Exploit for CVE-2026-64560

OPPO Find X10 Pro Max PMX110 / OP659FL1 · CVE-2026-64560 Res...

Exploit for CVE-2026-8933

CVE-2026-8933 — snap-confine mount-namespace race → local ro...

EUVD-2026-103193

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...

CVE-2026-111926: Exposure of Sensitive Information to an Unauthorized Actor

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4691-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4691-1 advisory. - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-110603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable...

Linux Distros Unpatched Vulnerability : CVE-2026-110753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With...

PT-2026-116494

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

PT-2026-116378

Name of the Vulnerable Software and Affected Versions Rank Math SEO PRO version 3.0.123 Description A supply-chain compromise occurred where a subset of packages distributed between October 15, 2026, and October 16, 2026, contained embedded malware. This issue has been actively exploited in the...

Fedora 44 : chromium (2026-ca33e36dd6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ca33e36dd6 advisory. Update to 155.0.8059.39, includes 37 security fixes CVE-2026-110136: Use after free in PDF CVE-2026-110137: Use after free in WebRTC CVE-2026-110138...

PT-2026-116470

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.9 phpMyFAQ versions 4.2.0-alpha through 4.2.0-beta Description An improper authorization issue exists in the attachment.php file. The system fails to verify if the parent FAQ of an attachment is published or...

GNU InetUtils 2.7 Telnetd Authentication Bypass

GNU InetUtils versions through 2.7 contain an authentication bypass in telnetd through the Telnet NEW-ENVIRON USER variable. The included proof of concept establishes an interactive session. https://packetstorm.news/download/236118...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792243729)

"The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792243729 advisory. - An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr...

AlmaLinux 9.6 [TuxCare] Security Update: sudo / sudo-devel / sudo-python-plugin (ALMALINUX9.6:CLSA-2026:1792204181)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792204181 advisory. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailin...

Linux Distros Unpatched Vulnerability : CVE-2026-104198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token...

Linux Distros Unpatched Vulnerability : CVE-2026-98397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In...

Fedora 43 : chromium (2026-1710275b63)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1710275b63 advisory. Update to 155.0.8059.39, includes 37 security fixes CVE-2026-110136: Use after free in PDF CVE-2026-110137: Use after free in WebRTC CVE-2026-110138...

Rocky Linux 9.6 [TuxCare] Security Update: sudo / sudo-devel / sudo-python-plugin (ALMALINUX9.6:CLSA-2026:1792204181)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792204181 advisory. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the...

Linux Distros Unpatched Vulnerability : CVE-2026-111458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is...

AZL-109748 CVE-2026-110753 affecting package perl-Text-CSV_XS 1.60-1

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...