PT-2026-104825

It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...

PT-2026-105069

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

ROS-20261001-73-0032

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0061

The vulnerability in aardvark-dns is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261001-73-0038

The vulnerability in Xen is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0047

The vulnerability in rclone is related to an error in exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20261001-73-0008

The vulnerability of the CompositeDeepScanLine::readPixels function in the ImfCompositeDeepScanLine component of software for storing images with a wide dynamic range of brightness, OpenEXR, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker ...

PT-2026-105787

Summary A malicious SSH server can wedge an AsyncSSH client, and an authenticated client can wedge an AsyncSSH server, by sending a channel maximum packet size of 0 in SSH MSG CHANNEL OPEN CONFIRMATION server→client or SSH MSG CHANNEL OPEN client→server. AsyncSSH stores the peer-supplied value...

CVE-2026-56589: Improper Neutralization of Input During Web Page Generation

HCL BigFix Service Management is affected by a Stored Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data...

PT-2026-105194

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

PT-2026-103657

Name of the Vulnerable Software and Affected Versions ASUS router affected versions not specified Description An Active Debug Code issue allows a remote authenticated user to bypass security mechanisms by sending a crafted HTTP request. This action enables the Telnet service, allowing the executi...

PT-2026-105911

Impact The SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could allow an attacker with a valid account on a trusted IdP to link the attacker's SAML...

PT-2026-105093

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

PT-2026-105090

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...

PT-2026-105094

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

PT-2026-105096

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...

PT-2026-105105

Uncontrolled Resource Consumption CWE-400 in Kibana can lead denial of service via Excessive Allocation CAPEC-130...

PT-2026-103901

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks...

Rocky Linux 9 [CIQ] Security Update: python3-markdown (crlsa-2026_19366)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202619366 advisory. python-markdown: denial of service via malformed HTML-like sequences CVE-2025-69534 Tenable has extracted the preceding description block directly from the CIQ...

RockyLinux 10 : nodejs24 (RLSA-2026:73428)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73428 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificate...