export). Authorization guards are attached to the sibling __invoke method rather than at the class level, leaving the export route without any authorization checks. As...

CVE-2026-80194 Kimai before 2.64.0 Missing Authorization via ProjectViewController export

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...

CVE-2026-80194 Kimai before 2.64.0 Missing Authorization via ProjectViewController export

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...

CVE-2026-80194 Kimai before 2.64.0 Missing Authorization via ProjectViewController export

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...

DEBIAN-CVE-2026-80184

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be submitted to the token-method authentication path for reauthentication to escape their intended project scope. When an application credential...