PT-2026-54452

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description Improper input validation in the modem can cause a system crash, leading to a remote denial of service. This occurs if a User Equipment UE connects to a rogue base station controlled by an...

PT-2026-54759

Name of the Vulnerable Software and Affected Versions gazebo plugins version 3.9.0 Description Improper input validation in the gazebo ros diff drive.cpp component allows attackers to cause a Denial of Service DoS by supplying a crafted geometry msgs::Twist message. Recommendations At the moment,...

WolfSSL wolfSSL X.509 iPAddress name constraints enforcement improper input validation vulnerability

Summary A improper input validation vulnerability exists in the X.509 iPAddress name constraints enforcement functionality of wolfSSL versions: 5.9.1. A specially crafted X.509 certificate chain can lead to bypass of iPAddress name constraints. An attacker can present a certificate with an IP SAN...

Linux Distros Unpatched Vulnerability : CVE-2026-13866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to...

Linux Distros Unpatched Vulnerability : CVE-2026-13920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the rendere...

PT-2026-54668

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.46 Description Insufficient validation of untrusted input in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HT...

PT-2026-54805

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bond do ioctl In bond do ioctl, slave dev is obtained via dev get by name which can return NULL if the requested interface name does not exist. However, the subsequent slave dbg call ...

PT-2026-54678

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46 Description Insufficient validation of untrusted input in ANGLE, a compatibility layer that translates OpenGL ES calls to other graphics APIs, allows a remote attacker to potentially perform a...

PT-2026-54903

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/blockConnectedTempAccountsField.Vue. This issue affects...

PT-2026-54454

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description Improper input validation in the Modem can cause a system crash. This allows a remote denial of service if a User Equipment UE connects to a rogue base station controlled by an attacker. The...

PT-2026-54918

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension versions prior to 1.43.9 Mediawiki - WikiLambda Extension versions prior to 1.44.6 Mediawiki - WikiLambda Extension versions prior to 1.45.4 Description Improper neutralization of input terminators in the...

PT-2026-54695

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.46 Description Insufficient validation of untrusted input in Dawn, a WebGPU implementation, allows a remote attacker who has already compromised the renderer process to potentially perform ...

Linux Distros Unpatched Vulnerability : CVE-2026-14135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process...

PT-2026-54744

Name of the Vulnerable Software and Affected Versions Guardian language-system affected versions not specified Description An unauthenticated remote attacker can execute arbitrary operating system commands on the server. This occurs because the application passes the id parameter from a GET reque...

PT-2026-54720

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron Bridge for Linux affected versions not specified Description An issue exists where improper validation of allowed inputs occurs. This could allow an attacker to achieve code execution, escalation of privileges, data tampering,...

PT-2026-54696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46 Description Insufficient validation of untrusted input in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A...

PT-2026-55158

Summary A memory-safety vulnerability in Open Babel's ORCA parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the nAtoms handling of the ORCA reader. A malformed input caused the parser to write past the end of its destination buffer. Impact Open Babe...

Linux Distros Unpatched Vulnerability : CVE-2026-49432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed...

Linux Distros Unpatched Vulnerability : CVE-2026-13781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to...

Linux Distros Unpatched Vulnerability : CVE-2026-58032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is...