CVE-2026-75347

The EIPStackGroup OpENer software (versions v2.3 and master up to commit 76b95cf ) is vulnerable to an expired pointer dereference within the EtherNet/IP Common Packet Format (CPF) handling logic. This flaw allows a remote attacker to trigger a denial of service (DoS) condition. No specific remed...

EUVD-2026-95960

EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList implementation for the EtherNet/IP GetAttributeList service. This allows a remote attacker to cause a denial of service...

PT-2026-109296

Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer version 2.3 Description A buffer overflow exists in the GetAttributeList function used for the EtherNet/IP Get Attribute List service. This flaw allows a remote attacker to trigger a denial of service. Recommendations At t...

CVE-2026-104113: Double Free

A double free in the IP management daemon ipmgmtd of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree...

Aiohttp HTTP Client DoS

The vulnerability of the Aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-86463: Uncontrolled Resource Consumption

Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounters a long string without an operator, causing the parser to consume excessive CPU time. An attacker can send a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-107696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an infinite loop vulnerability in ffrtspconnect in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit...

AlmaLinux 10 : python3.14 (ALSA-2026:77018)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:77018 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of a...

openSUSE 16: jackson-annotations / jackson-annotations-javadoc / jackson-core / etc (openSUSE-SU-2026:22034-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22034-1 advisory. - CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues bsc1273856. - CVE-2026-19032:...

Linux Distros Unpatched Vulnerability : CVE-2026-107635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dislocker through 0.7.3 contains an integer underflow vulnerability in getvmk and getfvek that allows attackers to trigger out-of-bounds heap reads via crafted...

Elasticsearch 8.12.x < 8.19.23 / 9.3.x / 9.3.8 / 9.4.0 < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-195)

The version of Elasticsearch installed on the remote host is prior to 8.19.23, 9.4.8, or 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-195 advisory. - Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via...

Linux Distros Unpatched Vulnerability : CVE-2026-107708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client...

Elasticsearch 8.19.x < 8.19.22 / 9.1.x / 9.3.8 / 9.4.x < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-189)

The version of Elasticsearch installed on the remote host is prior to 8.19.22, 9.4.8, or 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-189 advisory. - Inefficient Regular Expression Complexity CWE-1333 in Elasticsearch can lead to denial of service via Regular...

MiracleLinux 9 : brotli-1.0.9-10.el9_8 (AXBA:2026-2004:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2004:03 advisory. - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compress...

AlmaLinux 10 : dovecot (ALSA-2026:79371)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:79371 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...

CentOS Linux 8.4 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791483256)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791483256 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for...

AlmaLinux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791530000)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791530000 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a differen...

PT-2026-109184

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

PT-2026-108818

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description The FIQL query parser contains a flaw in its operator search mechanism. When processing a long string that lacks an operator,...

Elasticsearch 9.2.x / 9.2.8 / 9.3.x / 9.3.8 / 9.4.x < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-190)

The version of Elasticsearch installed on the remote host is prior to 9.4.8 or 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-190 advisory. - Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an...