CVE-2026-77486: Integer Overflow or Wraparound

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69418: Heap-based Buffer Overflow

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-49879: Out-of-bounds Write

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-69878: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...

CVE-2026-69790: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

PT-2026-87980

🚨 CVE-2026-77906 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 🎖@cveNotify...

CVE-2026-69462: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

EulerOS 2.0 SP12 : httpd (EulerOS-SA-2026-3343)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are...

EulerOS 2.0 SP12 : haproxy (EulerOS-SA-2026-3267)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

KB5123065: Windows Server 2012 Security Update (September 2026)

The remote Windows host is missing security update 5123065. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-3319)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3363)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

NewStart CGSL MAIN 7.02 : libssh2 Multiple Vulnerabilities (NS-SA-2026-0094)

The remote NewStart CGSL host, running version MAIN 7.02, has libssh2 packages installed that are affected by multiple vulnerabilities: - A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such...

Oracle Linux 9 : ELSA-2026-64784-0: / 389-ds-base (ELSA-2026-647840)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647840 advisory. - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

CVE-2026-68878: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-3333)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a...

The vulnerability of the ogs_sbi_timeParse() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogssbitimeParse function, a component of the NR/LTE Open5GS network creation and management tool, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

NewStart CGSL MAIN 7.02 : pyOpenSSL Multiple Vulnerabilities (NS-SA-2026-0110)

The remote NewStart CGSL host, running version MAIN 7.02, has pyOpenSSL packages installed that are affected by multiple vulnerabilities: - pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to...

KB5122876: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2026)

The remote Windows host is missing security update 5122876. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

RHEL 9 : 389-ds-base (RHSA-2026:64778)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64778 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...