The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-80757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: reject a class permission count below its inherited common securitygetpermissions maps an inherited common's permissions into an array sized by the...

Linux Distros Unpatched Vulnerability : CVE-2026-80726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its pare...

PT-2026-85664

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...

Linux Distros Unpatched Vulnerability : CVE-2026-84185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption JOSE standards. The issue occurs when the...

Linux Distros Unpatched Vulnerability : CVE-2026-71196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glance - None CVE-2026-71196 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2026-80739

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and...

Linux Distros Unpatched Vulnerability : CVE-2026-80754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the...

Linux Distros Unpatched Vulnerability : CVE-2026-56855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC...

PT-2026-85534

It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface...

PT-2026-86177

Emlog is an open source website building system. In versions 2.6.29 and prior, tag names in emlog are not HTML-encoded when rendered in the article editor. An attacker can create a tag containing ';alertdocument.domain;//. The addslashes function does not escape HTML entities, so ' is stored as-i...

CVE-2026-75164

CVE-2026-75164 is an arbitrary file read vulnerability in the /cgi-bin/ugwdownload.cgi endpoint of MBS-Solutions X-Serie Gateway firmware V6_00_05 . A remote authenticated user holding the low-privileged Standard role can retrieve arbitrary files from the device filesystem by manipulating the fil...

CVE-2026-38961

A Cross-Site Scripting (XSS) vulnerability in the RSS Widget of Netgate pfSense Plus (versions 26.03 and 25.11.1) and pfSense CE (version 2.8.1) allows remote authenticated attackers to inject arbitrary JavaScript via malicious content in an RSS feed title. The root cause is insufficient sanitiza...

Linux Distros Unpatched Vulnerability : CVE-2026-80733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove WARNONONCE from skmcloop skmcloop can be called for sockets that are neither AFINET nor AFINET6 e.g. AFPACKET sockets when sending packets via...

Linux Distros Unpatched Vulnerability : CVE-2026-14199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled syncttl greater than zero are affected. The Auth Proxy cache key...

PT-2026-85396

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmi sel oem fujitsu get sel entry long text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

...[ More ]

A stack-based buffer overflow vulnerability exists in the redirect CGI program distributed with thttpd. The vulnerability is caused by unsafe string concatenation when constructing redirect URLs using attacker-controlled CGI environment variables. A remote, unauthenticated attacker can trigger th...

Zimbra CVE-2026-73570 Incident Response Toolkit

Zimbra CVE-2026-73570 Incident Response Toolkit is a collection of detection and evidence-preservation utilities for administrators investigating suspected exploitation of CVE-2026-73570. The toolkit searches Zimbra and mail logs for exploitation indicators, examines JSP persistence locations,...

Linux Distros Unpatched Vulnerability : CVE-2026-80737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: amba-pl011: synchronize DMA teardown dmaengineterminateall does not wait for a running callback, so the TX callback can still touch the TX buffer after ...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...