PT-2026-82899

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth hdr proto field When batadv get vid accesses the proto field of the ethernet header, it is not checking if the data itself is accessible. The caller is responsible for it. But in contrast to...

PT-2026-83362

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI affected versions not specified Description An unauthenticated network-reachable client can cause resource exhaustion by initiating a SASL-based login exchange and failing to complete it. Because the negotiation loop...

PT-2026-83027

CVE ID: CVE-2026-9548 Severity: MEDIUM | CVSS Score: 6.5/10 Severity and score come from CVSS ratings in the National Vulnerability Database NVD, the NIST repository of standardized vulnerability data. An improper neutralization of input during web page generation 'Cross-site Scripting'...

PT-2026-83070

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A host configured as a trusted proxy can send forwarding information containing a NUL byte. This causes the login process to crash during the subsequent login attempt, leading to process...

PT-2026-83058

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An attacker with valid credentials can establish multiple connections to the imap-hibernate service and send invalid commands. This action can trigger an intermittent out-of-bounds read, leading ...

PT-2026-83000

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmw external bo copy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped afte...

PT-2026-83359

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI affected versions not specified Description A database user with permissions to create a view in a namespace sampled by MongoDB Connector for BI can cause a denial of service by defining a view that reliably fails duri...

CVE-2026-33263

When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...

PT-2026-83051

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A crash can occur in the submission-login process when the mail max userip connections limit is reached, resulting in an epoll panic due to file descriptor handling issues. In high-security mode,...

Linux Distros Unpatched Vulnerability : CVE-2026-80670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but withou...

Linux Distros Unpatched Vulnerability : CVE-2026-80649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Fix OOB in scmipowernameget scmipowernameget does not validate the domain number passed by the external caller, which may lead to an...

Linux Distros Unpatched Vulnerability : CVE-2026-65979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.1...

The vulnerability of the af_alg_pull_tsgl() function in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the afalgpulltsgl function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the property.c component in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the property.c component in the console-based image editing tool ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfs/inode.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the integration module with the Cyrus SASL library for interacting with MongoDB databases. The C driver allows a hacker to cause a service failure.

The vulnerability of the integration module with the Cyrus SASL library for interacting with MongoDB databases involves copying buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the library for working with USB devices using libusb, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the library for working with USB devices using libusb is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure using a specially created image file...

The vulnerability of the Rsync file transfer and synchronization utility, related to errors in processing length parameters, allows a hacker to trigger a service failure.

The vulnerability of the Rsync file transfer and synchronization utility is related to errors in processing parameter length settings. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the modules/proxy/proxy_util.c component in the Apache HTTP Server web server allows a hacker to induce a service failure.

The vulnerability of the modules/proxy/proxyutil.c component in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...