Linux Distros Unpatched Vulnerability : CVE-2026-109518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic including a malicious mirror or proxy between an...

PT-2026-137000

Name of the Vulnerable Software and Affected Versions APT versions prior to 3.0.4 Description An on-path attacker capable of manipulating HTTP traffic, such as through a malicious mirror or proxy, can trick an APT client into installing an unverified package to achieve remote code execution with...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

CVE-2026-54161

A flaw was found in Network UPS Tools NUT. An attacker capable of intercepting or controlling communications from an upstream server or monitored device can achieve arbitrary command execution with the privileges of the monitoring client, typically root. This issue occurs because the upsmon...

CVE-2026-54161

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...

EUVD-2026-116198

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...

CVE-2026-54161 upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...

CVE-2026-57154

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, authenticated Web UI or API users with delegated access to affected settings can submit CR or LF characters in fields expected to contain one line, causing generated privileged service configuration files to...

CVE-2026-115357

A flaw was found in OpenBao. Under certain conditions, the service fails to record audit log entries for responses when processing requests to generate root tokens or rotate encryption keys. A remote attacker can complete these critical operations without leaving a complete audit trail, hindering...

CVE-2026-63418

Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or --Host on the command line, or through --extra-opts files containing Host= entries, in an unsigned short. More than 65,535 hosts wrap the...

CVE-2026-57154

The OPNsense firewall and routing platform is vulnerable to a configuration line injection vulnerability in versions prior to 26.1.11 and 26.4.1p1 . Authenticated users with delegated access can submit CR or LF characters in specific GUI text fields, such as those for OpenVPN, DHCPv6, Unbound, IP...

CVE-2026-57154 OPNsense: Configuration line injection via multiple GUI text fields

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, authenticated Web UI or API users with delegated access to affected settings can submit CR or LF characters in fields expected to contain one line, causing generated privileged service configuration files to...

CVE-2026-63418 Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary

Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or --Host on the command line, or through --extra-opts files containing Host= entries, in an unsigned short. More than 65,535 hosts wrap the...

CVE-2026-63418 Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary

Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or --Host on the command line, or through --extra-opts files containing Host= entries, in an unsigned short. More than 65,535 hosts wrap the...

CVE-2026-63418 Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary

Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or --Host on the command line, or through --extra-opts files containing Host= entries, in an unsigned short. More than 65,535 hosts wrap the...

CVE-2026-63418

The Monitoring Plugins suite (versions 3.0.0-rc1 through 3.0.1 ) contains a vulnerability in the check_icmp plugin. The software incorrectly stores the number of hosts provided via the -H or --Host command-line arguments (or --extra-opts files) in an unsigned short . Providing more than 65,535 ho...

Security Bulletin: IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility (CVE-2026-13367)

Summary A privilege escalation vulnerability exists in the oninit utility of IBM Informix Dynamic Server. Successful exploitation could allow a local authorized user to gain root privileges. Vulnerability Details CVEID:CVE-2026-13367 DESCRIPTION: IBM Informix Dynamic Server 14.10, and 15.0 contai...

CVE-2026-119675

MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a restore to create an unauthorized...

CVE-2026-115375

A flaw was found in Incus. An authenticated user with instance creation privileges can exploit a path traversal vulnerability by importing a crafted instance backup archive containing directory traversal sequences in dependent volume names. Successful exploitation allows the attacker to escape...

cockpit: Cockpit: Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash

A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted request. When the WebService.UrlRoot is configured and a request is made to the exact URL-root prefix without a trailing slash, cockpit-ws c...