CVE-2026-80731: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for CAPSYSRAWIO holders: if capableCAPSYSRAWIO memsetllheader + len, 0,...

PT-2026-90773

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

CVE-2026-65108

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

PT-2026-85274

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY MOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAY MOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay proce...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:21713-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21713-1 advisory. Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21724-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21724-1 advisory. Changes in chromium: - Chromium 152.0.7977.64 boo1276749, stable released 2026-08-25: CVE-2026-79282: Use after free in ANGLE CVE-2026-79290: Us...

PT-2026-85042

Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowing any web page to establish credentialed WebSocket connections to victim applications. Attackers can open socket.io sessions from arbitrary domains and invoke state variable modifications and actio...

PT-2026-84949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mtk mfg attach dev function reads the prev o variable during the first iteration of its loop before the variable is assigned a value. This results in the evaluation of an indetermina...

PT-2026-85296

Name of the Vulnerable Software and Affected Versions MOOS-IvP pRealm versions prior to 24.8.2 Description The pRealm component accepts unbounded REALMCAST REQ subscriptions without validating the duration or the limits of the variable list. This allows an attacker to register long-lived pipeways...

Fedora 45 : dracut (2026-5bf73fe397)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5bf73fe397 advisory. - fixdevicetree-firmware: include soc specific firmwares in installgeneric - fixdevicetree-firmware: include Qualcomm X2 laptop model specific firmwares -...

PT-2026-84926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel page fault occurs during probe failure or rollback in the Linux kernel. This is caused by the Last-In-First-Out LIFO nature of devres teardown, where the aperture devres node is...

Fedora 44 : firefox / nss (2026-42a3a95e62)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-42a3a95e62 advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...

Fedora 43 : firefox / nss (2026-208add2041)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-208add2041 advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...

TencentOS Server 3: perl-DBI:1.641 (TSSA-2026:0971)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0971 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-65108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a stack overflow flaw in slurmstepd when a job environment contains an oversized SPANK option variable. CVE-2026-65108 Note that...

PT-2026-85084

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate validation for outbound HTTPS connections by default. When the TLS CERTIFICATE VALIDATION environment variable is unset or set to false, the...

UBUNTU-CVE-2026-65108

Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable...

PT-2026-84939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the drm log draw kmsg record function when processing a message with a length of 0. Because the len variable is an unsigned integer, subtracting 1 from it...

PT-2026-84938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a scale value that is too large for the display causes the scaled font to exceed display dimensions, resulting in rows or columns becoming 0. Specifically, a column...

PT-2026-85301

Name of the Vulnerable Software and Affected Versions ui-moos versions prior to 50b9c6c Description A buffer overflow occurs in ScopeTabPane.cpp and ScopeGrid.cpp when client and variable names are formatted into fixed 1024-byte buffers using the sprintf function without length validation. An...