RHEL 9 : kernel (RHSA-2026:64808)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64808 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcm...

Microsoft Exchange Server (September 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. CVE-2026-55007 - External control of file name...

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141)

The version of Adobe Reader installed on the remote Windows host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability tha...

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

NewStart CGSL MAIN 7.02 : libarchive Vulnerability (NS-SA-2026-0113)

The remote NewStart CGSL host, running version MAIN 7.02, has libarchive packages installed that are affected by a vulnerability: - A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow...

CVE-2017-6455

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

Security Bulletin: IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri (CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172)

Summary IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172. The fast-uri version has been updated within IBM ApplinX in order to address the mentioned...

Security update for c-ares

This update for c-ares fixes the following issues: CVE-2024-25629: out of bounds read in aresreadline bsc1220279. CVE-2025-31498: use-after-free in readanswers when processanswer may re-enqueue a query bsc1240955. CVE-2025-62408: c-ares 1.32.3-1.34.5 use after free bsc1254738. CVE-2026-33630:...

SUSE-SU-2026:4021-1 Security update for c-ares

This update for c-ares fixes the following issues: - CVE-2024-25629: out of bounds read in aresreadline bsc1220279. - CVE-2025-31498: use-after-free in readanswers when processanswer may re-enqueue a query bsc1240955. - CVE-2025-62408: c-ares 1.32.3-1.34.5 use after free bsc1254738. -...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities in various components

Summary IBM Cloud Pak for Data System 1.0 includes several open source and third-party components as part of its software stack. Multiple security vulnerabilities have been identified across various components including PLY, Apache HttpComponents, pyasn1, pip, and Eclipse Jetty. These...

CVE-2026-20510

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

EUVD-2026-72203

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

CVE-2026-20510

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

CVE-2026-20510

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

CVE-2026-20510

A double free vulnerability exists in the camera middleware , potentially allowing for local escalation of privilege . If a malicious actor has already obtained System privilege , they can exploit this flaw to gain higher permissions without any user interaction. Remediation is available via Patc...

CVE-2026-20510: Double Free

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

PT-2026-86605

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

PT-2026-86793

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...

PT-2026-86922

Improper Handling of Alternate Encoding vulnerability in ash-project ash double entry allows an attacker to submit several distinct string spellings of the same identifier. AshDoubleEntry.ULID renders a 128-bit ULID as 26 Crockford base-32 characters, but the first character encodes only 3 bits, ...

Linux Distros Unpatched Vulnerability : CVE-2026-80911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: sof-audio: Fix error path in sofwidgetsetupunlocked If either tplgops-daiconfig or widgetkcontrolsetup fail during widget setup we would double...