Cisco ASA Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20247)

A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid...

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20245)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

Linux Distros Unpatched Vulnerability : CVE-2026-98248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: percpu: Fix LSE operations on 8,16-bit types The assembly for percpunamecasesz and percpunamereturncasesz doesn't use the 'sfx' macro argument to form th...

Linux Distros Unpatched Vulnerability : CVE-2026-98207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: spi: reset bytesxfered before retrying CRC failures mmcspidatado updates data-bytesxfered after each block has been transferred successfully. If a later...

Cisco ASA Trust Boundary Violation (CVE-2022-20826)

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...

ROS-20261006-73-0333

The vulnerability in the drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-55307: Improper Privilege Management

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-104033: Off-by-one Error

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

CVE-2026-98334: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211startap can set enablebeacon and beaconint and fail later, leaving it set forever. Scanning can then attempt to restore beaconing on such an interface, leading to: Oops:...

CVE-2026-98207: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mmc: spi: reset bytesxfered before retrying CRC failures mmcspidatado updates data-bytesxfered after each block has been transferred successfully. If a later block in the same data request fails with a CRC error, data-bytesxfered...

Linux Distros Unpatched Vulnerability : CVE-2026-98334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: reset state when starting AP fails ieee80211startap can set enablebeacon and beaconint and fail later, leaving it set forever. Scanning can then...

ROS-20261006-73-0063

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

ROS-20261006-73-0076

The vulnerability in the kernel-lt is related to a memory rerelease error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261006-73-0003

The vulnerability of the bcmrxsetup function in the net/can/bcm.c module of the Linux kernel’s CAN subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106663

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211 start ap can set enable beacon and beacon int and fail later, leaving it set forever. Scanning can then attempt to restore beaconing on such an interface, leading to:...

PT-2026-107103

In kdn set sysregs prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-106122: Encoding Error

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

Cisco ASA Origin Validation Error (CVE-2023-20275)

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper...

Cisco ASA Reachable Assertion (CVE-2021-1422)

A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...

PT-2026-107376

Name of the Vulnerable Software and Affected Versions OWASP Coraza WAF versions 3.4.0 through 3.7.0 Description The multipart processor in internal/bodyprocessors/multipart.go incorrectly treats io.ErrUnexpectedEOF as a non-fatal condition without setting the MULTIPART STRICT ERROR flag. This...