Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099778 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftfib: fix stale stack leak via the OIFNAME register For NFTFIBRESULTOIFNAME the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100559 advisory. In the Linux kernel, the following vulnerability has been resolved: keys: Pin requestkeyauth payload in instantiate paths A: requestkey B: KEYCTLINSTANTIATEIOV...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100753 advisory. In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers pskbcarveinsideheader and...

The vulnerability of the clk-rcg2.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the clk-rcg2.c component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the PolicyReference programming interface in the Java framework of Apache Neethi allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PolicyReference programming interface in the Apache Neethi Java framework is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-73185

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces 3DGS MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer...

PT-2026-73219

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A remote cross site scripting issue exists in the offersmail.php file. This occurs when the email argument is manipulated, allowing an attacker to execute malicious scripts in the...

Linux Distros Unpatched Vulnerability : CVE-2026-19970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100574)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100574 advisory. In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfatfinddirentry In exfatfinddirentry, the bufferhead...

PT-2026-76804

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTH ENABLED=true but the undocumented, defaultless INTERNAL SERVICE SECRET environment variable is unset, the is internal request check in src/memos/api/middleware/auth.py fails open:...

CVE-2026-19964 Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection

A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jijmcp/pythonrepr.py of the component jmcheck. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2026-19964

The CVE-2026-19964 entry concerns Jij-Inc Jij-MCP-Server 0.1.0. It affects the PythonREPL.run function in jij_mcp/python_repr.py (component jm_check). The manipulation of the argument code leads to code injection, with remote exploit potential. The vulnerability has been publicly disclosed, and a...

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2026-19961

A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and ma...

CVE-2026-19959

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2026-19958

A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-19962 Edimax EW-7478APC setWAN command injection

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

CVE-2026-19961 Edimax EW-7478APC formWlSiteSurvey buffer overflow

A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and ma...

CVE-2026-19961 Edimax EW-7478APC formWlSiteSurvey buffer overflow

A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and ma...