PT-2026-88452

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...

ALSA-2026:64772 Important: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

RHEL 8 : xmlrpc-c (RHSA-2026:64772)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64772 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

CVE-2026-86539

knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal hosts and cloud metadata endpoints by observing transport...

SUSE CVE-2026-80882

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in tegraccmdoonereq...

SUSE CVE-2026-80888

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...

Security update for bzip2

This update for bzip2 fixes the following issue: CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...

ROS-20260907-73-0010

The vulnerability in libssh is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260907-73-0056

The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the certificate validation process. This allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

ROS-20260907-73-0035

The vulnerability in ffmpeg is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20260907-73-0500

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260907-73-0043

The vulnerability in Erlang is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-80821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the...

Linux Distros Unpatched Vulnerability : CVE-2026-80882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in...

Linux Distros Unpatched Vulnerability : CVE-2026-80911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: sof-audio: Fix error path in sofwidgetsetupunlocked If either tplgops-daiconfig or widgetkcontrolsetup fail during widget setup we would double...

The vulnerability of the Util-linux command-line utility suite relates to deficiencies in handling error situations, allowing attackers to exploit their privileges.

The vulnerability of the Util-linux command-line utility package is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the software for providing secure remote access to data in Palo Alto Networks’ GlobalProtect App is related to synchronization errors when using a common resource. This allows attackers to elevate their privileges to the root level.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

CVE-2026-86297: Off-by-one Error

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnelsetparams of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peerhostname leads to off-by-one. The attack may be performe...

CVE-2026-86315: Numeric Truncation Error

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...