PT-2026-103001

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 41.1 Description Improper input validation in the media implementation allows a remote attacker to trigger a software abort, leading to a denial of service. Recommendations Update Pexip Infinity to version 41.1...

PT-2026-103010

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 38.2 Pexip Infinity version 39.0 Pexip Infinity version 39.1 Pexip Infinity version 40.0 Description Improper access control on a product-internal API allows an attacker with local access to a node within an...

CVE-2026-93995: Improper Input Validation

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

ROS-20260930-73-0102

The vulnerability of the hwtracing/intelth/core.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0121

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0137

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0050

The vulnerability of the btrfs/transaction.c component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0071

The vulnerability in the can/usb/kvaserusb/kvaserusbcore.c file of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel DRI DoS

The vulnerability of the rzg2lmipidsiatomicdisable function in the drivers/gpu/drm/renesas/rz-du/rzg2lmipidsi.c driver of the Direct Rendering Infrastructure DRI component of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can...

Crosswork Data Gateway Path Traversal

The vulnerability of the Crosswork Data Gateway data collection platform is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nfqnlrecvverdict function in the net/netfilter/nfnetlinkqueue.c module of the netfilter component of the Linux operating system is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause a service failure...

amd amdgpu sdma_v4_0 Ring Eruption DoS

The vulnerability of the sdmav40ringemitfence function in the drivers/gpu/drm/amd/amdgpu/sdmav40.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cau...

mcp23s08_probe_one Heap Buffer Overflow DoS

The vulnerability of the mcp23s08probeone function in the drivers/pinctrl/pinctrl-mcp23s08.c driver for Linux kernel’s PINCTRL output ports is related to improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the eip93unregisteralgs function in the drivers/crypto/inside-secure/eip93/eip93-main.c file of the Linux kernel cryptographic accelerator driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause...

AlmaLinux 9.2 [TuxCare] Security Update: containernetworking-plugins (ALMALINUX9.2:CLSA-2025:1762181347)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762181347 advisory. - Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1768213076)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1768213076 advisory. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables se...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1788433791)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788433791 advisory. - rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete...

CentOS Linux 7 [TuxCare] Security Update: minizip / minizip-devel / zlib / zlib-devel / zlib-static (CENTOS7:CLSA-2025:1757247437)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757247437 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...

TencentOS Server 4: tomcat (TSSA-2026:1064)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1064 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CentOS Linux 6 [TuxCare] Security Update: libsss_idmap / libsss_simpleifp / python-sss / python-sss-murmur / etc (CENTOS6:CLSA-2025:1748947069)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1748947069 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...