Linux Distros Unpatched Vulnerability : CVE-2026-89815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore ...

Linux Distros Unpatched Vulnerability : CVE-2026-92062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-76853

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

CVE-2026-76853 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

CVE-2026-76853

Netcore NR268 firmware version 1.7.121109 is affected by a security check bypass in the parame_put_file.cgi restore archive prefix validation. The root cause is a flawed prefix check in put_parame_file_cgi.c , which allows an attacker with low privileges to bypass restricted restore archive handl...

CVE-2026-76853 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

GO-2026-6366 Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics

Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics...

CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

UBUNTU-CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

DEBIAN-CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92062

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92062 Privilege escalation in the Session Restore component

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

EUVD-2026-78525

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156...

CVE-2026-92062 Privilege escalation in the Session Restore component

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92062

CVE-2026-92062 is a privilege escalation vulnerability in the Session Restore component of Mozilla Firefox and Thunderbird . The flaw was fixed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . CISA's SSVC assessment rates exploitation as none with no automation poten...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

CVE-2026-76853: Missing Support for Integrity Check

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parameputfile.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in putparamefilecgi.c to bypass restricted restore archive handling...

MiracleLinux 8 : redis:6 (AXSA:2026-1841:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1841:01 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data...

MiracleLinux 9 : redis:7 (AXSA:2026-1844:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1844:01 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in...