CVE-2026-76105: Use of Insufficiently Random Values

Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

Local Privilege Escalation via Command Injection in Brocade Fabric OS Diagnostic Utility

: An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A...

CVE-2026-106340: Missing Authorization

Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-104029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to...

PT-2026-106689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the RDMA/rxe component. The rxe get mcg function publishes a newly allocated multicast group in rxe-mcg tree before the backing Ethernet multicast...

Cisco ASA Argument Injection (CVE-2026-20016)

A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attack...

Linux Distros Unpatched Vulnerability : CVE-2026-104032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorizati...

Cisco ASA Protection Mechanism Failure (CVE-2020-3458)

Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software for the Firepower 1000 Series and Firepower 2100 Series Appliances could allow an authenticated, local attacker to bypass the secure boot mechanism. The...

RHEL 9 : firewalld (RHSA-2026:76844)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:76844 advisory. firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Security Fixes: firewalld: firewalld:...

PT-2026-107206

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A buffer overflow occurs in the OnGuard agent. This issue allows an authenticated local user to execute arbitrary code with elevated privileges on the host or cause a denial ...

PT-2026-106283

A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client connection terminates. A local attacker can exploit this vulnerability by maintaining an open connection and repeatedly...

PT-2026-106284

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...

CVE-2026-104032: Incorrect Behavior Order: Early Amplification

A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of...

CVE-2026-104036: Out-of-bounds Write

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

PT-2026-115069

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description The copy model function in scheduler/ipp.c creates a predictable file path in a directory writable by the lp-group. Because the file is opened as root without using O EXCL or O NOFOLLOW...

CVE-2026-86361: Incorrect Permission Assignment for Critical Resource

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-107240

Name of the Vulnerable Software and Affected Versions yawkat LZ4 Java versions 1.7.0 through 1.11.3 Description The net.jpountz.util.Native.load function creates an exclusive temporary .lck file using File.createTempFile but derives the native-library path by removing the suffix. Subsequently,...

PT-2026-106287

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description A flaw in the Kerberos Credential Manager KCM responder allows a local user to trigger a Denial of Service DoS by maintaining a persistent connection and repeatedly storing and destroying...

CVE-2025-71383

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...

PT-2026-107105

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in the ep free function within eventpoll.c can lead to a use-after-free scenario. This issue allows for local escalation of privilege without...