CVE-2026-110596: Excessive Iteration

quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...

PT-2026-114038

quirc through 1.2 contains an excessive-iteration vulnerability in find alignment pattern in lib/identify.c that allows attackers to hang quirc end with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of region code...

PT-2026-114390

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq device register If dev set name fails in pwrseq device register, we jump to the err put pwrseq label before initializing pwrseq-targets. pwrseq release will try to iterate...

Chromecast web browsers DoS

The vulnerability of Chromecast web browsers Google Chrome and Microsoft Edge is related to insufficient validation of entered protected information. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

PT-2026-114248

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.0 through 4.0.23 RabbitMQ versions 4.1.0 through 4.1.14 RabbitMQ versions 4.2.0 through 4.2.9 RabbitMQ versions 4.3.0 through 4.3.4 Description The MQTT 5 parser in deps/rabbitmq...

PT-2026-114247

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.23 RabbitMQ versions 4.1.0 through 4.1.14 RabbitMQ versions 4.2.0 through 4.2.9 RabbitMQ versions 4.3.0 through 4.3.3 Description The optimized AMQP 1.0 server mode parser in deps/amqp10 common/src/amqp10...

CVE-2026-110603: Access of Uninitialized Pointer

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

UBUNTU-CVE-2026-98388

In the Linux kernel, the following vulnerability has been resolved: exec: docloseonexec before taking execupdatelock docloseonexec currently happens while holding the execupdatelock, which is used in a lot of places that access process state to synchronize access checks. I recently added another...

CVE-2026-110834: NULL Pointer Dereference

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

CVE-2026-67414: Uncontrolled Resource Consumption

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10common/src/amqp10binaryparser.erl materializes each element of AMQP 1.0 arrays whose shared constructor has zero width, while limiting only the number of elements in each array and not the...

PT-2026-114189

Name of the Vulnerable Software and Affected Versions NGINX Plus affected versions not specified NGINX Open Source affected versions not specified Description An issue exists when a location is configured using the alias directive combined with rewrite and a set or return directive that reference...

CVE-2026-110602: Access of Uninitialized Pointer

libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.4:CLSA-2026:1791965784)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791965784 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...

Unity Linux 20.1070a Security Update: rsyslog (UTSA-2026-130143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130143 advisory. A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cau...

RockyLinux 8 : glibc (RLSA-2026:80798)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80798 advisory. glibc: Fix out-of-bounds array write in tdelete CVE-2026-19542 glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 glibc: Non-progress DoS in...

Linux Distros Unpatched Vulnerability : CVE-2026-70181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-70181 Note that...

RHEL 10 : ipa (RHSA-2026:82935)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82935 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

Unity Linux 20.1070a Security Update: grafana-pcp (UTSA-2026-130112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130112 advisory. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a maliciou...

Linux Distros Unpatched Vulnerability : CVE-2026-97205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations,...

AlmaLinux 8 : kernel-rt (ALSA-2026:82806)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82806 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg...