PT-2026-59927

Impact If FractionMaxPoolGrad is given outsize inputs row pooling sequence and col pooling sequence, TensorFlow will crash. python import tensorflow as tf tf.raw ops.FractionMaxPoolGrad orig input = 1, 1, 1, 1, 1, orig output = 1, 1, 1, out backprop = 3, 3, 6, row pooling sequence = -0x4000000, 1...

AlmaLinux 10 : freeipmi (ALSA-2026:36211)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36211 advisory. freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client CVE-2026-50031 Tenable has extracted the preceding description block directly from t...

SUSE SLES15 Security Update : gstreamer-plugins-good (SUSE-SU-2026:2844-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2844-1 advisory. This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer...

RHEL 9 : buildah (RHSA-2026:38493)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:38493 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working...

RHEL 10 : plexus-utils (RHSA-2026:38514)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:38514 advisory. The Plexus project seeks to create end-to-end developer tools for writing applications. At the core is the container, which can be embedded or for ...

RHEL 8 : xorg-x11-server-Xwayland (RHSA-2026:38488)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:38488 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow...

MiracleLinux 8 : unbound-1.16.2-5.12.el8_10 (AXSA:2026-1249:07)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1249:07 advisory. unbound: Unbound: Denial of Service via excessive EDNS options CVE-2026-41292 unbound: Unbound: Cache manipulation via 'ghost domain names' attack...

Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-8528-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8528-1 advisory. It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A...

GHSA-2FFJ-W4MJ-PG37

creationtimestamp| type| source ---|---|--- 2026-07-12 22:58:01+00:00| seen| https://gist.github.com/wyattgill9/990529c04d4b62e11a1f63fb789c30e4...

GHSA-H856-FFVV-XVR4

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:10+00:00| seen| https://t.me/securixykz/959 2026-07-13 00:00:34+00:00| seen| https://t.me/securixykz/959 2026-07-14 00:00:59+00:00| published-proof-of-concept| https://t.me/securixykz/959...

GHSA-R389-865G-HCG3

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:09+00:00| seen| https://t.me/securixykz/1030 2026-07-13 00:00:34+00:00| seen| https://t.me/securixykz/1030 2026-07-14 00:01:00+00:00| seen| https://t.me/securixykz/1030...

GHSA-FH4V-V779-4G2W

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:09+00:00| seen| https://t.me/securixykz/1104 2026-07-13 00:00:33+00:00| seen| https://t.me/securixykz/1104 2026-07-14 00:01:01+00:00| published-proof-of-concept| https://t.me/securixykz/1104...

GHSA-4742-MR57-2R9J

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1275 2026-07-13 00:00:17+00:00| seen| https://t.me/securixykz/1275 2026-07-14 00:01:03+00:00| published-proof-of-concept| https://t.me/securixykz/1275 2026-07-26 02:00:07+00:00| seen|...

GHSA-C8CC-PHH7-XMXR

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1231 2026-07-13 00:00:17+00:00| seen| https://t.me/securixykz/1231 2026-07-14 00:01:03+00:00| published-proof-of-concept| https://t.me/securixykz/1231 2026-08-04 13:00:21+00:00| seen|...

RHSA-2026:2363

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:05+00:00| seen| https://t.me/securixykz/1317 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1317...

GHSA-X3VQ-34GG-CWQ7

creationtimestamp| type| source ---|---|--- 2026-07-12 17:19:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqhoqv74v322...

CVE-2026-10666 Stack buffer overflow in `net_ipaddr_parse()` IPv4 address-with-port parsing in `subsys/net/ip/utils.c`

parseipv4 in subsys/net/ip/utils.c reached via netipaddrparse for strings of the form "a.b.c.d:port" copies the port substring into a fixed 17-byte stack buffer char ipaddrNETIPV4ADDRLEN + 1 using a length of strlen - end - 1, where strlen is the full, unbounded input length and end is only the...

GHSA-PHRQ-PC6R-F6GH

creationtimestamp| type| source ---|---|--- 2026-07-12 13:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589 2026-07-13 00:00:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87589...

GHSA-3GJH-29FV-8HR6

creationtimestamp| type| source ---|---|--- 2026-07-12 12:51:29+00:00| seen| https://gist.github.com/MattHintz/18acc078a9239f65f06d48e0e8ada1e3...

EUVD-2026-43200

A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php of the component UserReport Endpoint. Executing a manipulation of the argument employeeList can lead to sql injection. The attack can be launched...