PT-2026-96244

Name of the Vulnerable Software and Affected Versions libstoragemgmt affected versions not specified Description A flaw exists where an attacker controlling a local or virtual storage device can provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. ...

PT-2026-96292

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description A stack overflow exists in the GetGroup function located in /ops/op aggregate.c. This issue allows an attacker to cause a Denial of Service DoS, which is a condition where the service becomes...

PT-2026-96155

Name of the Vulnerable Software and Affected Versions Zephyr versions 4.1.0 through 4.4.x Description The experimental USB host stack contains a double free issue in the usb device heap. In the usbh device set configuration function within subsys/usb/host/usbh device.c, a configuration-descriptor...

CVE-2026-93433: Stack-based Buffer Overflow

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

CVE-2026-79919: Protection Mechanism Failure

MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LDPRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym...

CVE-2026-88406

FalkorDB (a Redis graph database module), versions v4.20.1 through v4.20.4 , is affected by a stack overflow in the _ValidateUnion_Clauses function located in /ast/ast_validations.c. The flaw allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) by sending a crafted input...

PT-2026-96115

Name of the Vulnerable Software and Affected Versions fetchmail versions 5.0.8 through 6.6.6 Description A stack-based buffer overflow occurs in fetchmail when it is compiled with NTLM support. A malicious or compromised mail server that advertises NTLM authentication can send a specially crafted...

CVE-2026-94184: Stack-based Buffer Overflow

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

PT-2026-105023

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

CVE-2026-94184: Stack-based Buffer Overflow

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

EulerOS Virtualization 2.10.1 : radvd (EulerOS-SA-2026-3853)

According to the versions of the radvd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack...

Linux Distros Unpatched Vulnerability : CVE-2026-54634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches...

Linux Distros Unpatched Vulnerability : CVE-2026-93687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace...

SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2026:4007-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4007-1 advisory. This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parseprogressline for...

EulerOS Virtualization 2.10.0 : libsolv (EulerOS-SA-2026-3871)

According to the versions of the libsolv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect...

Atlassian Jira Service Management Data Center and Server 10.0.x < 10.3.18 / 10.4.x < 11.3.10 (JSDSERVER-16727)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16727 advisory. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter ...

Linux Distros Unpatched Vulnerability : CVE-2026-94184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication c...

Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

Linux Distros Unpatched Vulnerability : CVE-2026-93579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage...

EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2026-3874)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...