PT-2026-91214

LangBot's plugin runtime pip package langbot plugin through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 /plugin/ws whose authentication is gated on plugin debug key, which defaults to an empty string and is never set by the upstream repository, Docker image, or docker-compose which...

PT-2026-91026

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive Information Into Debugging Code...

Linux Distros Unpatched Vulnerability : CVE-2026-89497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, , but then...

CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

DEBIAN-CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

AZL-100181 CVE-2026-89497 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

UBUNTU-CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

EUVD-2026-76403

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-89497 orangefs: skip leading spaces before parsing client debug masks

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-19985

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

EUVD-2026-75937

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

CVE-2026-19985 Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

CVE-2026-19985 Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...

CVE-2026-19985

Relevanssi – A Better Search (WordPress plugin) versions up to and including 4.28.1 are vulnerable to Reflected Cross-Site Scripting via the s, post_types, and orderby request parameters. The root cause is insufficient input sanitization and output escaping in the relevanssi_debug_array() functio...

PT-2026-89753

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'post types', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssi debug...

PT-2026-90213

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefs prepare cdm array sizes each client debug keyword buffer with strcspncds head, " ", but then parses the keyword with %s. The %s conversion skips leading...

CVE-2026-42805

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI C library within the debug message parser function bhi385parsedebugmessage located in bhi385parse.c. The function parses FIFO events and extracts an 8-bit message length directly from the attacker-controlle...

CVE-2026-42804

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPIC-Library in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem inside the function bhi360parsedebugmessage in bhi360parse.c line...

EUVD-2026-75361

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI C library within the debug message parser function bhi385parsedebugmessage located in bhi385parse.c. The function parses FIFO events and extracts an 8-bit message length directly from the attacker-controlle...