ffmpeg-8-8.1.2-3.1 on GA media (moderate)

ffmpeg-8-8.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11682-1 Rating: moderate Cross-References: CVE-2026-58049 CVE-2026-64833 CVE-2026-64834 CVE-2026-65703 CVE-2026-65704 CVE-2026-65705 CVE-2026-65706 CVE-2026-66036 CVE-2026-66037 CVE-2026-70628 CVE-2026-70629 CVE-2026-70630...

Linux Distros Unpatched Vulnerability : CVE-2026-18313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, s...

Linux Distros Unpatched Vulnerability : CVE-2026-31911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can...

FreeBSD : OpenVPN: denial of service (25012057-a886-11f1-a836-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 25012057-a886-11f1-a836-b42e991fc52e advisory. OpenVPN team reports: OpenVPN 2.x allows attackers to potentially cause a denial of service against the...

AlmaLinux 10 : freerdp (ALSA-2026:61378)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61378 advisory. FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP responses CVE-2026-67297 FreeRDP: FreeRDP: Memory disclosure or denial of service vi...

PT-2026-86443

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

CVE-2026-86097

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

CVE-2026-86097 PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

CVE-2026-86097

PX4 Autopilot through 1.17.0 contains a null pointer dereference in the param_set_default_file() and param_set_backup_file() functions. An attacker with access to any PX4 shell can trigger the crash by issuing param select or param select-backup with no path argument , causing the autopilot proce...

CVE-2026-86097 PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...

GHSA-48JH-3GJ7-FG8V vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m

Summary The fix for GHSA-rwxx-mrjm-wc2m "ReDoS via structuredoutputs.regex compiled without timeout" wrapped the regex compile in the xgrammar and outlines backends with compileregexwithtimeout and, for outlines, validateregexisbuildable. The lm-format-enforcer backend was left unguarded: it...

EUVD-2026-60376

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds...

GHSA-8737-QX52-HJFF vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

Summary The /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects and postprocess every nested choices.tokenids list directly. Unlike the normal render/generate path, derender does not enforce model context length, resolved maxtokens,...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-75438

Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogssbitimeparse function...

CVE-2026-57166

A flaw was found in PJSIP. A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. A remote attacker, with access to the unauthenticated telnet CLI, can send an overly long command line to trigger this issue. This can cause an...

CVE-2026-57165

A flaw was found in PJSIP. A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall. A remote attacker, with access to the unauthenticated telnet CLI, can trigger this issue because the line-redraw sequence can accumulate more dat...

CVE-2026-57160

A flaw was found in PJSIP. A buffer overflow can occur during the serialization of Session Initiation Protocol SIP message headers. A remote attacker can exploit this issue by influencing serialized SIP messages in applications that parse and re-serialize incoming SIP requests, such as proxies or...

CVE-2026-85786

Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression due to insufficient coverage of the GZIP auto-decompression...

CVE-2026-79391

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...