PT-2026-76610

openssl encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate pseudorandom sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations...

bind9.18 security update

32:9.18.29-14.8 - Fix NSEC3 signer validation CVE-2026-10723, RHEL-215704 32:9.18.29-14.7 - Reject out-of-zone NSEC next owner names CVE-2026-13321, RHEL-213314 32:9.18.29-14.6 - Fix cache exhaustion via dnsslabheaders CVE-2026-11622, RHEL-213389 32:9.18.29-14.5 - Reject invalid signed wildcard...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry CVE-2026-45944 In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmappurgelock in shrinker CVE-2026-46093 In the...

Unity Linux 20.1070e Security Update: edk2 (UTSA-2026-099522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099522 advisory. Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-19967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file...

Unity Linux 20.1070e Security Update: libcap (UTSA-2026-099530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099530 advisory. The PAM module pamcap.so of libcap configuration supports group names starting with @, during actual parsing, configurations not starting with @ are incorrectly...

PT-2026-73227

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-76710

The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on cmd socknotifyev drivers/modem/vendor standalone/wncm14a2a.c. The response line is linearized into a fixed 40-byte stack buffer via net buf linearize, which caps the copy at 39 bytes and returns out len = 39. The two...

PT-2026-76623

openssl encrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of openssl encrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

PT-2026-76799

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

PT-2026-76792

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

EUVD-2026-60357

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

The vulnerability of the kexec module in the Linux operating system allows a hacker to trigger a system failure.

The vulnerability of the kexec module in the Linux operating system is related to a deficiency in the mechanism for verifying the source of the code. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mt7996_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c file of the wireless adapter driver for mediatek’s Linux kernel allows a hacker to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the mt7996macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7996/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...

The vulnerability of the mt7925_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel, which allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the mt7925macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt7925/mac.c file of the wireless adapter driver module from mediatek’s Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could...

The vulnerability of the apparmor module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel module fat allows a hacker to trigger a service failure.

The vulnerability of the fat kernel module in the Linux operating system is related to a significant loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure using a corrupted FAT image...