PT-2026-98974

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

PT-2026-98909

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.14 RabbitMQ versions 4.0.x prior to 4.0.20 RabbitMQ versions 4.1.x prior to 4.1.11 RabbitMQ versions 4.2.x prior to 4.2.6 Description The Web STOMP WebSocket handler fails to enforce max frame size and log...

CVE-2026-53493

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

PT-2026-98797

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the is boot sector ntfs function fails to properly validate the sectors per cluster field in the boot sector. While it rejects values between 0x8...

CVE-2026-98102

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6mcdel1src When removing a source filter whose count reaches zero, ip6mcdel1src unlinks psf from pmc-mcasources. If the filter was previously active, the code moved psf directly into...

CVE-2026-97588

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly When hardware persistently returns -EBUSY after exhausting retries, the error propagates to cryptofinalizerequest. The crypto API's completion wrapper treats -EBU...

CVE-2026-98081

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if callzonefinish fails dozonefinish clears BLOCKGROUPFLAGZONEISACTIVE before finishing the zones. If callzonefinish then fails it returned early, leaving the now inactive block gro...

PT-2026-99128

Name of the Vulnerable Software and Affected Versions Esri LERC versions 4.1.0 and earlier Description Esri LERC is an open-source image or raster format designed for rapid encoding and decoding of pixel types. A heap-based out-of-bounds write occurs due to an integer overflow when the applicatio...

PT-2026-98948

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description During federated authentication OAuth, OIDC, or SAML, the system fetches a profile image URL from an external identity provider without verifying the target address. An actor with control over their...

openSUSE 16: erlang-rabbitmq-client / rabbitmq-server / etc (openSUSE-SU-2026:21903-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21903-1 advisory. - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP API accepts...

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely, allowing a hacker to cause service failures.

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

RHCOS 4 : OpenShift Container Platform 4.15.69 (RHSA-2026:67856)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67856 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

PT-2026-98796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF verifier where it can incorrectly infer that a pointer is non-null. This occurs during the processing of comparisons like rA == rB within the check cond jmp op...

Linux Distros Unpatched Vulnerability : CVE-2026-77422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in...

The vulnerability of the grep command in the jline-builtins module of the Java library for handling console input allows a attacker to cause a service failure.

The vulnerability of the grep command in the jline-builtins Java library for processing console input in JLine is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-93241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memcg: bypass the reclaim and oom killer for dying tasks once oomreaper is done At Meta, we are seeing instances where an OOM killed job is stuck in the exit pa...

Linux Distros Unpatched Vulnerability : CVE-2026-6669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows a maliciou...

Linux Distros Unpatched Vulnerability : CVE-2026-61814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks...

openSUSE 16 Security Update : google-osconfig-agent (openSUSE-SU-2026:21882-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21882-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs...

openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21927-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21927-1 advisory. Changes in apptainer: - Fix potential authentication bypass and deadlocks in the crypto/ssh library by updating golang.org/x/crypto to v0.56.0...