SUSE CVE-2026-109733

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-110734: Out-of-bounds Write

Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...

CVE-2026-110736: Improper Validation of Specified Index, Position, or Offset in Input

Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimizedtranslation.cpp, OptimizedTranslation::getmessage. Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validation;...

CVE-2026-102178: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is...

CVE-2026-107870: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

CVE-2026-14765: Initialization of a Resource with an Insecure Default

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, which permits all URL schemes. On Windows, this results in a call ...

PT-2026-113681

The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server...

CVE-2026-102176: Buffer Copy without Checking Size of Input

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service an...

PT-2026-114123

Name of the Vulnerable Software and Affected Versions Godot Engine versions prior to 4.7.3 Description A heap out-of-bounds write exists in the binary resource loader within the ResourceLoaderBinary::get unicode string function located in core/io/resource format binary.cpp. The issue occurs when ...

PT-2026-113926

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service an...

PT-2026-113608

Name of the Vulnerable Software and Affected Versions Unreal Engine versions prior to 5.8.1 Description The software contains an insecure default configuration for the LaunchURL Blueprint node UKismetSystemLibrary::LaunchURL. The URL scheme filter FURLRequestFilter is empty by default, allowing a...

CVE-2026-110735: Signed to Unsigned Conversion Error

Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...

Juniper Junos OS Vulnerability (JSA112177)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA112177 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticate...

Juniper Junos OS Vulnerability (JSA112182)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA112182 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an...

CVE-2026-102078: Use After Free

A Use After Free vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When web filtering for TCP traffic is configured, a high volume of DNS requests increases the likelihoo...

Rocky Linux 10.2 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_82280)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682280 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...

PT-2026-114122

Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/image loader hdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...

PT-2026-114124

Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimized translation.cpp, OptimizedTranslation::get message. Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validatio...

VulnCheck KEV: CVE-2026-39949

Cacti ≤ 1.2.30 has an authenticated OS command injection flaw. Users with device and graph template creation privileges can put shell metacharacters in a device’s notes field. Cacti’s variable replacement engine inserts that field, unsanitized, into RRDtool command-line arguments through the...

Rocky Linux 9 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_80663)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680663 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fro...