VulnCheck KEV: CVE-2022-1471

SnakeYaml's Constructor class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. ...

Rocky Linux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio (ALMALINUX9.6:CLSA-2026:1793015517)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793015517 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software componen...

AlmaLinux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio (ALMALINUX9.6:CLSA-2026:1793015517)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793015517 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components...

Tenda BE3L Pro Form Wifi Basic Set Code Execution

The vulnerability in the formWifiBasicSet function of the Tenda BE3L Pro router software involves buffer overflow when processing the security5g parameter. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...

MiracleLinux 8 : dotnet9.0-9.0.122-1.el8_10 (AXSA:2026-2155:21)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2155:21 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146100 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...

Node2Shell CVEs

CVE-2026-105482 - high This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-105483 - high This vulnerability affects Node.js 26.x and 24.x. CVE-2026-106069 - high This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-111497 - high A flaw in Node.js can cause Node.js Brotl...

F5 Networks BIG-IP : PHP vulnerabilities (K000163821)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.7 / 17.5.1.11 / 21.1.0.4 / Hotfix- BIGIP-17.1.3.6.0.9.20-ENG / Hotfix-BIGIP-17.5.1.10.0.37.35-ENG. It is, therefore, affected by multiple vulnerabilities as referenced in the K000163821 advisory. CVE-2026-109618also...

TOTOLINK A950RG buffer error vulnerability

The TOTOLINK A950RG running version 4.1.2cu.5268B20221104 contains a buffer error vulnerability. This vulnerability stems from improper handling of the CONTENTLENGTH parameter by the sub402340 function within the file infostat.cgi in the Device-Information CGI component. As a result, a stack buff...

Meta FAIRChem get_computational_df_to_predict Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem Slab Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem dense_eval dft-compute Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem dense_eval results-file Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

Meta FAIRChem reaction_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

ROS-20261026-73-0166

The vulnerability in openssh relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PHP Stale Internal Request-State Vulnerability

PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution...

PT-2026-125501

Name of the Vulnerable Software and Affected Versions libwebsockets affected versions not specified Description Remote attackers can execute arbitrary code on affected installations without authentication. The issue occurs during the handling of PUBACK packets due to insufficient validation of...

ROS-20261026-73-0207

The vulnerability in rabbitmq-server relates to the lack of origin verification in websockets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

PHP 8.5.11 Session Upload Progress Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain request-handling memory-corruption flaws. This proof of concept uses multipart upload progress handling to demonstrate remote code execution. https://packetstorm.news/download/237644...

PHP 8.5.11 Session Upload Progress Remote Code Execution

PHP versions through 8.5.11 contain memory-corruption flaws that can allow unauthenticated remote code execution. This proof of concept uses crafted multipart upload-progress requests to trigger the vulnerability chain. https://packetstorm.news/download/237643...