85332 matches found
CVE-2026-82935
The mH-DEVELOPER smart home module is vulnerable because its production firmware ships with end-of-life, unsupported components, specifically Debian 8 and Node.js runtime v17.0.1 . These outdated components are susceptible to publicly known vulnerabilities that no longer receive security patches,...
ROOT-OS-DEBIAN-12-CVE-2026-66140 CVE-2026-66140 in exim4 - Patched by Root
Root has patched CVE-2026-66140 in the exim4 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-66141 CVE-2026-66141 in exim4 - Patched by Root
Root has patched CVE-2026-66141 in the exim4 package for Root:Debian:12. Multiple fixed versions available...
DEBIAN-CVE-2026-94285
An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...
CVE-2026-82935: Use of Unmaintained Third Party Components
mH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware. This exposes the device to publicly known vulnerabilities that will not receive security patches. An attacker could exploit these known flaws to execute arbitrary...
PT-2026-99867
Name of the Vulnerable Software and Affected Versions mH-DEVELOPER versions prior to 3.0.30 Description The smart home module uses an end-of-life and unsupported Debian 8 operating system and Node.js runtime v17.0.1 in its production firmware. This reliance on obsolete components exposes the devi...
Linux Distros Unpatched Vulnerability : CVE-2026-95622
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modemmanager - None Ubuntu Linux - Unknown description CVE-2026-95622 Note that Nessus relies on the presence of the package as reported by the...
Linux Distros Unpatched Vulnerability : CVE-2026-88841
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - busybox - None CVE-2026-88841 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...
Linux Distros Unpatched Vulnerability : CVE-2026-96544
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - gimp - None CVE-2026-96544 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...
DEBIAN-CVE-2026-96284
A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control...
DEBIAN-CVE-2026-96283
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...
DEBIAN-CVE-2026-96282
A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...
DEBIAN-CVE-2026-89136
When using RPK Raw Public Key, the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an unsolicited servercerttype=RawPublicKey which allowed a malicious or misbehaving server to bypass authentication. RPK is off by default and only enabled in --enable-rpk OR --enable-all OR...
Linux Distros Unpatched Vulnerability : CVE-2026-100395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - lxc - None CVE-2026-100395 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...
Linux Distros Unpatched Vulnerability : CVE-2026-95510
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - inetutils - None Ubuntu Linux - use of uninitialized struct sigaction CVE-2026-95510 Note that Nessus relies on the presence of the package as...
[SECURITY] [DSA 6518-1] incus security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6518-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 26, 2026 https://www.debian.org/security/faq -...
Debian dsa-6519 : python3-swift - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6519 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6519-1 [email protected] https://www.debian.org/security/ Moritz...
Debian dsa-6518 : golang-github-lxc-incus-dev - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6518 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6518-1 [email protected] https://www.debian.org/security/ Moritz...
DEBIAN-CVE-2026-91768
The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...
DEBIAN-CVE-2026-91765
cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...