PT-2026-88605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolatio...

RHEL 10 : nodejs22 (RHSA-2026:64817)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64817 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

CVE-2026-86439 knowns before 0.30.0 Path Traversal via MCP doc and memory tools

knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory. Attackers can supply path arguments containing directory traversal sequences to access arbitrary Markdown files...

CVE-2026-80126

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

CVE-2026-80126

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

EUVD-2026-72491

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

CVE-2026-80126

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an Improper Locking vulnerability. A low-privileged attacker with remote network access could potentially exploit this flaw to obtain filesystem access on the applianc...

CVE-2026-80126

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

CVE-2026-80126: Improper Locking

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-80804

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the succe...

PT-2026-86842

Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description An improper locking issue exists where a low privileged attacker with remote access could potentially exploit the flaw to gai...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053340 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that ha...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053318 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfsinodeinfo after hfsallocinode Syzbot reports uninitialized...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053405)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053405 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: update sjournalinum if it changes after journal replay When mounting a crafted ext4 image,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053323 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053287)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053287 advisory. In the Linux kernel, the following vulnerability has been resolved: quota: flush quotareleasework upon quota writeback One of the paths quota writeback is called fr...

OESA-2026-3704 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The lengt...

CVE-2026-86118

gonic versions before 0.22.0 (a self-hosted media server by sentriz) contain a missing privilege check in the startScan endpoint of its Subsonic API. Because administrator privileges are not validated, any authenticated user can trigger a full media library rescan. An attacker can repeatedly invo...

SUSE CVE-2026-80804

In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfstransroll When xfstranscommit fails in xfstransroll, the NOFS context is cleared but only restored in the success path. This leaves the error path without nofs protection, causing a...

SUSE CVE-2026-80805

In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfsattr3leafverifyentry accesses lentry/rentry fields namelen, valuelen before checking if the entry pointer itself is within bounds. If nameidx is crafted to point near the en...