PT-2026-85285

Name of the Vulnerable Software and Affected Versions MOOS essential-moos versions prior to 10.0.2 Description A buffer overflow exists in the CMOOSUDPLink::ReadPktFromArray function. Remote attackers can corrupt heap memory by sending crafted UDP datagrams with negative declared lengths to the...

The vulnerability in the net_openvswitch/flow_netlink.c module of the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the netopenvswitch/flownetlink.c module in the Linux operating system is related to errors in processing parameter length settings. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-84380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header...

PT-2026-85368

It was discovered that SSSD did not properly validate authentication token lengths when processing PAM responder requests. A local attacker could possibly use this issue to cause SSSD to crash, resulting in a denial of service...

CVE-2026-85441: Signed to Unsigned Conversion Error

MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator. Unauthenticated attackers can send a crafted message with a negative length value to the MOOSDB port, causing an unhandled exception that terminates the database process...

PT-2026-85286

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description Multiple buffer overflow issues exist in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched...

PT-2026-85291

Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description An issue exists where the software fails to validate packet length declarations in the CMOOSCommPkt::OnBytesWritten function. This allows unauthenticated attackers to trigger unbounded buffer...

PT-2026-85289

Name of the Vulnerable Software and Affected Versions core-moos versions prior to 10.4.1 Description A pre-authentication heap overflow exists in MOOSCommPkt packet handling. Remote attackers can write arbitrary data by declaring a negative packet length. This is achieved by exploiting a signed...

Linux Distros Unpatched Vulnerability : CVE-2026-85150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate heade...

PT-2026-84940

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where sending zero-byte packets via the TPACKET ring buffer on devices without a hard header where dev-hard header len is 0 can trigger a warning in t...

PT-2026-84939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the drm log draw kmsg record function when processing a message with a length of 0. Because the len variable is an unsigned integer, subtracting 1 from it...

Linux Distros Unpatched Vulnerability : CVE-2026-75538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length...

Oracle Linux 10 : ELSA-2026-61241-0: / pipewire (ELSA-2026-612410)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612410 advisory. 1.4.11-1.1 - Fix CVE-2026-14324: limit RTSP Content-Length and check allocation in RAOP client Resolves: RHEL-249305 Tenable has extracted the preceding...

CVE-2026-84380

A flaw was found in HTTPX2, a Python HTTP client. The Request.prepare function can incorrectly add a Content-Length header to a request that already includes a Transfer-Encoding header. This conflict in HTTP framing headers can lead to request smuggling or connection desynchronization. This could...

CVE-2026-84380

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

CVE-2026-84380 HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

CVE-2026-84380

HTTPX2 , a next-generation HTTP client for Python, contains a request-smuggling vulnerability prior to version 2.11.0 . The flaw resides in Request._prepare() in _models.py, where its setdefault() logic checks Content-Length and Transfer-Encoding headers independently instead of treating them as ...

CVE-2026-84380 HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

CVE-2026-84380 HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated

HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request.prepare in src/httpx2/httpx2/models.py can add a body-derived Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header because its setdefault processing checks each default head...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...