Security Advisory 0171

Security Advisory 0171 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73435 CVSSv3.1 Base Score: 8.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H CVSSv4.0 Base Score: 7.0...

Debian dsa-6491 : libpam-slurm - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6491 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 [email protected] https://www.debian.org/securit...

qt5-qtbase security update

5.15.9-11.1 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247216...

RockyLinux 9 : redis:7 (RLSA-2026:65120)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65120 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in Clust...

RockyLinux 9 : kernel (RLSA-2026:64808)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64808 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933...

ALSA-2026:65897 Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

PT-2026-89177

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

PT-2026-89179

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

EUVD-2026-75160

An out-of-bounds read in the stbspvsnprintf function stbsprintf.h of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service DoS via sending a crafted input...

EUVD-2026-75121

An issue in WIngs3D v.2.4.1 allows a local attacker to cause a denial of service via a crafted Wavefront OBJ file...

PT-2026-89053

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN VALUE to read unmapped memory, causing JVM...

PT-2026-89148

An out-of-bounds read in the gf dm get chunk data function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

EUVD-2026-75165

An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

PT-2026-89158

Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network...

PT-2026-89099

🚨 CVE-2026-87875 The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled...

CVE-2026-79516

An out-of-bounds read in the stbspvsnprintf function stbsprintf.h of nothings stb commit 31c1ad3 allows attackers to cause a Denial of Service DoS via sending a crafted input...

CVE-2026-79516

CVE-2026-79516 is an out-of-bounds read in the stbsp_vsnprintf function (stb_sprintf.h) of the nothings/stb library, as of commit 31c1ad3 . A crafted input can trigger the OOB read, leading to a Denial of Service . The CVSS 3.1 score is 4.0 (MEDIUM) with a local attack vector and high complexity ...

Linux Distros Unpatched Vulnerability : CVE-2026-87604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute...

openSUSE 16 Security Update : libidn (openSUSE-SU-2026:21758-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21758-1 advisory. This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Tenable has extracted the preceding...

Kibana 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 DoS (ESA-2026-163)

The version of Kibana installed on the remote host is 8.x prior to 8.19.16, or 9.0.x prior to 9.3.5, or 9.4.x prior to 9.4.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-163 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead...