PT-2026-89998

OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code. Description: The SymSpellModelSerializer.create...

PT-2026-90126

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encodi...

PT-2026-90199

In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme setup discard always maps sizeofstruct nvme dsm range NVME DSM MAX RANGES = 4096 bytes as the DSM payload however many ranges the command declares, because some devices ignore the 'Number...

Oracle Linux 9 : ELSA-2026-66366-0: / vim (ELSA-2026-663660)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663660 advisory. - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

Commvault 11.36.x < 11.36.123 / 11.40.x < 11.40.72 / 11.44.x < 11.44.20 / 11.46.x < 11.46.20 Missing Authorization (CV_2026_08_8)

The version of Commvault installed on the remote host is 11.36.x prior to 11.36.123, or 11.40.x prior to 11.40.72, or 11.44.x prior to 11.44.20, or 11.46.x prior to 11.46.20. It is, therefore, affected by a vulnerability as disclosed in Commvault advisory CV2026088. Cvlaunchd contained a missing...

PT-2026-90176

In the Linux kernel, the following vulnerability has been resolved: s390/cpum cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu cf events at first event...

PT-2026-89890

Mistral Vibe CVE-2026-87988, CVSS 10.0 arbitrary file access via missing path validation on commands that were treated as unconditionally allowed. Unauthenticated attacker can break out of the intended workspace and read files they shouldn’t. Another case where “the command is allowed” was confus...

Linux Distros Unpatched Vulnerability : CVE-2026-88016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with...

Linux Distros Unpatched Vulnerability : CVE-2026-88044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC...

RockyLinux 8 : kernel (RLSA-2026:66325)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66325 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: scsi: target:...

Fedora 45 : valkey (2026-3e6f9d599a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3e6f9d599a advisory. Valkey 9.1.2 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securit...

PT-2026-89889

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to cause...

CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 - RCE

!/usr/bin/env python3 Exploit Title: ILIAS save$this-filename - fileputcontents$filename, jsonencode$cookies. Attacker-chosen path + JSON-embedded PHP = webshell. Tested: ILIAS 10.9 on Rocky Linux 9 Apache + PHP-FPM 8.2, MariaDB bac...

Security update for python-jwcrypto (moderate)

openSUSE security update: security update for python-jwcrypto ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21827-1 Rating: moderate References: bsc1277639 bsc1278707 Cross-References: CVE-2026-80179 CVE-2026-84185 CVSS scores: CVE-2026-80179 SUSE...

Security update for containerized-data-importer1.65 (important)

openSUSE security update: security update for containerized-data-importer1.65 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21824-1 Rating: important References: bsc1238699 bsc1239322 bsc1241838 bsc1248946 bsc1251495 bsc1251689 bsc1253506 bsc12537...

Batten the Hatches: Cybersecurity with Military Mariners

Cyberwarfare has become a key component of contemporary geopolitical conflict. However, there has been extremely limited systematic investigation into how cybersecurity is handled by military organizations and personnel. The military context is unique compared to other operational ones, with...

PT-2026-89888

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...

PT-2026-89909

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

PT-2026-90196

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvme tcp recv data completes a request once the current C2HData PDU has been consumed. Nothing compares the total bytes received against the length the command asked for:...

PT-2026-89894

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1 V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync server daemon on TCP port 13136. The daemon...