CVE-2026-25280

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

EUVD-2026-81327

Memory corruption when processing escape handling flow with insufficient user buffer sizes...

EUVD-2026-81284

AVideo through 29.0 current revision e01e41ecc contains a stored cross-site scripting vulnerability. The unauthenticated view-counter endpoint objects/videoAddViewCount.json.php reaches VideoStatistic::save, which writes the caller's User-Agent via getUserAgentInfo, which returns unrecognized age...

CVE-2026-74017: Missing Authorization

Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...

RockyLinux 9 : firewalld (RLSA-2026:67585)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

CVE-2026-92894: Incorrect Authorization

A flaw was found in the foremanansible plugin's Ansible override values API. The destroy action resolves the target LookupValue record by ID without verifying it belongs to an AnsibleVariable the caller is authorized to edit. An authenticated user with the editansiblevariables permission can dele...

PT-2026-95141

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.5 Description A flaw exists in the way user profile bios are processed. The file 'app/controller/user/profile.php' accepts the userbio field and processes it using the sanitizeHTML function in...

CVE-2026-90099: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier change paths filter objects, per-CPU counters, and per-filter aux data use plain GFPKERNEL without GFPACCOUNT, allowing unprivileged users...

PT-2026-94160

Name of the Vulnerable Software and Affected Versions Choose User Role at Registration WordPress plugin versions prior to 1.3.3 Description An issue exists where the plugin fails to validate the role requested during registration against the roles predefined by an administrator. This allows...

CVE-2026-85128: Improper Privilege Management

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved...

CVE-2026-54506: Improper Neutralization of Input During Web Page Generation

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, app/controller/user/profile.php accepts the userbio field and passes stored content through sanitizeHTML in system/functions.php, whose on event-handler regular expression omi...

PT-2026-94158

Name of the Vulnerable Software and Affected Versions Dictionary WordPress plugin versions prior to 1.1 Description The plugin fails to escape user input before reflecting it in the responses of several directly accessible scripts. This allows unauthenticated attackers to execute Reflected...

CVE-2026-54053: Improper Limitation of a Pathname to a Restricted Directory

Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated user can write arbitrary files outside...

CVE-2026-93154: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Prevent userspace from deregistering the MRs that back QP/CQ/SRQ rings by bumping the MR's refcount upon association...

Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rlotti...

CVE-2026-85500: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

PT-2026-94651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the show pte function when CONFIG DEBUG USER=y and the user debug=31 command line option is enabled. This occurs because a user fault can trigger show pt...

PT-2026-94771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the RDMA/rxe component. The function rxe odp mr init user assigns a memory reference to mr-umem before calling rxe odp init pages. If rxe odp init...

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-94901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the esp ssg unref function where it incorrectly releases page references on the source scatterlist after an AEAD operation. When a socket buffer skb contains managed...