SUSE CVE-2026-78131

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

SUSE CVE-2026-78132

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...

PT-2026-89305

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPIC-Library in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem inside the function bhi360 parse debug message in bhi360 parse.c...

EUVD-2026-75664

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...

CVE-2026-68006

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...

PT-2026-89493

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

ROS-20260910-73-0085

The vulnerability of the Parser component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-65639: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

PT-2026-89511

Name of the Vulnerable Software and Affected Versions Puma versions 5.0.0 through 8.0.2 Description An issue exists that allows an attacker to execute arbitrary code via the ext/puma http11/http11 parser.rl file. Recommendations Update Puma to version 8.0.3 or later...

CVE-2026-68006

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0 . An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, leading to undefined behavior and an application crash ...

CVE-2026-45769: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessi...

PT-2026-89332

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI C library within the debug message parser function bhi385 parse debug message located in bhi385 parse.c. The function parses FIFO events and extracts an 8-bit message length directly from the...

Ubuntu 20.04 LTS / 22.04 LTS : Apache Tika vulnerability (USN-8717-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8717-1 advisory. It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Ti...

CVE-2026-68006

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...

PT-2026-89615

Name of the Vulnerable Software and Affected Versions mruby version 4.0.0 Description A NULL pointer dereference occurs in the Prism parser component. An attacker can use a specially crafted Ruby source file to cause the parser to pass a NULL pointer to nonnull string handling functions, leading ...

CVE-2026-79590: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-79590

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

Linux Distros Unpatched Vulnerability : CVE-2026-89046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition...