Linux Distros Unpatched Vulnerability : CVE-2026-96424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus CVE-2026-96424 No...

PT-2026-117950

Name of the Vulnerable Software and Affected Versions DB-GPT versions prior to 0.8.3 Description An unauthenticated remote code execution issue exists because the /api/v1/chat/react-agent endpoint uses a mock get user from headers function that assigns the admin role to all callers regardless of...

WS-2026-0173

uv 0.0.5 through 0.13.3 trusts the "emSign ECC Root CA - G3" root through its vendored webpki-root-certs/webpki-roots bundle. Intermediates under this root were revoked for key compromise, so certificates issued with the compromised CA keys are accepted by uv for any hostname, enabling...

PT-2026-120312

By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An...

PT-2026-120335

By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An...

PT-2026-118286

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system...

RHEL 9 : flatpak (RHSA-2026:80497)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80497 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

RHEL 9 : gvfs (RHSA-2026:85942)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85942 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol...

ca-certificates security update

2025.2.80v9.0.305-102.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist...

WS-2026-0133

certifi 2019.03.09 through 2026.07.22 ships the "emSign ECC Root CA - G3" root certificate in its CA bundle certifi/cacert.pem. Intermediates under this root were revoked for key compromise cACompromise, so certificates issued with the compromised CA keys are trusted by applications that use...

PT-2026-117951

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL ROOT PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database acce...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from issues with local privilege escalation in the management shell interface. Local attackers who are authenticated and have restricted shel...

Red Hat: CVE-2026-113812: perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...

PT-2026-120150

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink set root pwd of the file /mnt/mtd/aoni ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

PT-2026-118590

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A versions prior to M30BE1 V251117 Description An OS command injection flaw exists in the sub 23B54 function of the ioos binary. The issue occurs when the /protocol.csp?opt=ovpn file endpoint processes requests with type=de...

PT-2026-134416

USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by removing the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificates. Original advisory details: This update remove...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46064)

In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix heap over-read in ibmasmsendi2omessage The ibmasmsendi2omessage function uses getdotcommandsize to compute the byte count for memcpytoio, but this value is derived from user-controlled fields in the dotcommandheader...

ca-certificates security update

2025.2.80v9.0.304-80.2.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist...

PT-2026-134145

This update removes the "emSign ECC Root CA - G3" CA certificate due to intermediate CA certificates being compromised. In addition, in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS, the ca-certificates package contained outdated CA certificates. This update refreshes the included...

OpenBSD System V Privilege Escalation

The vulnerability of the Virtual Memory subsystem in the System V operating system of OpenBSD is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...