PT-2026-76875

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.20 Mattermost versions 11.7.0 through 11.7.5 Description The software fails to remove thread membership records when a user leaves or is removed from a team. This allows a user who is subsequently...

EUVD-2026-59913

The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post...

CVE-2026-72180

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

CVE-2026-72173

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72180

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

CVE-2026-72173

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

UBUNTU-CVE-2026-72180

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

CVE-2026-72351 gue: validate REMCSUM private option length

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...

CVE-2026-72180 mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

CVE-2026-72180 mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

EUVD-2026-58938

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: preserve pmdswpuffdwp on device-private PMD downgrade changenonpresenthugepmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmdswpuffdwp across. The PTE-level...

CVE-2026-72180

CVE-2026-72180 affects the Linux kernel’s huge memory handling (mm/huge_memory). The root cause is that during device-private PMD downgrade, the pmd_swp_uffd_wp flag can be lost when the swap entry is rewritten, allowing a plain mprotect() on a UFFD_WP-marked device-private THP to strip the flag ...

EUVD-2026-58931

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

CVE-2026-72173 fs/proc/task_mmu: do not warn on seeing non-migration pmd entry

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

PT-2026-72368

In the Linux kernel, the following vulnerability has been resolved: mm/huge memory: preserve pmd swp uffd wp on device-private PMD downgrade change non present huge pmd rewrites a writable device-private PMD swap entry into a readable one without carrying pmd swp uffd wp across. The PTE-level...

PT-2026-72361

In the Linux kernel, the following vulnerability has been resolved: fs/proc/task mmu: do not warn on seeing non-migration pmd entry Patch series "mm/hmm: A fix and a selftest", v3. Patch 1 fixes a stale warning present from the time when only migration softleaf entries were supported at the PMD...

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center NCC to establish a program that would allow private sector companies to take advantage of their "innovative capabilities" to break into foreign Transnational Criminal Organizations TCOs an...

CVE-2026-72643 Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents

Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not. A username is not unique across Elasticsearch authentication realms, so two distinct principals that...

CVE-2026-72643 Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents

Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not. A username is not unique across Elasticsearch authentication realms, so two distinct principals that...

CVE-2026-72673

Summary: Kibana Synthetics private locations across multiple spaces are vulnerable to unauthorized deletion due to Incorrect Authorization (CWE-863). The ACL check only considered monitors in the requesting user’s own space, allowing a user with Synthetics write privilege in one space to delete a...