Linux Distros Unpatched Vulnerability : CVE-2026-101775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

PT-2026-135597

TuxCare rebuilt @babel/compat-data to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

Linux Distros Unpatched Vulnerability : CVE-2026-113713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to...

LangChain LangGraph input validation error vulnerability

A security vulnerability exists in LangChain LangGraph. It stems from improper validation of namespace tags; PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore concatenate namespace tags with “.”. In contrast, BaseStore only validates tags for put and aput operations. Unvalidate...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 3.10.83 up to but not including 3.11, from 3.12.45 up to but not including 3.13, from 3.14.47 up to but not including 3.15, and from 3.18.19 up to but not including version 3.19. This vulnerability arises because btrfssetxattr in Btrfs...

OnPhase Forms server-side request forgery vulnerability

OnPhase Forms version 11.0.14 contains a server-side request forgery vulnerability. This vulnerability stems from unauthenticated form services being susceptible to server-side request forgery, potentially allowing unauthenticated remote attackers to access sensitive internal Apache Solr data by...

xorg-x11-server-21.1.24-2.1 on GA media (moderate)

xorg-x11-server-21.1.24-2.1 on GA media Announcement ID: openSUSE-SU-2026:12104-1 Rating: moderate Cross-References: CVE-2026-88812 CVE-2026-93515 CVE-2026-93516 CVE-2026-93517 CVE-2026-93518 CVE-2026-93519 CVE-2026-93520 CVE-2026-93521 CVE-2026-93523 CVE-2026-93524 CVE-2026-93536 CVSS scores:...

PT-2026-135864

Relationship to GHSA-hgfg-j9pg-43xw That advisory concerned the administrator's live UI layout, and commit 63c7d5474 resolved it by removing FilterUILayoutByPublishIgnore and nulling Conf.UILayout for readers. That fix is correct and complete for the live layout. This report concerns a different...

PT-2026-121770

The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that runs on unauthenticated requests, allowing unauthenticated attackers to move affected popups into the Trash and overwrite their stored preview data...

PT-2026-135589

TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.25.7-tuxcare.4...

PT-2026-135590

TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-135587

TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.23.2-tuxcare.2...

PT-2026-121690

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the...

PT-2026-135191

Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230...

PT-2026-135596

TuxCare rebuilt @babel/compat-data to address 1 CVE. Fixed in 7.14.8-tuxcare.2...

UBUNTU-CVE-2026-114716

Fix mail header injection via media type in an inline image data URI...

PT-2026-122065

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite ZCS allows an attacker to inject JavaScript through the packages parameter of the /h/rest document editor. The editor inserts package names into script attributes without HTML encoding. When...

PT-2026-122118

A missing authorization vulnerability in Zimbra Collaboration Suite ZCS allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet configuration through ConfigureZimletRequest. The uploaded configuration can also add an attacker-controlled domain to the pro...

Developing Security Metrics for Automated Compliance Checking

To automatically check for compliance with security-related standards, prose requirements must be translated to technical properties to make them measurable. A multitude of metrics have been proposed in past literature, but they are lacking a systematic methodology for their elicitation. Without...

Linux Distros Unpatched Vulnerability : CVE-2026-101803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: XML. Supported versions that are affected are MySQL Server:...