PT-2026-96297

Name of the Vulnerable Software and Affected Versions Jazzware RT1000 Edge webUI version 20.0.1 Description The upgrade package upload functionality allows an authenticated attacker with administrative privileges to upload server-side executable files. These files are stored in a web-accessible...

PT-2026-96270

Name of the Vulnerable Software and Affected Versions Moore Threads MTT S80 Driver Package versions prior to 340.151 Description A heap-based buffer overflow exists in the IOCTL Handler component within the mtdispkm64.sys library. The issue occurs in the sub 140001000 function and requires local...

CVE-2026-88738

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attacker with administrative privileges can upload a server-side executable file. The uploaded file is stored in a web-accessible executable location and can be...

SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:4061-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4061-1 advisory. Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:4060-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4060-1 advisory. Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes bsc1273091. Non security issue...

PT-2026-104828

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse entry point def in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

CVE-2026-53940: Improper Limitation of a Pathname to a Restricted Directory

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

CVE-2026-54584: External Control of File Name or Path

mport is the MidnightBSD Package Manager. mport before 2.7.8 used TMPDIR while extracting package metafiles, including when running as root or in setuid/setgid contexts. An attacker able to control the environment for a privileged mport invocation could redirect temporary metadata extraction to a...

CVE-2026-94424: Heap-based Buffer Overflow

A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was...

CVE-2026-88738

The Jazzware RT1000 Edge webUI v. 20.0.1 is affected by an unrestricted file upload vulnerability within the upgrade package upload functionality. An attacker with administrative privileges can upload a server-side executable file, which is stored in a web-accessible location. This allows for rem...

Oracle Linux 10 : yggdrasil-worker-package-manager (ELSA-2026-69099)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-69099 advisory. 0.2.3-8 - Rebuild against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

ALSA-2026:69099 Important: yggdrasil-worker-package-manager security update

yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that matc...

RHEL 10 : yggdrasil-worker-package-manager (RHSA-2026:69099)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69099 advisory. yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable...

Updated mpg123 package fixes security vulnerabilities

Updated packages fix security vulnerabilities, please se the reference...

yggdrasil-worker-package-manager security update

0.2.3-8 - Rebuild against updated golang...

CVE-2026-84304 affecting package azurelinux-image-tools for versions less than 1.6.0-3

CVE-2026-84304 affecting package azurelinux-image-tools for versions less than 1.6.0-3. An upgraded version of the package is available that resolves this issue...

CVE-2026-81871 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, opentofu, grafana-pyroscope, mcp-grafana, aws-otel-collector, datadog-agent, fluent-bit-plugin-loki, distribution, loki, grafana, grafana-mimir, zot, harbor-registry, grafana-alloy, falcosidekick, pulumi-kubernetes-operator, tempo, kots, cadd...

CVE-2026-81870 vulnerabilities

Vulnerabilities for packages: gitness, kubernetes-csi-driver-nfs, litestream, gitsign, cluster-api-ipam-provider-in-cluster, cluster-api-aws-controller, mcp-grafana, tfsec, helm-operator, vexctl, datadog-agent, distribution, cert-manager-cmctl, kine, gatekeeper, steampipe,...

GHSA-8WMF-6V46-5GFG vulnerabilities

Vulnerabilities for packages: aws-iam-authenticator-fips, zitadel, kubescape-server-fips, packer-fips, envoy-ai-gateway, kube-router, thanos-fips, cadence, etcd-fips, hubble-fips, kubernetes-csi-external-provisioner, kube-mgmt, tfsec, longhorn-manager, dynatrace-operator-fips,...

DEBIAN-CVE-2026-84451

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of uncdecoder::getcompressedimagedatauncompressed in libheif/codecs/uncompressed/uncdecoder.cc retains an addition-based range check that can wrap when a crafted uncompressed tile gr...