Linux Distros Unpatched Vulnerability : CVE-2026-79590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that...

Linux Distros Unpatched Vulnerability : CVE-2026-45766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certai...

CVE-2026-87986: Improper Handling of Syntactically Invalid Structure

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...

The vulnerability of the parseRibEntry() function in the pkg/packet/mrt/mrt.go file of the GoBGP edge router protocol allows a attacker to cause a service failure.

The vulnerability of the parseRibEntry function in the pkg/packet/mrt/mrt.go file of the GoBGP firewall protocol is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the audio stream parser of the GPAC multimedia platform, which allows a hacker to cause a service failure.

The vulnerability of the Opus audio stream parser on the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-68006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file CVE-2026-68006 Note that...

The vulnerability of the gf_hevc_read_sps_bs_internal() function in the media_tools/av_parsers.c file of the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the gfhevcreadspsbsinternal function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-90324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the ecryptfs parse packet set function incorrectly calculates the remaining packet buffer size using PAGE SIZE - 8. In cases involving...

CVE-2026-78127: Missing Release of Memory after Effective Lifetime

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

CVE-2026-78131: Missing Release of Memory after Effective Lifetime

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

Linux Distros Unpatched Vulnerability : CVE-2026-45769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2...

Linux Distros Unpatched Vulnerability : CVE-2026-88914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an...

Linux Distros Unpatched Vulnerability : CVE-2026-57227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQT...

CVE-2026-78130: NULL Pointer Dereference

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

The vulnerability of the gf_opus_parse_packet_header() function in the media_tools/av_parsers.c file of the multimedia platform GPAC allows a hacker to cause a service failure.

The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file of the multimedia platform GPAC is related to incorrect numerical calculations when processing values with a comma-separated format. Exploiting this vulnerability could allow an attacker to cause service...

PT-2026-90141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap read exists in the hp-bioscfg component of the x86 platform. The function hp init bios package attribute validates the obj-package.count but subsequently calls hp...

The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP allows a attacker to compromise the integrity of the protected information.

The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the ParseBody() function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol allows a attacker to cause a service failure.

The vulnerability of the ParseBody function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol is related to the situation where the output of the operation goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...