CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-64251 pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-55731

Loytec LINX firmware (LINX-A64) versions up to 8.4.16 are affected by an unchecked input for loop condition (CWE-606) in the SNMP agent. The issue allows an unauthenticated remote attacker to cause persistent denial of service (CPU exhaustion) by sending a crafted SNMP GETNEXT request with a larg...

PT-2026-67585

Summary The GET /api/global/groups endpoint on the worker service has no role-based authorization middleware. Any authenticated user including BASIC role can enumerate all user groups in the tenant, including their role mappings, user memberships, builder permissions, and the isDefault flag. Step...

PT-2026-64366

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pwrseq debugfs seq next function. The function declares a next variable with freeput device, which triggers put device when the variable goes out of...

📄 SIP Sustainable Irrigation Platform 5.x Cross Site Request Forgery

SIP Sustainable Irrigation Platform version 5.x performs state-changing actions through HTTP GET requests without including any anti-CSRF token or validating the request origin. This can be exploited to perform administrative actions such as disabling the passphrase, rebooting the device, deletin...

PT-2026-67610

Summary The Budibase Worker service exposes a public, unauthenticated API endpoint GET /api/global/users/tenant/:id that returns sensitive user information including tenantId, userId, email, and ssoId. The endpoint is registered in the PUBLIC ENDPOINTS list with a TODO comment acknowledging it...

PT-2026-64303

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec...

CVE-2026-65698

The CVE-2026-65698 entry describes a path traversal vulnerability in Void 1.3.4’s AI agent file-reading tools. The read_file, ls_dir, get_dir_tree, and search_* tools allow network-adjacent attackers to inject instructions and read arbitrary host files outside the open workspace, bypassing worksp...

GHSA-6HQ5-7373-42RG PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist

Summary The domain whitelist introduced in PhpSpreadsheet 5.4.0 for the WEBSERVICE formula function can be bypassed via HTTP redirect. The whitelist validates only the initial URL's hostname, but filegetcontents follows 302/301 redirects by default without re-validating the redirect target agains...

kernel: vt: prevent kernel-infoleak in con_font_get()

In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in confontget font.data may not initialize all memory spaces depending on the implementation of vc-vcsw-confontget. This may cause info-leak, so to prevent this, it is safest to modify it to initialize...

PYSEC-2026-3507 PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation Summary PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The publi...

SUSE CVE-2026-63837

In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output enaphcgettimex64 is setting the output parameter regardless of whether enacomphcgettimestamp succeeded or failed. When enacomphcgettimestamp returns an error, the...

The vulnerability of the ethtool_get_link_ksettings() function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions allows a hacker to cause a service failure.

The vulnerability of the ethtoolgetlinkksettings function in the net/ethtool/ioctl.c module of the Linux kernel’s networking functions relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-48012: URL Redirection to Untrusted Site

Shopware is an open commerce platform. Versions 6.7.3.0 through 6.7.10.0 have an open redirect in Shopware's public SSO entry point at GET /api/oauth/sso/auth. When the endpoint is reached without the expected SSO session state, the application falls back to the request's Referer header and uses...

GO-2026-6050 Gitea: Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents in gitea.dev

Gitea: Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents in gitea.dev...

SUSE-SU-2026:3192-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-55628: policy bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache bsc1271100. - CVE-2026-56366: ME...

EUVD-2026-46640

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that results in arbitrary command execution on the charging station...

Tenda AC10 buffer overflow vulnerability

The Tenda AC10 is a wireless router device produced by the Chinese company Tenda. The Tenda AC10 has a buffer overflow vulnerability. This vulnerability stems from a function in the httpd/netctrl component called fromAdvSetLanip, which handles operations on the GetValue/SetValue parameters, leadi...

The vulnerability of the get_items() function in the WordPress content management system allows a hacker to bypass security restrictions, execute arbitrary code, and gain unauthorized access to protected information.

The vulnerability of the getitems function in the WordPress content management system is related to the occurrence of synchronization issues between the permission check array, the allowed endpoints list, and the execution array. Exploiting this vulnerability could allow an attacker to bypass...