Mitel MiCollab - Authentication Bypass

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...

CVE-2026-28854

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching...

CVE-2026-28854

The vulnerability in macOS allows a maliciously modified app to potentially bypass security measures and launch on the system. The root cause involves a lack of sufficient app bundle integrity checks . This issue is addressed and fixed in macOS Golden Gate 27 . No specific information regarding e...

CVE-2026-28854

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching...

EUVD-2026-104698

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching...

Atlassian Jira Service Management Data Center and Server 3.0.x < 10.3.26 / 10.4.x < 11.3.12 (JSDSERVER-16790)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16790 advisory. - In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC...

Linux Distros Unpatched Vulnerability : CVE-2026-98821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: reject polled dio with user integrity metadata IOCBHASMETADATA leaves iocb-private as a uiometa, while iocbbioiopoll expects a bio. Since 2729a60bbfb9,...

JFrog Artifactory 7.117.x < 7.117.25 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and...

JFrog Artifactory < 7.111.18 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and...

Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 / 11.0.0 (CONFSERVER-104469)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104469 advisory. - In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle f...

Linux Distros Unpatched Vulnerability : CVE-2026-98845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: Disable TPM on null key name mismatch The null key name check exists to protect against TPM reset attacks, so a mismatch should stop the device from servin...

JFrog Artifactory 7.125.x < 7.125.18 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and...

MiracleLinux 8 : kernel-4.18.0-553.170.1.el8_10 (AXSA:2026-2015:96)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2015:96 advisory. kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math CVE-2026-64102 kernel: vmxnet3: fix BUGON in vmxnet3gethdrlen for Gene...

JFrog Artifactory 7.133.x < 7.133.27 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and...

SUSE CVE-2026-98821

In the Linux kernel, the following vulnerability has been resolved: block: reject polled dio with user integrity metadata IOCBHASMETADATA leaves iocb-private as a uiometa, while iocbbioiopoll expects a bio. Since 2729a60bbfb9, metadata I/O always uses blkdevdirectIO, which never publishes the bio...

CVE-2026-110687

A flaw was found in perl-Cpanel-JSON-XS. When any key in a hash is UTF-8 flagged, every key is decoded as UTF-8 for the comparison, including byte-string keys that the encoder writes out as Latin-1 characters. A byte-string key whose bytes are valid UTF-8 is sorted out of order, and two keys that...

CVE-2026-110682

A flaw was found in perl-Cpanel-JSON-XS. The allownonref configuration is enabled by default, and the incrparse function inherits it. Because a top-level number, boolean true or false, or null has no closing delimiter, the incremental parser simply decodes whatever data has arrived at the time of...

CVE-2026-98533

A flaw was found in the Linux kernel's Integrity Policy Enforcement IPE subsystem. When dm-verity updates a root hash, the old hash can be freed while concurrent policy evaluation operations are still accessing it. A local attacker could exploit this use-after-free condition to trigger a Denial o...

CVE-2026-98534

A flaw was found in the Linux kernel's Integrity Policy Enforcement IPE subsystem. A local attacker can cause a denial of service DoS or potentially execute arbitrary code by triggering a race condition during policy management. This issue occurs when a newly loaded policy is audited after intern...

CVE-2026-107313

A flaw was found in the PostgreSQL JDBC Driver pgjdbc. When Generic Security Services GSS encryption is enabled, transmitting large data values can cause the driver to send stale buffer contents instead of the intended payload. Consequently, sensitive data from earlier queries on the same...