CVE-2026-98334

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211startap can set enablebeacon and beaconint and fail later, leaving it set forever. Scanning can then attempt to restore beaconing on such an interface, leading to: Oops:...

EUVD-2026-93298

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...

CVE-2026-98313 drm/msm/dp: skip PUSH_IDLE when the link was never enabled

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...

CVE-2026-98313

The Linux kernel contains a vulnerability in the drm/msm/dp driver where msm_dp_display_atomic_disable() writes DP_STATE_CTRL_PUSH_IDLE even if link training fails and the link was never enabled. Because this specific write is not gated on the power_on flag, the controller's runtime-PM reference ...

CVE-2026-98313 drm/msm/dp: skip PUSH_IDLE when the link was never enabled

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...

CVE-2026-98178 drm/amdgpu: Skip KFD mapping clear before initialization

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

CVE-2026-98178 drm/amdgpu: Skip KFD mapping clear before initialization

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

CVE-2026-98178

The Linux kernel contains a vulnerability in the drm/amdgpu driver where the function amdgpu_amdkfd_clear_kfd_mapping() incorrectly assumes a non-NULL kfd_dev has a fully populated node array. This issue occurs when KFD device initialization fails after the probe phase, specifically on Polaris sy...

CVE-2026-6741

CVE-2026-6741 ثغرة CVE-2026-6741 هي ثغرة تصعيد صلاحيات Privilege Escalation بتقييم CVSS 8.8 عالية ومُوثَّقة Authenticated Agent+ في إضافة LatePoint – Calendar Booking Plugin CVE-2026-6741 — ماسح تصعيد الصلاحيات في LatePoint الإضافة: LatePoint – Calendar Booking Plugin للمواعيد والفعاليات latepoin...

CVE-2026-5076

CVE-2026-5076 - ثغرة إعادة تعيين كلمة المرور في ARMember معلومات الثغرة العنصر| التفاصيل ---|--- CVE ID| CVE-2026-5076 البرنامج المساعد| ARMember – إضافة العضوية وتقييد المحتوى الإصدار المتأثر| Premium = 7.3.1 الإصدار المُصحَّح| 7.3.2 درجة CVSS| 9.8 حرجة CWE| CWE-640: استرداد كلمة مرور ضعيف النوع...

CVE-2026-10580

WordPress - إضافة Hippoo Mobile App for WooCommerce = 1.9.4 - تجاوز المصادقة إلى الاستيلاء على حساب المسؤول نظرة عامة هذه الأداة هي إثبات مفهوم لاستغلال الثغرة CVE-2026-10580 ، وهي ثغرة تجاوز المصادقة تؤثر على إضافة Hippoo Mobile App for WooCommerce لووردبريس الإصدارات = 1.9.4. تسمح الثغرة...

rapid-reset-check

Rapid Reset Check rapid-reset-check est un petit outil CLI en Go permettant d'inventorier rapidement les points de terminaison HTTPS qui exposent HTTP/2 et nécessitent donc une revue de l'atténuation de la CVE-2023-44487. Le scanner n'exploite délibérément pas la vulnérabilité. Il résout chaque...

EUVD-2026-92806

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staffid and cause the School Information update path to reset that selected account's password...

CVE-2026-105785

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

PT-2026-106507

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpu amdkfd clear kfd mapping assumes that a non-NULL kfd dev has a fully populated node array. This is not true when KFD device initialization fails after probe. For...

PT-2026-106779

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.89.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.33 Description A user capable of querying a collection with a polymorphic join to sensitive fields can infer hidden or read-restricted values, such as...

Linux Distros Unpatched Vulnerability : CVE-2026-98313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main...

CVE-2026-105853: Exposure of Sensitive Information to an Unauthorized Actor

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh responses and password reset responses can independently return hidden or read-restricted fields that the requesting user cannot...

PT-2026-106558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm input function where the current xfrm state is stored in the skb secpath during receive-side processing. Certain input paths, including the VTI receive path,...

PT-2026-106642

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH IDLE when the link was never enabled msm dp display atomic enable returns early when link training fails, leaving -power on false and the main link down. msm dp display atomic disable nevertheless writes DP...