Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104803)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104803 advisory. Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098902)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098902 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061551 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.7.36 and prior and 8.0.27 a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104792 advisory. Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...

Linux Distros Unpatched Vulnerability : CVE-2026-79771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can...

Linux Distros Unpatched Vulnerability : CVE-2026-16599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line ...

PT-2026-82109

Name of the Vulnerable Software and Affected Versions Starlette-Admin versions prior to 0.16.1 Description An authenticated user with access to a list endpoint can bypass administrative interface restrictions by submitting arbitrary field names to the starlette admin/base.py and BaseModelView...

PT-2026-82106

Name of the Vulnerable Software and Affected Versions loramac-node affected versions not specified Description The LoRaWAN TS004 Fragmented Data Block Transport handler frag transport package callback in subsys/lorawan/services/frag transport.c parses downlink command bytes without validating if...

EUVD-2025-210800

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

EUVD-2026-66752

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

PT-2026-82045

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

PT-2026-82194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fb io read function where a pointer desynchronization occurs if copy to user performs a partial copy, such as when a user buffer is faulty. In this scenario, the...

CVE-2025-70293

An integer overflow vulnerability exists in Denx U-Boot prior to version 2026.04 , specifically in the function ext4fs_get_bgdtable . The flawed size calculation can result in an underallocated buffer that is subsequently passed to memcpy(), potentially leading to arbitrary code execution , denia...

PT-2026-82138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra gcm do one req function where the rctx-cryptlen calculation is performed incorrectly. If a caller fails to invoke tegra gcm setauthsize, the ctx-authsize...

PT-2026-82200

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the s390/qeth component where the qeth snmp command and qeth l3 arp query functions allocate a buffer based on a user-supplied length udata len without verifying a low...

PT-2026-82142

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC tas2562 component where the tas2562 volume control put function fails to validate control values written by userspace. This lack of validation allows the...

PT-2026-82152

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xlog recover do reg buffer function fails to properly validate the bounds of a buffer log item's dirty bitmap. During mount-time log...

EUVD-2026-66663

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

CVE-2025-61479

Vanderbilt Industries Acre Security SPC5300.000 Main Board version 3.14.1 is affected by a denial-of-service vulnerability. The root cause is that SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session, allowing a physically proximate attacker to ...