Linux Distros Unpatched Vulnerability : CVE-2026-85051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-85049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2026-71626

Invoice Ninja v5.13.24 is affected by a vulnerability in its webhook API components (StoreWebhookRequest.php , UpdateWebhookRequest.php , and WebhookSingle.php ) that allows a remote, unauthenticated attacker to obtain sensitive information. The vendor's advisory classifies the issue as SSRF via ...

CVE-2026-78745

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

CVE-2026-75438

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

CVE-2026-71620

A File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code by uploading a crafted .php file. The root cause is insufficient validation of uploaded file types in the file upload functionality, enabling code execution on the server. No specific pa...

CVE-2026-75171

HubCore v.14.1.1 is affected by a privilege escalation vulnerability in its HUBCOREID session cookie handling component , which allows a remote attacker to escalate privileges. No CVSS metrics, patch version, or confirmed exploitation details have been published in the provided documents. The vul...

EUVD-2025-210847

SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /outaddresspaging path...

Linux Distros Unpatched Vulnerability : CVE-2026-85024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106456 advisory. GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

PT-2026-86223

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

EUVD-2026-71746

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

EUVD-2026-71711

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

PT-2026-86240

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be use...

PT-2026-85775

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher...

EUVD-2026-71455

An issue in X-Serie Gateway Firmware V60005 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi...

PT-2026-86243

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

CVE-2026-71624

esoTalk v1.0.0g4 is vulnerable to remote code execution via a Configuration Comment Injection flaw, as indicated by the advisory reference. The attack targets the ETMemberModel.class.php, ETMemberController.class.php, and ET.class.php components, requiring no authentication or user interaction . ...

CVE-2026-79423

An authenticated remote code execution vulnerability in the admin_config.php component of seacms v13.6 allows an attacker with low privileges to execute arbitrary code via a crafted POST request. The CVSS 3.1 score is 8.8 (HIGH) with high impact on confidentiality, integrity, and availability. CI...

CVE-2026-78745

CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices running the Hi3751V350 and Hi3751V352E_DMO platforms. The Android Debug Bridge daemon (adbd) is exposed to remote access without expected privilege restrictions, and ADB sessions execute with root-level permissions , enabling arbitrary cod...