Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100557 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpfmsgpushdata When bpfmsgpushdata inserts data in the...

Linux Distros Unpatched Vulnerability : CVE-2026-19968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces3DGSMDL7 in the...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-099446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099446 advisory. A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing manipulation results in unchecked return...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100585)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100585 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that t...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-099499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099499 advisory. A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-099486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099486 advisory. libexpat before 2.8.2 has an integer overflow in addBinding. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099478 advisory. Unity Link Advisory UTSA-2026-099478 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

PT-2026-73338

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

PT-2026-73317

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

PT-2026-73360

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...

PT-2026-73213

A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of the component Configuration Management. The manipulation of the argument action results in authorization bypass. The attack ma...

Snapd Privilege Escalation

The vulnerability of the Snapd service in Ubuntu operating systems is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-76827

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote cross site scripting occurs due to improper handling of the course argument within the '/BSCE2.php' endpoint. Cross site scripting is a technique where malicious...

PT-2026-76804

Name of the Vulnerable Software and Affected Versions MemOS affected versions not specified Description In deployments where authentication is enabled via AUTH ENABLED=true but the INTERNAL SERVICE SECRET environment variable is not set, the is internal request function in...

PT-2026-73217

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...

PT-2026-73221

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

PT-2026-76602

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP COOKIE can lead to...

PT-2026-76765

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1200L version 9.3.5u.6146 B20201023 Description A remote attack can be launched against the /cgi-bin/cstecgi.cgi endpoint by manipulating the setWizardCfg function, leading to a null pointer dereference. A null pointer dereference...

PT-2026-76882

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /edit subject2.php file that allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application...

PT-2026-73184

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...