BELL-CVE-2026-53080

Bulletin has no description...

BELL-CVE-2026-53067

Bulletin has no description...

BELL-CVE-2026-53070

Bulletin has no description...

BELL-CVE-2026-53055

Bulletin has no description...

BELL-CVE-2026-53049

Bulletin has no description...

BELL-CVE-2026-53028

Bulletin has no description...

BELL-CVE-2026-53019

Bulletin has no description...

BELL-CVE-2026-53010

Bulletin has no description...

BELL-CVE-2026-53009

Bulletin has no description...

BELL-CVE-2026-53004

Bulletin has no description...

BELL-CVE-2026-52995

Bulletin has no description...

BELL-CVE-2026-52991

Bulletin has no description...

BELL-CVE-2026-52966

Bulletin has no description...

BELL-CVE-2026-52949

Bulletin has no description...

DEBIAN-CVE-2026-48928

A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-50745

A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input t...

Malicious code in prism-silq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb3e8b0ded57991e21f137aac7c905348a83f6be7914c4da619c18d2acd280c The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...

CVE-2026-53170

A flaw was found in the Linux kernel's accel/ethosu driver. A local attacker could exploit a vulnerability where DMA commands with uninitialized length are not properly handled. By omitting a specific DMA length setup command and issuing a DMA start command, a user could bypass bounds checks,...

KLA91120 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to inject malicious code, cause denial of service, obtain sensitive information, execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of...

Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064

The Tealium iQ Tag Management module provides Drupal integration with Tealium iQ. tealiumiq stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an Object Injection vulnerability when the data are unserialized. This...