Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099748 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftexthdr: fix register tracking for FPRESENT flag nftexthdrinit passes user-controlle...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099917 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

RHEL 9 : 389-ds-base (RHSA-2026:55421)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55421 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

CVE-2026-19959

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2026-19959

The vulnerability CVE-2026-19959 affects Edimax EW-7478APC with firmware 1.04, targeting the formWanTcpipSetup function. Crafted input to pppUserName leads to a stack-based buffer overflow in /goform/formWanTcpipSetup, enabling remote exploitation. Public exploit code exists, increasing risk of n...

CVE-2026-19959 Edimax EW-7478APC formWanTcpipSetup stack-based overflow

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2026-19959

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made...

MINI-726J-MJC6-W9M8

Bulletin has no description...

MINI-RFV3-CXR5-6G82

Bulletin has no description...

[SECURITY] [DLA 4741-1] unzip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4741-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 16, 2026 https://wiki.debian.org/LTS -...

CVE-2026-74794

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74792

Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...

MINI-F5CF-HQVJ-JVVF

Bulletin has no description...

MINI-6PJ9-Q25G-85PC

Bulletin has no description...

MINI-H7CW-XG89-HVJ7

Bulletin has no description...

MINI-VVP6-8X35-29H6

Bulletin has no description...

CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...

CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...

CVE-2026-74795

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The ExpressionDepthLimit defaults to null/disabled, allowing attackers to supply deeply nested templates (thousands of nested blocks) that exhaust thread stack space and trigger a StackOverflowE...