CVE-2026-90554 vLLM before 0.28.0 Denial of Service via audio extraction

vLLM versions =0.10.2 and 0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nanonemotronvl.py, extractaudiofromvideos calls loadaudiopyavBytesIOvideobytes without the maxdurations or maxdecodebytes parameters, so neith...

CVE-2026-90554: Uncontrolled Resource Consumption

vLLM versions =0.10.2 and 0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In nanonemotronvl.py, extractaudiofromvideos calls loadaudiopyavBytesIOvideobytes without the maxdurations or maxdecodebytes parameters, so neith...

Linux Distros Unpatched Vulnerability : CVE-2026-89650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads numexporttargets from each per-mds info record and advances the...

CVE-2026-89653

A flaw was found in the Linux kernel's Ceph file system client. When decoding metadata server maps MDSMap, the client fails to properly validate rank identifiers within export targets against protocol limits. A malicious or compromised Ceph storage monitor can send a crafted map that triggers an...

DEBIAN-CVE-2026-89649

In the Linux kernel, the following vulnerability has been resolved: ceph: bound xattr value length in buildxattrs buildxattrs decodes the MDS-supplied xattr blob one attribute at a time. For each attribute it reads a 32-bit name length, advances past the name bytes, reads a 32-bit value length,...

DEBIAN-CVE-2026-89529

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject oversized Read segments at decode time The RPC/RDMA Read list decoder stores wire-supplied segment lengths without validation. xdrcountreadsegments checks 4-byte alignment for non-zero position values but does not...

MGASA-2026-0391 Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

DEBIAN-CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

UBUNTU-CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020 Orthanc DICOM Server Integer Overflow or Wraparound

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

EUVD-2026-76113

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020 Orthanc DICOM Server Integer Overflow or Wraparound

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

CVE-2026-87020

Orthanc DICOM Server (headquartered in Belgium, deployed worldwide in the healthcare sector) is vulnerable to an integer overflow in its pitch and buffer-size computation when decoding an attacker-supplied PNG or JPEG image. This leads to a heap out-of-bounds write , resulting in a process crash ...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

PT-2026-89752

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...

CVE-2026-87020: Integer Overflow or Wraparound

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...

Oracle Linux 10 : ELSA-2026-65899-0: / postgresql16-postgis (ELSA-2026-658990)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658990 advisory. 3.5.3-4.1 - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding Tenable has extracted the preceding description block directly from the...