Linux Distros Unpatched Vulnerability : CVE-2026-80706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: softing: fwparse: validate firmware record spans fwparse reads a fixed record header, a firmware-provided payload, and a trailing checksum without knowing...

Linux Distros Unpatched Vulnerability : CVE-2026-80717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its paramete...

The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.

The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the udhcp_getoption() function in the networking/udhcp/common.c component of the BusyBox command-line utility tools allows a attacker to gain access to confidential data.

The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...

CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

EUVD-2026-67080

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

CVE-2026-71402 wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

PT-2026-82548

Name of the Vulnerable Software and Affected Versions wicked versions prior to 0.6.81 Description An out-of-bounds read exists in the DHCPv4 packet capture code. The function ni capture inspect udp header in src/capture.c incorrectly reports the IP total length as the payload length instead of th...

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1679:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1679:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

RLSA-2026:59362 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

nginx security update

An update is available for nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a foc...

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:59496 Important: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098823 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdtloader: Ensure we don't read past the ELF header When the MDT loader is used in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104774 advisory. Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is t...

PT-2026-82105

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The LoRaWAN application-layer clock-synchronization service contains an issue in the clock sync package callback function within subsys/lorawan/services/clock...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libesmtp (UTSA-2026-093144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093144 advisory. libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read...

RockyLinux 9 : nginx:1.26 (RLSA-2026:59496)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59496 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-80558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: Avoid using invalid osd indices from primarytemp A corrupted osdmap received from a Ceph monitor or OSD may contain osd indices in its pgtemp,...

RockyLinux 9 : nginx (RLSA-2026:59362)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59362 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...