CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-82090

Pocket for Android (versions through 8.33.0.0 ) is affected by a Cross-Site Scripting (XSS) vulnerability rated CVSS 4.0 9.2 (CRITICAL) . The root cause is that the "Save to Pocket" feature injects external HTML into the DOM, allowing injected JavaScript to alter the application state via native ...

EUVD-2026-67403

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-80634: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is u8, so if it's already 0 the decrement still happens and wraps it to...

CVE-2026-82090: Improper Neutralization of Input During Web Page Generation

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

Linux Distros Unpatched Vulnerability : CVE-2026-80634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is...

CVE-2026-80664: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...

PT-2026-82934

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num encaps underflow on bridge VLAN untag The DEV PATH BR VLAN UNTAG case post-decrements info-num encaps inside WARN ON ONCE. num encaps is u8, so if it's already 0 the decrement still happens and wra...

PT-2026-82964

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt nat: reject unsupported target families xt nat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nft...

PT-2026-82870

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability scored CVSS 8.8 (HIGH) . An attacker on an adjacent network can chain three weaknesses—an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key with world-readable permissio...

CVE-2026-76639 Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

EUVD-2026-67165

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

SUSE CVE-2026-74625

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it. For non-IPv4 and non-IPv6 EtherTypes, nfctbridgepre currently...

PT-2026-82732

Name of the Vulnerable Software and Affected Versions Unitree G1 EDU firmware versions prior to 1.5.3 Description An unauthenticated remote code execution flaw allows network-adjacent attackers to execute arbitrary commands as root. This is achieved by chaining three weaknesses: an unauthenticate...

CVE-2026-77552

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

CVE-2026-77552

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

CVE-2026-77552

UniFi Enterprise Audio/Video Bridge (by Ubiquiti) is affected by an Improper Input Validation vulnerability that allows a network-accessible malicious actor to execute a Command Injection on the device. The flaw requires no authentication or user interaction, yielding a CVSS 3.1 score of 9.8 (CRI...