PT-2026-82088

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 3.11.0 through 3.17.0 Description An issue exists where the attach-consumer-label plugin fails to correctly sanitize certain input values. This allows an attacker to perform an authorization bypass or escalate privileges...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099014 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fecm: Refactor bind path to use free After an bind/unbind cycle, the ecm-notifyreq i...

Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2026-104840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104840 advisory. A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to...

Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...

Linux Distros Unpatched Vulnerability : CVE-2026-80184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104571 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098816 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq i...

RHEL 9 : rhc (RHSA-2026:60354)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60354 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099008 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schred: Replace direct dequeue call with peek and qdiscdequeuepeeked When red qdisc ha...

Linux Distros Unpatched Vulnerability : CVE-2026-79771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can...

Linux Distros Unpatched Vulnerability : CVE-2026-79772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of...

Next.js Unauthenticated RCE on Windows Servers

This module exploits a Remote Code Execution RCE vulnerability in Next.js applications hosted on Windows servers. Specifically crafted requests can execute arbitrary code on the target server. The affected versions include releases from 13.4.0 up to 15.5.24, and 16.0.0 up to 16.3.3, utilizing bot...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JWE.deserialize method jwcrypto/jwe.py:555, which calls rawjwe.split'.' on the input before checking that the compact serialization has the required five segments . An attacker...

PT-2026-82097

Name of the Vulnerable Software and Affected Versions Formidable Charts versions prior to 2.0.2 Description An issue exists that allows unauthenticated attackers to perform Directory Traversal, a method used to access files and directories that are stored outside the web root folder. By...

CVE-2026-80570: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

A Self-Evolving Multi-Agent Framework Defense against LLM Jailbreak Attacks

Large language models LLMs remain vulnerable to jailbreak attacks that exploit techniques such as role-playing, obfuscation, code transformation, and multi-step indirection to elicit harmful outputs. As jailbreak strategies keep emerging, defenses have proliferated in an ongoing cat-and-mouse gam...

PT-2026-82177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the decode locker function within cls lock client.c contains three unsafe decode operations. A malicious or compromised OSD Object Storage Device in a multi-tenant...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

RHEL 9 : rhc (RHSA-2026:60315)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60315 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104802 advisory. In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes...