Linux Distros Unpatched Vulnerability : CVE-2026-68555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP...

RockyLinux 8 : php:8.2 (RLSA-2026:57574)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57574 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...

Apache Struts 6.0.0 <=> 6.10.0 / 7.0.0 <=> 7.2.1 Denial of Service (S2-073)

The version of Apache Struts installed on the remote host is 6.0.0 prior to 6.11.0, or 7.0.0 prior to 7.3.0. It is, therefore, affected by a denial of service vulnerability as referenced in the S2-073 advisory. - Struts provides an optional facility for collecting Content Security Policy violatio...

UBUNTU-CVE-2026-76883

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

UBUNTU-CVE-2026-76918

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability

Overview The Calix GS7 XGS GS5239XG router running firmware EXOS/6.6.47 contains a missing authentication vulnerability that exposes its UPnP Universal Plug and Play WANIPConnection service on the public WAN interface. Description Calix GS7 XGS GS5239XG is a residential gateway that provides...

go1.27-1.27rc3-1.1 on GA media (moderate)

go1.27-1.27rc3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11536-1 Rating: moderate Cross-References: CVE-2026-33818 CVE-2026-39821 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 CVSS scores: CVE-2026-33818 SUSE : 7.5...

Linux Distros Unpatched Vulnerability : CVE-2026-63383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in eventtagging.c when...

Python Library sqlparse < 0.6.0 Multiple Vulnerabilities

The version of the sqlparse Python library installed on the remote host is prior to 0.6.0. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists in sqlparse due to the regular expressions used by the lexer to match dollar-quoted strings and multiline...

CVE-2026-74439

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. The devicepasidtableteardown function incorrectly clears a scalable-mode context entry while its 'Present' bit remains set. This creates a window where the hardware can access a partially cleared entry,...

MINI-3G65-RH7F-F585

Bulletin has no description...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

[SECURITY] [DLA 4749-1] chromium security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4749-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 21, 2026 https://wiki.debian.org/LTS -...

MINI-46HQ-P8F9-656Q

Bulletin has no description...

DEBIAN-CVE-2026-72818

The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORDRE and applied by TweetTokenizer.tokenize, contains a naked-domain branch whose domain-label prefix a-z0-9+?:.-a-z0-9+ is unbounded. Input consisting of many alternating label separators can be partitioned in...

CVE-2026-67447

Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go readData function calls bufio.Reader.ReadBytes before applying the lendata+lenline size check to the completed SMTP DATA line against Server.MaxSize. An unauthenticated SMTP client...

CVE-2026-55015

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

DEBIAN-CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

CVE-2026-19442

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI vSCSI initiator driver. Successful exploitation may result in denial of service, privilege escalation, or full compromise of the client LPAR kernel...