Three Silent Vulnerabilities Discovered in the glibc Core

The GNU C Library (glibc) has three disclosed vulnerabilities affecting versions up to 2.43: `CVE-2026-5358` (static buffer overflow in `nis_local_principal` via crafted UDP responses), `CVE-2026-5450` (heap buffer overflow in `scanf` with the `%mc` specifier due to a one-byte under-allocation), and `CVE-2026-5928` (an `ungetwc` implementation bug that can cause heap under-read and potential disclosure). While these issues are technically serious, the report notes limited real-world exploitability (deprecated NIS usage, rare `%mc` usage, and Unicode mitigations) and advises updating glibc to versions newer than `2.43`.