RHEL 8 / 9 : Red Hat Service Interconnect 2.2.3 Release (rpms) (Moderate) (RHSA-2026:82316)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82316 advisory. Red Hat Service Interconnect 2.2 creates a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables...

UBUNTU-CVE-2026-110656

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check after advancing past ':'. A malicious or spoofed UPnP gateway on the local network can send a device description or SOAP...

Linux Distros Unpatched Vulnerability : CVE-2026-99999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network...

OpenJDK 7 <= 7u291 / 8 <= 8u282 / 11.0.0 <= 11.0.10 / 13.0.0 <= 13.0.6 / 15.0.0 <= 15.0.2 / 16.0.0 <= 16.0.0 Multiple Vulnerabilities (2021-04-20)

The version of OpenJDK installed on the remote host is 7 prior to 7u291 / 8 prior to 8u282 / 11.0.0 prior to 11.0.10 / 13.0.0 prior to 13.0.6 / 15.0.0 prior to 15.0.2 / 16.0.0 prior to 16.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-04-20 advisory. Please...

CVE-2026-101303: Incorrectly Specified Destination in a Communication Channel

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail networ...

PT-2026-115274

Name of the Vulnerable Software and Affected Versions BMC Helix Network Management on-prem versions prior to 26.3.01 Description An authentication bypass exists when SAML single sign-on is configured. This allows unauthenticated attackers to log in as the local administrator by submitting the...

UBUNTU-CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

UBUNTU-CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

PT-2026-115238

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the softwa...

PT-2026-115240

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free issue exists in Microsoft Office Word. This occurs when an application continues to use a pointer after it has been freed, which can be leveraged by an...

PT-2026-115248

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use after free issue exists in Microsoft Office Excel. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory corrupti...

PT-2026-115254

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code over a network...

PT-2026-115258

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

CVE-2026-108442: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108443: Off-by-one Error

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108446: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-108452: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-115236

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the softwa...