PT-2026-84403

Name of the Vulnerable Software and Affected Versions Konga versions prior to 2.1.0 Description A privilege escalation issue allows low-privileged local attackers to execute arbitrary code. This is achieved by placing attacker-controlled OpenSSL configuration or library files in a hardcoded...

PT-2026-84285

Name of the Vulnerable Software and Affected Versions Cleo Harmony versions prior to 5.8.1.11 Description An issue exists in the SAML Authentication component where manipulation of the Email argument within the LocalUserUtil.getNativeUserByAssertions function allows for improper authentication...

PT-2026-84407

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A stored cross-site scripting XSS issue exists in the web-based management interface. This allows an unauthenticated adjacent attacker to execute arbitrary script code ...

PT-2026-84558

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description An information leak exists in the MediaCapture component. A remote attacker can potentially leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations...

EUVD-2026-69378

Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to modify privileged QoS policy on the master device via sending a crafted MQTT message to the csbroker component...

PT-2026-84477

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An unauthenticated remote actor can cause a denial-of-service condition by sending specially crafted packets, leading to the disruption of normal operations on the device. Recommendations At t...

JENGA: Exploiting Counter-Based RowHammer Countermeasures to Break Real-Time Predictability

Safety-critical real-time systems must satisfy multiple dependability requirements, notably time predictability and security. In such systems, tasks must complete within bounded and known execution times, typically characterised through Worst-Case Execution Time WCET analysis. At the same time,...

PT-2026-84467

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...

CVE-2026-52111

An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...

Linux Distros Unpatched Vulnerability : CVE-2026-82556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of...

PUB-A-509566096

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20260901-73-0049

The vulnerability in Netty is related to the incorrect checking of the specified data type for input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PUB-A-508698798

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-508377827

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-488233632

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-507435428

In Cellular Modem, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-463364901

In multiple places, there is a possible permission bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

CVE-2026-83524

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

CVE-2026-83524 RedPort Optimizer wXa-223 System Clock datetime.php exec command injection

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

CVE-2026-82954

A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched...