Linux Distros Unpatched Vulnerability : CVE-2026-102676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an...

Spring Framework 5.3.x < 5.3.50 / 6.0.x < 6.0.31 / 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 SSE Stream Corruption

The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.50, 6.0.x prior to 6.0.31, 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - Spring MVC applications using the functional web framework are...

Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc (crlsa-2025_18070)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202518070 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2025-43343 Tenable has extracted the preceding description block...

CVE-2026-47096

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamIDSystemName value through the /config?action=set web configuration API. Attackers can...

CVE-2026-47096 AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamIDSystemName value through the /config?action=set web configuration API. Attackers can...

CVE-2026-47096

AJA HELO Plus firmware versions before 2.1.7 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is an unsanitized eParamID_SystemName value accepted through the /config?action=set web configuration API. Unauthenticated attackers with network access can inject malicious Jav...

CVE-2026-103432

A flaw was found in apcupsd. A remote attacker could exploit a stack-based buffer overflow vulnerability in the web monitoring interface by supplying specially crafted data during variable parsing. A successful attack could allow the attacker to execute arbitrary code on the system or cause a...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: ansible-operator, azureml-inference-server-http-fips, kserve-models-web-app, kserve-pmmlserver, pgadmin4, prefect, az, kserve-sklearnserver, jupyterhub-k8s-singleuser-sample, kubeflow, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: ggshield, kserve, jupyter-base-notebook, kubeflow-pipelines, k8s-sidecar, datadog-agent, az, kubeflow-pipelines-visualization-server, open-webui, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: ggshield, kserve, jupyter-base-notebook, kubeflow-pipelines, k8s-sidecar, datadog-agent, az, kubeflow-pipelines-visualization-server, open-webui, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE

A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to bypass the web origin policy, leading to unauthorized access to...