Linux Distros Unpatched Vulnerability : CVE-2026-77341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly...

CVE-2025-36271: Use of a One-Way Hash without a Salt

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

PT-2026-83001

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmw cursor plane atomic check bounds cursor width and height only on the legacy update path; the SVGA CAP2 CURSOR MOB path -- the default on modern hosts -- accepts any size...

PT-2026-83319

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

PT-2026-83673

CVE ID :CVE-2026-14942 Published : Aug. 28, 2026, 1:07 p.m. | 2 hours, 44 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-55834: URL Redirection to Untrusted Site

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

ProFTPd 1.3.9 mod_sql SQL Injection / Remote Code Execution

ProFTPD versions prior to 1.3.9a contain an SQL injection vulnerability in the modsql module due to improper handling of attacker-controlled values considered already escaped. This exploit uses an authenticated FTP STOR filename to inject a stacked PostgreSQL query and execute an arbitrary...

openSUSE 16 Security Update : liboqs (openSUSE-SU-2026:21634-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21634-1 advisory. Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized encapsderand...

openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:21658-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- RU-2026:21658-1 advisory. Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only LICENSE.txt confirms it Correct Legal-Review-Notice usa...

PT-2026-82952

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-40018

None None None No publicly available exploits are known...

PT-2026-83257

Name of the Vulnerable Software and Affected Versions Pocket ID versions 2.6.0 through 2.8.0 Description The OIDC authorization page in the frontend redirects the browser to an attacker-controlled URL without consulting the backend redirect URI allow-list when the request uses prompt=none. An...

CVE-2026-40018: Improper Neutralization of Special Elements used in an SQL Command

None None None No publicly available exploits are known...

CVE-2026-13734: Authentication Bypass by Capture-replay

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

CVE-2026-80652: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

PT-2026-83322

Zephyr's WireGuard VPN data-plane receive handler wg process data message in subsys/net/lib/wireguard/wg crypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGE TRANSPORT DATA packet succeeded, the code committed several peer-state changes — update peer addr endpoi...

Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-11143)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Jetty. Vulnerability Details CVEID:CVE-2025-11143 DESCRIPTION: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing ...

Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-66675)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Struts Vulnerability Details CVEID:CVE-2025-66675 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issu...

aiosmtplib: STARTTLS response injection

Impact When a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately performs the TLS handshake without discarding any data still sitting in the receive buffer. Bytes the protocol read off the plaintext socket before the handshake survive across the...

GHSA-VXJ7-4XRP-5VR4 aiosmtplib: STARTTLS response injection

Impact When a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately performs the TLS handshake without discarding any data still sitting in the receive buffer. Bytes the protocol read off the plaintext socket before the handshake survive across the...