PT-2026-82061

Name of the Vulnerable Software and Affected Versions UID Enterprise Agent affected versions not specified Description An improper input validation issue allows a malicious actor with network access and high privileges to perform command injection on the host device. Command injection is a...

CVE-2026-21809: Generation of Error Message Containing Sensitive Information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

Linux Distros Unpatched Vulnerability : CVE-2026-79066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass sit...

PT-2026-82162

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The xcrb msg to type6cprb msgx function lacks proper input validation. This leads to several issues: signed integer variables may overflow during 4-byte boundary alignment, resulting in...

Linux Distros Unpatched Vulnerability : CVE-2026-78976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypa...

Linux Distros Unpatched Vulnerability : CVE-2026-78980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin...

Linux Distros Unpatched Vulnerability : CVE-2026-79111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox vi...

Linux Distros Unpatched Vulnerability : CVE-2026-79260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...

Linux Distros Unpatched Vulnerability : CVE-2026-79121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentiall...

Linux Distros Unpatched Vulnerability : CVE-2026-79251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTM...

Linux Distros Unpatched Vulnerability : CVE-2026-79255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...

CVE-2026-75414

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...

EUVD-2026-66746

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...

PT-2026-82069

Name of the Vulnerable Software and Affected Versions UniFi Access Application affected versions not specified Description An improper input validation issue allows a malicious actor with network access and low privileges to perform command injection on the host device. Command injection is a fla...

PT-2026-82184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow can occur in the synaptics-rmi4 driver when the diagnostic report type is changed while streaming. Because V4L2 buffers are allocated based on the size at the star...

Linux Distros Unpatched Vulnerability : CVE-2026-79139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-77542: Improper Input Validation

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...

ALSA-2026:59997 Moderate: polkit security update

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones. Security Fixes: polkit: Polkit: Denial of Service via unbounded input processing through standard...

PT-2026-81976

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution . The vulnerability exists because the sqlResource.sql parameter, submitted via the ReportController.save() interface, is stored in the t_report_sql_resource table and subsequently embedded directly int...