Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098794 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: use generic driveroverride infrastructure When a driver is probed through driverattach, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098919 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098670 advisory. A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098912 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

CVE-2026-77537: Improper Input Validation

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-77539: Improper Input Validation

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-29988: Cleartext Transmission of Sensitive Information

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

PT-2026-82069

Name of the Vulnerable Software and Affected Versions UniFi Access Application affected versions not specified Description An improper input validation issue allows a malicious actor with network access and low privileges to perform command injection on the host device. Command injection is a fla...

PT-2026-82075

Name of the Vulnerable Software and Affected Versions UniFi Enterprise Audio/Video Bridge affected versions not specified Description An improper input validation issue allows a network-based actor to perform command injection on the device. Command injection is a flaw where an attacker can execu...

PT-2026-82054

Name of the Vulnerable Software and Affected Versions UniFi Network Application affected versions not specified Description An improper input validation issue allows a malicious actor with network access and high privileges to perform command injection on an adopted device. Command injection is a...

PT-2026-82052

Name of the Vulnerable Software and Affected Versions UniFi Protect Application affected versions not specified Description An improper input validation issue allows a malicious actor with network access and low privileges to perform command injection on the host device. Command injection is a fl...

PT-2026-82179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the sloppy-logic-analyzer component of the Linux kernel. The trigger write function dereferences the gpio la poll priv object without taking a debugfs...

PT-2026-82235

Name of the Vulnerable Software and Affected Versions TP-Link Kasa affected versions not specified Description Multiple smart home devices have insufficient cryptographic protections in the local device communication protocol. An attacker on the same network can intercept, replay, or forge locall...

PT-2026-82085

Name of the Vulnerable Software and Affected Versions UniFi Talk Application versions prior to 5.3.2 Description An improper input validation flaw allows a malicious actor with network access to execute a command injection on the host device. This issue enables the execution of operating system...

PT-2026-82056

Name of the Vulnerable Software and Affected Versions UniFi Protect Application affected versions not specified Description An improper input validation issue allows a network-connected actor to perform command injection on the host device. Command injection is a flaw where an attacker can execut...

PT-2026-82076

Name of the Vulnerable Software and Affected Versions UniFi Access Application affected versions not specified Description An Improper Access Control issue allows a malicious actor with network access and low privileges to escalate privileges on the host device. Improper Access Control occurs whe...

PT-2026-82269

Name of the Vulnerable Software and Affected Versions PayRange API affected versions not specified Description The PayRange API lacks proper authorization on management endpoints, allowing public access to verbose details of every device on the network, regardless of whether the requester has an...

PT-2026-82175

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sur40 probe function where input register device is called before the V4L2 video device and vb2 queue components are fully initialized. If a userspace process open...

CVE-2026-75340

The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...

PT-2026-82062

Name of the Vulnerable Software and Affected Versions UniFi Access Application affected versions not specified Description An improper input validation issue allows a malicious actor with network access and low privileges to perform command injection on the host device. Command injection is a...