CVE-2026-76945: Use of Client-Side Authentication

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

ROS-20260827-73-0023

The vulnerability of the spiqupremove function in the drivers/spi/spi-qup.c module of the Linux operating system’s SPI device driver relates to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2026-82790

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 affected versions not specified Description The web management interface fails to properly verify the origin or authenticity of submitted requests. This allows an unauthenticated remote attacker to trick an authenticated...

PT-2026-82777

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 affected versions not specified Description MQTT credentials and control traffic are transmitted in cleartext, which exposes sensitive information to network-level attackers. This flaw may allow unauthorized device impersonation...

PT-2026-82792

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 affected versions not specified Description The device fails to restrict repeated authentication attempts because it lacks rate limiting or account lockout mechanisms. This deficiency allows attackers to conduct automated...

PT-2026-82780

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 version FW-9167-0-11 Ebyte NA111-M affected versions not specified Description The web management interface fails to consistently enforce authentication before granting access to administrative functionality. This allows an...

CVE-2026-75548: Improper Restriction of Rendered UI Layers or Frames

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

PT-2026-82794

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

CVE-2026-69658: Cleartext Transmission of Sensitive Information

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

The vulnerability of the usbhs_remove() function in the drivers/usb/renesas_usbhs/common.c driver module of the Linux operating system’s USB device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbhsremove function in the drivers/usb/renesasusbhs/common.c driver for Linux USB device controllers is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the roccat_reportevent() function in the drivers/hid/hid-roccat.c module of the device subsystem of the Linux operating system’s user interface driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the roccatreportevent function in the drivers/hid/hid-roccat.c module of the Linux kernel device subsystem driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-82778

Name of the Vulnerable Software and Affected Versions Ebyte device affected versions not specified Description The device relies on client-side authentication logic that can be reproduced by unauthenticated users. This allows an attacker to generate valid authentication requests and bypass securi...

Fedora 43 : bluez (2026-a1cdcc1604)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a1cdcc1604 advisory. An out-of-bounds read flaw was found in BlueZ in the AVRCP profile implementation. The vulnerability exists in the parsemediaelement and parsemediafolder...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sg3_utils (UTSA-2026-104844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104844 advisory. A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in...

CVE-2026-75340

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices are affected by insufficient cryptographic protections in the local device communication protocol. An attacker on an adjacent network can intercept, replay, or forge locally exchanged control messages, leading to unauthorized device control , state manipul...

CVE-2026-79003

A flaw was found in Google Chrome. A remote attacker, by leveraging social engineering tactics, could exploit an incorrect authorization vulnerability in the Device component. This could allow the attacker to bypass system access restrictions through a specially crafted HTML page...

CVE-2026-80569

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

CVE-2026-80553

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-80549

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...