CLEANSTART-2026-ET86515 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures

Security vulnerability affects the argo-cd package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

RockyLinux 8 : apr-util (RLSA-2026:69113)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69113 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...

CVE-2026-75676: Stack-based Buffer Overflow

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-63386: Uncontrolled Recursion

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or long dotted keys can exhaust the V8 call...

SUSE SLED15 / SLES15 Security Update : jq (SUSE-SU-2026:4275-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4275-1 advisory. Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246:...

CentOS 9 : libevent-2.1.13-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libevent-2.1.13-1.el9 build changelog. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock...

CentOS 9 : vim-8.2.2637-41.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-41.el9 build changelog. - out-of-bounds read in updatesnapshot CVE-2026-52859 - buffer overflow in terminal emulator CVE-2026-28420 - stack out-of-bounds write in...

RHEL 9 : postgresql:15 (RHSA-2026:69914)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69914 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

ROS-20260922-73-0011

The vulnerability in gstreamer1-plugins-bad-free is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ALSA-2026:70186 Important: postgresql16 security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

CVE-2026-86054: Stack-based Buffer Overflow

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Parameters.cpp because it copies a session path derived from -settingsDir= into backupPathNameMAXPATH with unbounded wcscpy and...

CVE-2026-87121: Out-of-bounds Write

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

CVE-2026-63276: Out-of-bounds Write

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

CVE-2026-63275: Out-of-bounds Write

LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the hints of a glyph. The number of hints was checked against the wrong bound, so a glyph declaring more hints than the array can hold wrote past its end. In fixed versions the hint...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090058 advisory. In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the PROXY protocol, a specially crafted PROXY...

Adobe Substance 3D Modeler 1.0.0 < 1.22.8 Multiple Arbitrary code execution (APSB26-155)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.22.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-155 advisory. - Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glusterfs (UTSA-2023-001153)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001153 advisory. In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. Tenable has extracted the preceding description bloc...

Linux Distros Unpatched Vulnerability : CVE-2026-93433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System...

Intel® PROSet/Wireless WiFi Software Advisory-01468

Summary: Potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software may allow escalation of privileges, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-24911...

ALSA-2026:69876 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...