Rocky Linux 9 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80507)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680507 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

MiracleLinux 9 : emacs-27.2-18.el9_8.2 (AXSA:2026-2047:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2047:01 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the...

CVE-2026-110716: Out-of-bounds Read

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range filetableoffset or large file counts to...

RockyLinux 8 : OpenEXR (RLSA-2026:82345)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82345 advisory. OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files CVE-2026-59184 OpenEXR: OpenEXR: Heap out-of-bounds write via crafted tiled EX...

Security Updates for Microsoft Excel Products C2R (October 2026)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-97003, CVE-2026-97004, CVE-2026-97007, CVE-2026-97741,...

PT-2026-113731

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description When built with GnuTLS, a malicious WebSocket server can cause curl to send memory beyond its send buffer. This occurs because of an out-of-bounds read that happens when the gnutls record send...

CVE-2026-110714: Integer Underflow (Wrap or Wraparound)

libsmb2 through 6.2 contains an integer underflow vulnerability in decodeacl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted security descriptors. Attackers controlling a server or intercepting unsigned sessions can send an AclSize below 8 in a QUERYINFO reply,...

CVE-2026-73260: Out-of-bounds Read

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate parser selected by MGTLSBUILTIN fails to verify that a long-form DER element length fits within the remaining certificate buffer. In mgdertotlv and mgdernext, a peer-controlled length can advance t...

PT-2026-114373

In the Linux kernel, the following vulnerability has been resolved: af unix: Return immediately when manage oob returns NULL for 0-length buffer. Fahad Alharbi reported that recv0, MSG PEEK triggers busy-wait in unix stream read generic if recv is blocking and the last skb in the queue is MSG OOB...

PT-2026-114039

Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute bounds...

PT-2026-113961

Name of the Vulnerable Software and Affected Versions Nessus affected versions not specified Description An SQL injection allows an authenticated user to read or modify data stored by the system. SQL injection is a technique where malicious SQL statements are inserted into entry fields for...

PT-2026-114124

Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimized translation.cpp, OptimizedTranslation::get message. Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validatio...

PT-2026-114118

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield get file table that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range file table offset or large file count...

PT-2026-113688

The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...

PT-2026-114146

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.0.0 through 3.31.0 Description An issue exists in the wts read drdynvc data first function that allows authenticated clients to cause server resource exhaustion. By sending a seven-byte DATA FIRST message on an opened Dynami...

PT-2026-114110

Name of the Vulnerable Software and Affected Versions OAID Tengine versions prior to 1.12.0 Description An out-of-bounds read can be triggered remotely within the tmfile Model Loader component. The issue exists in the get tm file model function located in the source file...

PT-2026-114037

🚨 CVE-2026-110595 BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in read upload that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently to /api/contacts/import/...

Linux Distros Unpatched Vulnerability : CVE-2026-100236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first...

Adobe Substance 3D Stager 3.0.0 < 3.1.9 Multiple Vulnerabilities (APSB26-170) (macOS)

The version of Adobe Substance 3D Stager installed on the remote macOS host is prior to 3.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-170 advisory. - Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code...

Unity Linux 20.1070a Security Update: qt5-qtbase (UTSA-2026-130091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130091 advisory. An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminat...