CVE-2026-109430: Improper Restriction of XML External Entity Reference

Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity XXE injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to forc...

PT-2026-115144

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp decode rle8 and bmp decode rle4 because absolute-run bound checks omit the word-alignment pad byte. Attackers can supply a crafted RLE8 or RLE4 BMP ending on an odd-length absolute run to cause a one-byte heap...

CVE-2026-111130: Out-of-bounds Read

OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slidepositions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,...

PT-2026-115305

Name of the Vulnerable Software and Affected Versions cool-admin-midway versions prior to 8.0.0 Description An authorization bypass exists that allows administrators without superadmin privileges to read, modify, or delete roles belonging to other administrators. This occurs when users with...

PT-2026-114821

Name of the Vulnerable Software and Affected Versions bhyve affected versions not specified Description The HDA audio device model fails to verify zero-length Buffer Descriptor List BDL entries when initiating a stream. This oversight leads to out-of-bounds read or write operations during Direct...

PT-2026-115199

SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links. Attackers can return a Location header or feed link pointing to a file:// path, causing file get contents to read...

UBUNTU-CVE-2026-110597

Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute bounds...

UBUNTU-CVE-2026-110712

libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2decodefileallinfo that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man-in-the-middle on unsigned sessions can return crafted...

PT-2026-115224

Name of the Vulnerable Software and Affected Versions EnergizeLab station-middleware NestJS Docker images versions 1.6.5 through 1.8.2 Description Low-privilege registered accounts can read arbitrary files from the server by providing a controlled file path. This issue allows unauthorized access ...

UBUNTU-CVE-2026-110713

libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2decodefilefsvolumeinfo and smb2decodefilefsattributeinfo that allows malicious SMB servers to read past reply buffers. Attackers controlling a server or intercepting unsigned sessions can send crafted QUERYINFO replies wi...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-130352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130352 advisory. libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing ...

CVE-2026-110655

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses...

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

Debian dla-4835 : libmariadb-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4835 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4835-1 [email protected]...

X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling...

Linux Distros Unpatched Vulnerability : CVE-2026-110736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader core/string/optimizedtranslation.cpp, OptimizedTranslation::getmessage...

Linux Distros Unpatched Vulnerability : CVE-2026-110859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout that allows remote attackers to read arbitrary files by supplying a branch...

PT-2026-115255

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the software reads data past the end of the...

SUSE SLES15: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (SUSE-SU-2026:4647-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4647-1 advisory. - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Fre...

Rocky Linux 9 [CIQ] Security Update: pcre2 / pcre2-debuginfo / pcre2-debugsource / pcre2-devel / etc Multiple Vulnerabilities (crlsa-2026_81532)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681532 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 PCRE2: PCRE2: Out-of-bounds read via...