Linux Distros Unpatched Vulnerability : CVE-2026-57222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state CVE-2026-57222 Note that Nessus relies on the presen...

Oracle Linux 10 : ELSA-2026-66460-0: / gstreamer1-plugins-base (ELSA-2026-664600)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664600 advisory. 1.26.7-2.2 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253746 Tenable has extracted the preceding description block directly fr...

Oracle Linux 9 : ELSA-2026-66403-0: / coreutils (ELSA-2026-664030)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664030 advisory. 8.32-41.0.1.el98.1 - clean up empty file if cp is failed Orabug 15973168 8.32-41.1 - unexpand: fix CVE-2026-56392 and related crashes RHEL-216788 - fix...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...

CVE-2026-16172 Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

DEBIAN-CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-45762

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45752

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

EUVD-2026-75756

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

CVE-2026-45762

Suricata is a network intrusion detection/prevention and security monitoring engine. Prior to 7.0.16 and 8.0.5 , its IP defragmentation tracker lookup failed to verify that an existing tracker used the same IP address family as the incoming packet. Under crafted mixed IPv4/IPv6 fragmented traffic...

CVE-2026-45762 Suricata defrag: missing address-family check can lead to remote crash

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKEANDO SIP/PJSIP bloquea instancias remotas de Asterisk : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

CVE-2026-31402

🛡️ CVE-2026-31402 – Desbordamiento de montículo en la caché de repetición de LOCK NFSv4 CVE-2026-31402: un bug de NFS en Linux oculto durante 23 años 📌 Descripción general CVE-2026-31402 es una vulnerabilidad de desbordamiento de montículo en la caché de repetición de LOCK de NFSv4.0 del kernel de...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Desatando el caos sobre Bluetooth Low Energy Este repositorio es parte del resultado de una investigación delASSET Research Group. SweynTooth comprende una familia de 18 vulnerabilidades en diferentes kits de desarrollo de software SDK de Bluetooth Low Energy BLE de seis grandes...

DEBIAN-CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

CVE-2026-89046

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

CVE-2026-15417

In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash...

CVE-2026-89046 zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...