CVE-2026-76151

Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service application crash via an excessively large Cache-Control header value...

DEBIAN-CVE-2026-76151

Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service application crash via an excessively large Cache-Control header value...

CVE-2026-76151

CVE-2026-76151 is an out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing within the QtNetwork module of Qt Group Qt 6.0.0 through 6.8.8 and 6.9.0 through 6.11.1 . A remote attacker can trigger a denial of service (application crash) by sending an excessively la...

EUVD-2026-80385

Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service application crash via an excessively large Cache-Control header value...

CVE-2026-76151

Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service application crash via an excessively large Cache-Control header value...

CVE-2026-76151 Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)

Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service application crash via an excessively large Cache-Control header value...

[SECURITY] [DSA 6496-2] nginx regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6496-2 [email protected] https://www.debian.org/security/ Aron Xu September 16, 2026 https://www.debian.org/security/faq -...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2024-27815 XNU kernel heap buffer overflow in sbconcatm...

SUSE CVE-2026-89090

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

Linux Distros Unpatched Vulnerability : CVE-2026-92238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in...

Fedora 45 : roundcubemail (2026-6ab831c1c5)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ab831c1c5 advisory. Release 1.7.4 - Use X-Content-Type-Options:nosniff for attachment previews and downloads 10308 - zipdownload: Fix attachment filename sanitisation of backsla...

PT-2026-93900

Name of the Vulnerable Software and Affected Versions oRPC versions prior to 1.14.8 Description The CORS plugin in the @orpc/server package, specifically within packages/server/src/plugins/cors.ts, incorrectly copies the Vary request header from the client directly into the response. The Vary...

PT-2026-93802

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A flaw in the readField function allows a malicious or compromised AMQP broker to trigger an unhandled runtime panic, leading to a Denial of Service DoS by crashing the client process. T...

PT-2026-93387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the read log rec buf function within the NTFS3 file system. The issue occurs because the log-record header len value is taken directly from the on-disk...

CVE-2026-85732: Server-Side Request Forgery (SSRF)

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then...

PT-2026-93849

Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description The parseLink function in registry/remote/utils.go fails to validate the scheme, host, or port of absolute URLs provided in the Link response header from a registry. This allows a malicious registry ...

PT-2026-94067

Name of the Vulnerable Software and Affected Versions Higress versions prior to 2.2.4 Description The software panics when processing a Cookie header segment that lacks an equals sign. This failure causes the plugin wrapper to recover and return a continue action, which allows the request to bypa...

Linux Distros Unpatched Vulnerability : CVE-2026-19773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

CVE-2026-92790: Improper Check or Handling of Exceptional Conditions

Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header to skip rate limit checks and exceed...

CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...