Linux Distros Unpatched Vulnerability : CVE-2026-75819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fiel...

Linux Distros Unpatched Vulnerability : CVE-2026-98167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walkin...

Linux Distros Unpatched Vulnerability : CVE-2026-98238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: t7xx: validate the netif index in t7xxccmnirecvskb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmniinst only has room fo...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1790929459)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790929459 advisory. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-re...

Linux Distros Unpatched Vulnerability : CVE-2026-98186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WP...

PT-2026-107304

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package contains an arbitrary file read flaw. Unsafe path resolution during the handling of the TechDocs source tree allows an authenticated user with permissio...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4493-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4493-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES15: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4458-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4458-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156:...

Linux Distros Unpatched Vulnerability : CVE-2026-98363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscpi: reject DVFS OPP count above MAXDVFSOPPS scpidvfsgetinfo already rejected a zero oppcount, but still trusted any larger value from the SCP...

Linux Distros Unpatched Vulnerability : CVE-2026-98362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: scpi: bound-check DVFS index in scpidvfsrecalcrate dvfsgetidx may return an out-of-range index if the SCP firmware is buggy or returns a stale value. Only...

CentOS 9 : pcre2-10.40-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can...

Linux Distros Unpatched Vulnerability : CVE-2026-98193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libipw: reject TKIP frames without a full MIC libipwmichaelmicverify assumes that an skb contains an eight-byte Michael MIC. A short TKIP frame makes the...

PT-2026-107136

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

PT-2026-106567

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate the netif index in t7xx ccmni recv skb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmni inst only has room for NIC DEV MAX 21 entries. t7xx ccmni recv skb indexes the array...

PT-2026-106324

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.31.1 Description A remote out-of-bounds read can occur within the Completions Request Handler component. The issue resides in the conv ssm forward function located in the vllm/model executor/layers/mamba/mamba mixer2.p...

PT-2026-106576

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check include...

PT-2026-106497

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs query reparse point In cifs query reparse point, the start = end check before casting to struct reparse data buffer only ensures the start pointer is within the response. It fails to...

PT-2026-106692

In the Linux kernel, the following vulnerability has been resolved: firmware: arm scpi: reject DVFS OPP count above MAX DVFS OPPS scpi dvfs get info already rejected a zero opp count, but still trusted any larger value from the SCP firmware. The shared-memory reply only holds MAX DVFS OPPS entrie...

PT-2026-107227

When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so they can review the repository. Rejecting or cancelling the transfer did not revoke this collaboration, so the named recipient kept persistent read access to...