PT-2026-104706

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

PT-2026-106247

Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...

PT-2026-104680

Name of the Vulnerable Software and Affected Versions MediaTek MT2716 affected versions not specified Description A missing bounds check in the Modem component allows an out-of-bounds write. This issue can be exploited by a remote attacker who controls a rogue base station to achieve escalation o...

Oracle Linux 10 : mod_auth_openidc (ELSA-2026-75581)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-75581 advisory. - Fix CVE-2026-54789: out-of-bounds read/write in state cookie parsing Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2026-71299: Missing Authentication for Critical Function

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...

MiracleLinux 9 : libpcap-1.10.0-4.el9_8.1 (AXSA:2026-1962:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1962:01 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

CVE-2026-58815: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2026-63266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded...

PT-2026-104813

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

PT-2026-104709

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

MiracleLinux 8 : gdb-8.2-20.1.el8_10 (AXSA:2026-1966:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1966:03 advisory. gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 Tenable has extracted the preceding description block directly from...

PT-2026-104679

Name of the Vulnerable Software and Affected Versions MediaTek Modem affected versions not specified Description A missing bounds check in the modem allows for an out-of-bounds write. This issue can be exploited if a User Equipment UE connects to a rogue base station controlled by an attacker,...

Fedora 45 : chromium (2026-0daef29dc3)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0daef29dc3 advisory. Update to 154.0.8037.92 CVE-2026-102299: Type confusion in V8 CVE-2026-102300: Uninitialized resource in WebGPU CVE-2026-102301: Out of bounds write...

CVE-2026-55266: Uncontrolled Resource Consumption

In qsort of libufdtsysdepsvendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55280: Use of Uninitialized Variable

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106231

Name of the Vulnerable Software and Affected Versions Quay affected versions not specified Description An issue exists when handling build trigger requests where the application incorrectly exposes trigger configuration details. This exposure includes repository write tokens, which can be accesse...

PT-2026-106236

Name of the Vulnerable Software and Affected Versions Langflow versions 1.5.0 through 1.10.2 Description An IP spoofing issue exists in the Model Context Protocol MCP configuration installation endpoint 'POST /api/v1/mcp/project/project id/install'. Authenticated remote attackers can bypass the...

CVE-2026-55200

CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability Critical Pre-Authentication Memory Corruption Vulnerability in libssh2 Overview Field| Detail ---|--- CVE| CVE-2026-55200 CVSS| 9.2 Critical Type| Out-of-Bounds Write Component| libssh2 Affected Versions| = 1.11.1 Attack Vector...

CVE-2026-7791

CVE-2026-7791 PoC: Privileged by Default Research proof-of-concept for local privilege escalation in Amazon WorkSpaces TOCTOU + SYSTEM-level arbitrary file write in the Skylight Workspace Config Service. Full technical details: Cymulate blog | ---|--- CVE| CVE-2026-7791 Vendor| AWS Security...