ROOT-OS-DEBIAN-12-CVE-2026-28493 CVE-2026-28493 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-28493 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...

PT-2026-35968

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE vulnerabilities exist in parse uname string remoted op.c. This function processes OS identification data from agents a...

Juniper Junos OS Vulnerability (JSA92860)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA92860 advisory. - An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface CLI of Juniper Networks Junos OS on SRX Series devices allows a...

The vulnerability of the fcoe_init() function in the drivers/scsi/fcoe/fcoe.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fcoeinit function in the drivers/scsi/fcoe/fcoe.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the rtw89.Append ProbeReq_ie() function in the driver/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89.Append ProbeReqie function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a service...

Mozilla Firefox ESR < 115.35.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.35.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-37 advisory. - Information disclosure due to incorrect boundary conditions in the Audio/Video component. This...

Juniper Junos OS Vulnerability (JSA96464)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA96464 advisory. - An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface UI of Juniper Networks Junos OS and Junos OS Evolved allows a local,...

Juniper Junos OS Vulnerability (JSA79179)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79179 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the the Public Key Infrastructure daemon pkid of Juniper Networks Junos OS allows an unauthenticat...

Google Chrome < 147.0.7727.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 147.0.7727.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202604stable-channel-update-for-desktop28 advisory. - Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to...

Important Photon OS Security Update - PHSA-2026-5.0-0836

Updates of 'ncurses' packages of Photon OS have been released...

TÜBİTAK BİLGEM Pardus OS My Computer 操作系统命令注入漏洞

TÜBİTAK BİLGEM Pardus OS My Computer is a desktop component provided by the Turkish company TÜBİTAK BİLGEM, which offers functions for viewing system hardware and resource information. Versions of TÜBİTAK BİLGEM Pardus OS My Computer prior to version 0.8.0, as well as versions 0.7.5 and earlier,...

The vulnerability of the mac80211 component in Linux operating systems allows attackers to compromise the accessibility of protected information.

The vulnerability of the mac80211 component in Linux operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Photon OS 4.0: Imagemagick PHSA-2026-4.0-1002

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1002. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the octep_device_setup() function in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the octepdevicesetup function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the cfg80211 component in Linux operating systems allows attackers to compromise data accessibility.

The vulnerability of the cfg80211 component in Linux operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to compromise data accessibility...

Juniper Junos OS Vulnerability (JSA79188)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79188 advisory. - A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows...

CVE-2026-7361

Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-7363

CVE-2026-7363 describes a use-after-free in Canvas in Google Chrome on Linux and ChromeOS prior to 147.0.7727.138, allowing a remote attacker to execute arbitrary code inside the sandbox. The issue affects Google Chrome: Linux/ChromeOS prior to the fixed build, with a high-severity (Critical) imp...

EUVD-2026-26106

OpenClaw before 2026.4.2 contains an improper access control vulnerability in the iOS A2UI bridge that treats generic local-network pages as trusted origins. Attackers can inject unauthorized agent.request runs by loading attacker-controlled pages from local-network or tailnet hosts, polluting...

What Anthropic’s Mythos Means for the Future of Cybersecurity

Two weeks ago, Anthropic announced that its new model, Claude Mythos Preview, can autonomously find and weaponize software vulnerabilities, turning them into working exploits without expert guidance. These were vulnerabilities in key software like operating systems and internet infrastructure tha...