CVE-2026-65337: Improper Input Validation

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-71858: Improper Neutralization of Special Elements used in an OS Command

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, macros loaded from an attacker-controlled shortcuts.xml bypass the HMAC validation applied to UserDefinedCommands and can invoke Scintilla actions and the internal Open in Default Viewer command in an elevated Notepad++...

CVE-2026-74858: Server-Side Request Forgery (SSRF)

A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetchurl/fetchurls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...

The vulnerability of the kernel module of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel network module in the Linux operating system is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nft_set_rbtree.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftsetrbtree.c component in the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xen-netback component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the xen-netback component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the PolicyReference programming interface in the Java framework of Apache Neethi allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PolicyReference programming interface in the Apache Neethi Java framework is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the `drivers/net/usb/pegasus.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/usb/pegasus.c component of the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100567)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100567 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in...

Unity Linux 20.1070e Security Update: gvfs (UTSA-2026-099541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099541 advisory. A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing...

ALSA-2026:55841 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 unbound: Unbound: Denial of Service via malformed EDNS Report-Channel opti...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100701 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catcprobe fills three URBs with hardcoded endpoint...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099905 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpfprogtestrunskb bpfprogtestrunskb calls ethtypetrans firs...

RHEL 10 : curl (RHSA-2026:55450)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55450 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

Unity Linux 20.1060a / 20.1070a Security Update: frr (UTSA-2026-101083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101083 advisory. Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service DoS via...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100888 advisory. Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a syste...

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-19955

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...