CVE-2026-76459: Out-of-bounds Write

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-106559: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

CVE-2026-103435: Improper Limitation of a Pathname to a Restricted Directory

Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use TOCTOU gap allowed an attacker who could write to the workspace to...

CVE-2026-19186: Integer Underflow (Wrap or Wraparound)

ieee802154decipherdataframe in subsys/net/l2/ieee802154/ieee802154frame.c computed payloadlen = netpktgetlenpkt - llhdrlen - authtaglen without first checking that the received frame is at least llhdrlen + authtaglen bytes long. All three variables are uint8t, so a frame whose payload is shorter...

CVE-2025-64391: Insecure Operation on Windows Junction / Mount Point

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

CVE-2026-103870: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

RockyLinux 8 : libpcap (RLSA-2026:76045)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:76045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

PT-2026-107389

Name of the Vulnerable Software and Affected Versions wolfSSL wolfSSH versions 1.4.11 through 1.5.0 Description An unsigned integer underflow occurs in the wstrncat function within src/port.c on non-Windows platforms. This issue allows an authenticated remote attacker to write a single null byte...

PT-2026-107492

Name of the Vulnerable Software and Affected Versions Claude Code affected versions not specified Description A time-of-check to time-of-use TOCTOU gap exists where the software validates that a target file path is within the project working directory during the permission check but re-resolves t...

PT-2026-107501

A path traversal vulnerability exists in the EmailSheet extract parts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

PT-2026-107422

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

vim security update

8.0.1763-32.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-32 - RHEL-271024 vim: vim: Ex command injection via crafted filename in signjump 2:8.0.1763-32 - RHEL-257017 CVE-2026-73073 arbitrary Ex...

PT-2026-107601

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An out-of-bounds write issue exists in the software. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, which can lead to memory corruption...

PT-2026-107641

Name of the Vulnerable Software and Affected Versions Quasar Framework versions 3.1.0 through 3.2.9 Description In @quasar/app-vite SSG, page definitions returned by the getSsgPages function could provide dir and filename values that were joined to build.distDir without verifying the final...

UBUNTU-CVE-2026-93523

XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write...

UBUNTU-CVE-2026-93520

XKB ChangeKeycodeRange Heap Out-of-Bounds Write...

CVE-2026-107221: Out-of-bounds Write

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-76454: Relative Path Traversal

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

CVE-2026-106560: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-103416: Out-of-bounds Write

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds pointers. A malicious or compromised server can make a TL...