Linux Distros Unpatched Vulnerability : CVE-2026-64589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails...

Linux Distros Unpatched Vulnerability : CVE-2026-7867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the...

EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-2936)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-64594

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: initialize resetwork at allocation time ffsfskillsb unconditionally calls cancelworksync on ffs-resetwork when a functionfs instance is...

FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...

Linux Distros Unpatched Vulnerability : CVE-2026-19024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference in H5Pgetfillvalue in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value...

Linux Distros Unpatched Vulnerability : CVE-2026-67869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against...

EulerOS 2.0 SP13 : bzip2 (EulerOS-SA-2026-2959)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

Linux Distros Unpatched Vulnerability : CVE-2026-14587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a...

Linux Distros Unpatched Vulnerability : CVE-2026-18809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3. CVE-2026-18809 Note that Nessus...

EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-2895)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-64598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2aeadreqalloc The numsgs variable is a u32 so ERRPTRnumsgs...

Linux Distros Unpatched Vulnerability : CVE-2026-64590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When CONFIGDMAAPIDEBUGSG is enabled, importing a udmabuf into a DRM driver e.g. amdgpu...

EulerOS 2.0 SP13 : libXpm (EulerOS-SA-2026-3024)

According to the versions of the libXpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-125. The product...

Linux Distros Unpatched Vulnerability : CVE-2026-64596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: libfs: set SBINOEXEC and SBINODEV by default in initpseudo Since commit 1e7ab6f67824...

RHEL 9 : kernel (RHSA-2026:51035)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51035 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: futex: Fix UaF between...

PT-2026-68412

Name of the Vulnerable Software and Affected Versions mf-yang openclaw-cn versions prior to 0.2.2 Description A remote attack is possible in the apply patch Tool component due to an issue in the assertNoSymlinkEscape function within the src/agents/sandbox-paths.ts file. This flaw allows for link...

Linux Distros Unpatched Vulnerability : CVE-2026-64584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences...

Important Photon OS Security Update - PHSA-2026-5.0-92-0944

Updates of 'linux' packages of Photon OS have been released...

Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation

Impact The internal island renderer endpoint /nuxtisland/... decodes and hashes attacker-controlled request input before it validates the URL-resident hash. An unauthenticated POST /nuxtisland/.json with a large JSON body for example 4.6 MB / 150k keys is fully read, destr-parsed, and run through...