PT-2026-68479

Name of the Vulnerable Software and Affected Versions Element Pack Addons for Elementor versions prior to 8.3.16 Description An Email Header Injection issue exists due to insufficient sanitization of newline characters in user-supplied input that is concatenated into email headers. This allows...

Fedora 44 : trafficserver (2026-5bec7441bb)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5bec7441bb advisory. Update to upstream 10.1.4 Resolves: - CVE-2026-22068 - Unanchored regular-expression matching allows ACL and policy bypass - CVE-2026-33267 -...

EulerOS 2.0 SP13 : perl-libwww-perl (EulerOS-SA-2026-3037)

According to the versions of the perl-libwww-perl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross- origin redirects. On a 3xx...

CVE-2026-0673: Improper Neutralization of CRLF Sequences

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the elementpackcontactform AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated...

Linux Distros Unpatched Vulnerability : CVE-2026-45100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the s.b64enco...

EulerOS 2.0 SP13 : perl-HTTP-Tiny (EulerOS-SA-2026-2986)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated input...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-2935)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine...

EulerOS 2.0 SP13 : python3 (EulerOS-SA-2026-3045)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted the preceding...

PT-2026-68941

Impact h2 =4.4.0 accepts request header blocks containing more than one Host header, and forwards every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request carries two Host header lines, which is a request smuggling primitive CWE-444...

PT-2026-68733

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 15.108.0 Frappe versions prior to 16.18.3 Description Temporary magic login link generation can use an attacker-controlled request Host header. This allows a remote attacker to cause emailed login links to point to a...

Unbreakable Enterprise kernel security update

6.12.0-204.92.4.4.3 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832878 CVE-2026-64561 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832867 CVE-2026-68480 6.12.0-204.92.4.4.2 - net: tap: set...

TencentOS Server 3: perl:5.32 (TSSA-2026:0803)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0803 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP15 : perl-HTTP-Tiny (EulerOS-SA-2026-2940)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.x000D x000D The...

CVE-2026-47194: Origin Validation Error

Frappe is a full-stack web application framework. Prior to 15.108.0 and 16.18.3, temporary magic login link generation can use an attacker-controlled request Host header, allowing a remote attacker to cause emailed login links to point to an attacker-controlled domain and capture the login token...

EulerOS 2.0 SP15 : perl-HTTP-Tiny (EulerOS-SA-2026-2899)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.x000D x000D The...

EulerOS 2.0 SP13 : python3 (EulerOS-SA-2026-2995)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted the preceding...

EulerOS 2.0 SP13 : python-urllib3 (EulerOS-SA-2026-3044)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via...

EulerOS 2.0 SP13 : python-urllib3 (EulerOS-SA-2026-2994)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via...

PT-2026-68817

Name of the Vulnerable Software and Affected Versions h2 versions prior to 4.4.1 Description The software accepts request header blocks containing multiple Host headers and forwards all of them to the consuming application. When the consumer downgrades the connection from HTTP/2 to HTTP/1.1, the...

The vulnerability of the __ioam6_fillTraceData() and ioam6_validateTraceHdr() functions in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ioam6fillTraceData and ioam6validateTraceHdr functions in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...