EUVD-2026-105315

When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make curl write a record that exceeds its line-length parsing limit. Consequently, any subsequent curl invocation reading from that same cookie jar using --cookie silently aborts parsing prematurely upon...

CVE-2026-87866

A flaw in curl allows a malicious server to bypass public key pinning when the application is built with the wolfSSL backend. During the TLS handshake, wolfSSL validates the connection, but curl's subsequent re-parsing of the certificate—tricked by a manipulated validity length field —extracts an...

CVE-2026-87866 wolfSSL public-key pinning bypass

When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the connection, but curl's subsequent re-parsing of the same certificate - tricked by a manipulated validity length field -...

CVE-2026-80876

A flaw was found in the Linux kernel's ring-buffer component. When 8-byte alignment is enforced, the system incorrectly calculates the length of small events. This error causes these events to report a data length that is 4 bytes larger than their actual size. This discrepancy can lead to...

CVE-2026-94018

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability stems from improper handling when Content-Length or Transfer-Encoding is included in HEAD requests, potentially leading...

Apache Traffic Server resource management error vulnerability

A resource management error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises from exhausting the worker pool of HTTP/1.1 sources by truncating the HTTP/2 Content-Length value, potentiall...

EUVD-2026-105132

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

CVE-2026-94018 NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

CVE-2026-94018 NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

CVE-2026-94018 NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

CVE-2026-94018

The NetX Duo Web HTTP server is vulnerable to a memory safety issue where it dereferences and releases an uninitialized pointer . This occurs when the server detects a Content-Length underflow while processing a PUT request. An unauthenticated remote client can trigger this condition by sending a...

CVE-2026-98600

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. This vulnerability allows an adjacent attacker within Bluetooth range to cause a Denial of Service DoS by transmitting a specially crafted frame with an extended length field. Because the kernel fails...

CLEANSTART-2026-JU41154 NewNTUnicodeString does not check for string length overflow

Security vulnerability affects the gatekeeper-fips package. NewNTUnicodeString does not check for string length overflow...

Security update for tinyproxy (critical)

openSUSE security update: security update for tinyproxy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22133-1 Rating: critical References: bsc1268474 bsc1268475 bsc1268476 Cross-References: CVE-2026-54387 CVE-2026-54388 CVE-2026-55202 Affected...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46136)

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buflen is used to limit the iterations for retrieving the country power setting and may underflow under certain conditions due to changes in the power table in...

Linux Distros Unpatched Vulnerability : CVE-2026-98597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC from the reported packet length, but compares that...

MiracleLinux 9 : bind-9.16.23-40.el9_8.10 (AXSA:2026-2017:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2017:12 advisory. bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling CVE-2026-19667 bind: BIND: Denial of Service via...

PT-2026-118436

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request...

RHEL 8 : libxml2 (RHSA-2026:80675)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80675 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Heap-based...