PT-2026-70075

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description An issue exists where improper validation of the specified quantity in the input and the allocation of resources without limits or throttling allows for excessive...

PT-2026-70829

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls server input handler and create new connected udp socket in src/apps/relay/dtls listener.c retain OpenSSL dtls1 reassemble fragment state for a 35-byte fragmented ClientHello declaring a 650,000-byte...

Linux Distros Unpatched Vulnerability : CVE-2026-6368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which o...

PT-2026-70884

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent...

SUSE SLES12 Security Update : perl-Date-Manip (SUSE-SU-2026:3537-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3537-1 advisory. - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. -...

ALSA-2026:53846 Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices using iFCP gateways on a TCP/IP network. Security Fixes:...

The vulnerability of the Systemd service initialization and management subsystem, related to insecure privilege management, allows a attacker to trigger a service failure.

The vulnerability in the Systemd service initialization and management subsystem is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: wacom: use GFPATOMIC in wacomwacqueueflush wacomwacqueueflush is called via the .rawevent callback wacomrawevent wacomwacpenserialenforce wacomwacqueueflus...

PT-2026-70019

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description An unauthenticated attacker can exploit logical errors in the parsing of the DIAG protocol, which is a proprietary SAP protocol used for communication between th...

PT-2026-70020

Name of the Vulnerable Software and Affected Versions SAP SAPSPrint Service affected versions not specified Description Memory corruption exists in the handling of certain commands. An unauthenticated attacker can send specially crafted requests to trigger a buffer overflow, which leads to a...

Linux Distros Unpatched Vulnerability : CVE-2026-68091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes...

PT-2026-70094

Name of the Vulnerable Software and Affected Versions EAP affected versions not specified Description A flaw exists in the IIOP Internet Inter-ORB Protocol of EAP. The listener's NameService accepts bind operations without requiring authentication. This allows an attacker to hijack JNDI Java Nami...

RockyLinux 8 : kernel-rt (RLSA-2026:52761)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52761 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-68390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: hold hdev-lock for hciconnparams lookups hciconnparamslookup requires hdev-lock be held, otherwise the list iteration or param access is not...

The vulnerability of the `_flatten` and `_isEqual` functions in the JavaScript library for working with arrays, Underscore, allows attackers to cause a service failure.

The vulnerability of the flatten and isEqual functions in the JavaScript library for working with arrays, Underscore, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ALSA-2026:53847 Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices using iFCP gateways on a TCP/IP network. Security Fixes:...

CVE-2026-11811

The CVE-2026-11811 entry documents a socket-file-descriptor leak in the UpdateHub OTA client (start_coap_client) when connection-setup fails. The leak occurs because on failure paths the cleanup gate does not call cleanup_connection(), leaving an open descriptor in the global ctx.sock that is ove...

CVE-2026-11811 Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoS

The UpdateHub over-the-air update client's startcoapclient in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret 0 flag, but ret was set to -1 immediately after the socket was...

CVE-2026-6426 Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...