Rocky Linux 8 [CIQ] Security Update: environment-modules / environment-modules-debuginfo / etc (crlsa-2026_82919)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682919 advisory. environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters CVE-2026-85013 Tenable has...

PT-2026-115536

The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store upload function. This is due to a fail-open extension...

PT-2026-115884

Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve an arbitrary module in its place. We now unpack the trusted ziphash for the bundled golang.org/fips140 module and...

Important: mariadb118

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Important: mariadb1011

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Important: mariadb123

Issue Overview: A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the...

Linux Distros Unpatched Vulnerability : CVE-2026-111129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's...

Linux Distros Unpatched Vulnerability : CVE-2026-111142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central...

AlmaLinux 8 : idm:DL1 (ALSA-2026:83460)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83460 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...

Linux Distros Unpatched Vulnerability : CVE-2026-111375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP servers to trigger heap...

Linux Distros Unpatched Vulnerability : CVE-2026-111147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedbrecordgetmultivalue that allows attackers to read past buffers via...

Linux Distros Unpatched Vulnerability : CVE-2026-111141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzipparserootdirectory in zzip/zip.c that allows attackers to read past the mapped centr...

CentOS Linux 7 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-server / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791120339)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791120339 advisory. - An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation...

Linux Distros Unpatched Vulnerability : CVE-2026-111373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending...

WNLTK WekaClassifier File Read Write

The vulnerability of the WekaClassifier module in the NLTK library for symbolic and statistical processing of natural language is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to read...

Linux net/handshake/genl.c Kernel Module Use-After-Free

The vulnerability of the handshakenldonedoit function in the Linux kernel’s handshake/genl.c file is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the allocmtkintrurb function in the drivers/bluetooth/btmtk.c kernel module of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

WmServiceMock Module Code Execution

The vulnerability of the WmServiceMock module of the IBM WebMethods Integration integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux kernel dev_dax_kmem_remove Heap Buffer Overflow DoS

The vulnerability of the devdaxkmemremove function in the drivers/dax/kmem.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Wazuh authd Unauthorized Access

The vulnerability of the authd module of the Wazuh security monitoring and threat detection platform relates to the disclosure of information. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...