Linux Distros Unpatched Vulnerability : CVE-2026-85150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate heade...

RHEL 9 : osbuild-composer (RHSA-2026:62803)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62803 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Linux Distros Unpatched Vulnerability : CVE-2026-52022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components CVE-2026-52022...

Linux Distros Unpatched Vulnerability : CVE-2026-70399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of servic...

RHEL 10 : grafana (RHSA-2026:63022)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63022 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail:...

Linux Distros Unpatched Vulnerability : CVE-2026-71219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the...

AlmaLinux 8 : grafana (ALSA-2026:62407)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62407 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via...

RockyLinux 8 : grafana (RLSA-2026:62407)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62407 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via...

PT-2026-85297

Name of the Vulnerable Software and Affected Versions MOOS-IvP uFldShoreBroker versions prior to 24.8.2 Description The software fails to limit the number of claimed communities stored in parallel vectors within the handleMailNodePing function. A single publisher can provide an unlimited number o...

PT-2026-85296

Name of the Vulnerable Software and Affected Versions MOOS-IvP pRealm versions prior to 24.8.2 Description The pRealm component accepts unbounded REALMCAST REQ subscriptions without validating the duration or the limits of the variable list. This allows an attacker to register long-lived pipeways...

KLA91256 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability i...

PT-2026-85294

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A denial of service issue exists in the Demuxer::addMuxPacket function. The system trusts the packet count declared in mux headers without proper validation, allowing attackers to specify arbitrari...

PT-2026-85252

Name of the Vulnerable Software and Affected Versions Colord versions prior to 2.9.4 Description Synchronous CSS color string matchers use an ambiguous numeric regular expression that allows digits to be divided between overlapping quantifiers in quadratically many ways when malformed input is...

ALSA-2026:63332 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

Elasticsearch 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 / 9.5.x < 9.5.1 Information Disclosure (ESA-2026-143)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.8, or 9.4.x prior to 9.4.4, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-143 advisory. - Missing Authorization CWE-862 in the...

Linux Distros Unpatched Vulnerability : CVE-2026-52295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamfwriter.c component CVE-2026-5229...

Linux Distros Unpatched Vulnerability : CVE-2026-52132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a...

Linux Distros Unpatched Vulnerability : CVE-2026-75538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length...

RHCOS 4 : OpenShift Container Platform 4.17.57 (RHSA-2026:60018)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60018 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...

RHCOS 4 : OpenShift Container Platform 4.19.45 (RHSA-2026:60452)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60452 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...