Linux Distros Unpatched Vulnerability : CVE-2026-90017

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB read in rtwactionframeparse rtwactionframeparse takes a framelen parameter but never actually checks it before indexing into the...

Linux Distros Unpatched Vulnerability : CVE-2026-89952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: validate ONFI extended parameter page sections nandflashdetectextparampage allocates the length declared by the ONFI parameter page, then treats t...

Linux Distros Unpatched Vulnerability : CVE-2026-89947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: meson: align gxbb32kclksel number of parents with actual count The following out-of-bounds read has been observed by Christian on a GXBB WeTek Hub:...

PT-2026-93506

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where FRU and I2C bsg handlers use a 256-byte bounce buffer allocated via dma pool alloc, which does not zero the memory. Because only a small...

PT-2026-93519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the s2255 probe function. The function attempts to read a 4-byte marker and version from the final 8 bytes of the firmware blob using fw-datafw size - 8 a...

PT-2026-93382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN VNI filter entry policy where GROUP and GROUP6 address attributes are declared as NLA BINARY with only a maximum length. This allows the validate nla functio...

PT-2026-93627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory policy management where a sleeping function is called from an invalid context. When rhashtable insert slow rehashes a table under rcu read lock, it invokes...

Huawei HarmonyOS out-of-bounds read vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a out-of-bounds read vulnerability. This vulnerability stems from an issue with out-of-bounds reading in the graphics module. Attackers can exploit this...

Linux Distros Unpatched Vulnerability : CVE-2026-89878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: s2255: check firmware size before reading trailing marker s2255probe reads a 4-byte marker and version from the last 8 bytes of the firmware blob...

Linux Distros Unpatched Vulnerability : CVE-2026-89819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: validate plane degamma LUT size for private color prop Unlike the CRTC degamma path, which is guarded by amdgpudmverifylutsizes, the per-plane...

Linux Distros Unpatched Vulnerability : CVE-2026-92240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-92239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbi...

Linux Distros Unpatched Vulnerability : CVE-2026-89880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rtl2832sdr: release URBs and stream buffers on startstreaming failure rtl2832sdrstartstreaming calls rtl2832sdrallocstreambufs, rtl2832sdrallocurbs and...

RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:67931)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67931 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is n...

CVE-2026-85569: Improper Privilege Management

The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded against an API credential, allowing the holder of a read-only key to act as the administrator account that issued it...

ROS-20260916-73-0088

The vulnerability of the decodechoice function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter kernel in the Linux operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...

ROS-20260916-73-0026

The vulnerability of the t7xxport EnumMsgHandler function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...

CVE-2026-76434: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read arbitrary files from the affected system. To exploit this vulnerability, the attacker must have valid administrative...

CVE-2026-76427: Improper Restriction of XML External Entity Reference

A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable...

CVE-2026-82125: Authorization Bypass Through User-Controlled Key

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...