CVE-2026-52483

The MitraStar GPT-2741GNAC-N2-SV router, running firmware BR_g8.10_1.11(WVK.0)b46 , is vulnerable to arbitrary OS command execution . The flaw exists in the ping diagnostics and similar functions due to the improper neutralization of special elements used in an OS command. Specifically, an authen...

EUVD-2026-82467

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

PT-2026-94713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt76 wifi driver where reset work and rc work are not cancelled during device unregistration. While dump work is cancelled, the other two tasks are only flushed...

CVE-2026-52483

The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11WVK.0b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi...

CVE-2026-93096: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Serialize multi-part Get/Set Feature transfers A Get or Set Feature payload larger than the mailbox payload size is split into several mailbox commands. mboxmutex only serializes individual mailbox commands and is...

PT-2026-94899

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/hfi1 component where the hfi1 free devdata function unconditionally erases dd-unit, assuming the device was successfully inserted into the unit table. If the ...

PT-2026-94814

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the arm scmi firmware component. The function scmi protocol device unrequest releases the scmi requested devices mtx mutex while notifying listeners but...

PT-2026-94769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the PCI subsystem. This occurs when a probe runs concurrently with the removal of dynamic IDs, as the remove id store function can free the node whil...

PT-2026-94868

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the ipu6 media component. The function ipu6 bus initialize device stores the isys/psys pdata pointer in struct ipu6 bus device and initializes the auxiliary...

PT-2026-94878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where scmi device destroy uses a protocol and name lookup method that excludes transport devices, preventing them from being properly...

PT-2026-94879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi child dev find function drops the reference returned by device find child prematurely. This can lead to a race condition...

PT-2026-94965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the zynqmp dma remove function between runtime Power Management PM and device removal. The issue occurs because runtime PM is disabled only after the system...

PT-2026-94967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-unlock issue exists in the lp5860 device init function. If the lp5860 init dt function fails, a mutex that has already been unlocked is unlocked a second time. A double-unlock...

PT-2026-95097

Name of the Vulnerable Software and Affected Versions NetBox Device Type Library affected versions not specified Description An unauthenticated pull-request author can modify the NETBOX DT LIBRARY URL constant in tests/test configuration.py before the validation test harness executes. During pyte...

PT-2026-95095

Name of the Vulnerable Software and Affected Versions NetBox Device Type Library affected versions not specified Description The validation test harness allows the deserialization of tracked pickle cache files via the pickle.load method within the read pickle data function located in tests/pickle...

PT-2026-94688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pinctrl generic subsystem when the pinctrl generic to map function fails. The function parses Device Tree DT configuration and allocates pinctrl maps using...

PT-2026-94677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID subsystem. The hid device io start function allows reports to run concurrently with the probe process. If the probe fails, the hid device probe...

PT-2026-94900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/rvt component. The rvt alloc device function deallocates the IB device when the port array allocation fails, but it continues to return the...

CVE-2026-93188: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: bound device-supplied profile index konekeepvaluesuptodate and koneprofileactivated use an 8-bit, device-supplied profile value as an index into the 5-element kone-profiles array without a range check. A malicious US...

PT-2026-94704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mt7996 wireless driver. The function mt7996 mac reset vif iter queues non-default virtual interface vif links for kfree rcu while the dev-wcid array...