ROS-20261014-73-0011

The vulnerability of the loongsongpufixupdmahang function in the arch/loongarch/pci/pci.c module, which is part of the LoongArch architecture support for the Linux operating system, is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromi...

CVE-2026-102055: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent t...

PT-2026-113930

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...

NSD -- multiple vulnerabilities

NLnet Labs reports: This security release has fixes for vulnerabilities which were all for cases with specially crafted and formatted data in zone files. Zone files which are written out by NSD itself, such as for zones for which NSD is secondary, would not be formatted like this. The zone file h...

PT-2026-113842

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description A stack-based buffer overflow occurs in the routing protocol daemon rpd. This issue allows a remote...

CVE-2026-101983: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured...

CVE-2026-102180: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...

CVE-2026-102052: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv...

CVE-2026-76655: Stack-based Buffer Overflow

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution...

CVE-2026-101955: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled...

CVE-2026-33798: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic...

PT-2026-113931

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series versions prior to 21.2R3-S11 Junos OS on MX Series versions 21.4 through 21.4R3-S11 Junos OS on MX Series versions 22.2 through 22.2R3-S7 Junos OS on MX Series versions 22.3 through 22.3R3-S4 Junos OS on MX Series version...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxml2 (UTSA-2026-130066)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130066 advisory. In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. Tenable has extracted the preceding description block directly fro...

PT-2026-113890

A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated...

PT-2026-113924

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on the SRX Series affected versions not specified Description A stack-based buffer overflow occurs in the iked IKE key-management daemon. This issue allows an authenticated remote-access VPN client to execute arbitrar...

PT-2026-113786

Name of the Vulnerable Software and Affected Versions NSD affected versions not specified Description A HIP resource record that fills the RDATA near or at its limit and contains another dname RDATA field a HIP Rendezvous server can cause a stack overflow, allowing up to 191 bytes of...

Security Updates for Microsoft Office Products C2R (October 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...

PT-2026-113785

Name of the Vulnerable Software and Affected Versions NSD affected versions not specified Description An issue exists where a SVCB or HTTPS Resource Record RR that fills the wire format RDATA to capacity can allow an ECH parameter to overwrite the stack. Once the limit is exceeded, the base64...

PT-2026-113835

🚨 CVE-2026-101983 A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured. 🎖@cveNotify...

PT-2026-113784

Name of the Vulnerable Software and Affected Versions NSD versions 4.10.0 through 4.15.2 Description An issue occurs when base64 data is split into pieces of 3 characters or less, causing tokens to be incorrectly calculated as 0 bytes. This allows an attacker to overwrite the stack with up to 64K...