Dell Watchdog Timer < 2.0.0.1 Privilege Escalation (DSA-2026-248)

According to its self-reported version, the Dell Watchdog Timer kernel driver WDTKernel.sys on the remote Windows host is prior to 2.0.0.1. It is, therefore, affected by an exposed IOCTL with insufficient access control vulnerability. A low privileged local attacker could potentially exploit this...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098675)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098675 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093635 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098873 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only stat...

CVE-2026-75329

super-diamond-server versions ≤ 1.3.3 have a missing authentication vulnerability in its Netty configuration distribution service (port 8283). An unauthenticated attacker can send a plain TCP request to obtain the full configuration of any project , including database passwords and API keys . The...

PT-2026-82199

Name of the Vulnerable Software and Affected Versions Linux Kernel ASoC affected versions not specified Description An issue exists in the lpass-tx-macro codec where the controls from "DEC0 MODE" to "DEC7 MODE" are enumerated, but the functions tx macro dec mode get and tx macro dec mode put...

EUVD-2025-210793

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

PT-2026-82240

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow exists in the ZFS filesystem support, which can be triggered by malformed on-disk metadata. This flaw may lead to incorrect memory allocation and subsequent out-of-bounds...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093190 advisory. Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098813 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix & Optimize table creation from possibly unaligned memory Source blob may come from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104759 advisory. Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security...

CVE-2026-80202 Kimai before 2.56.0 Authorization Bypass via TimesheetVoter

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...

CVE-2026-80202

Kimai before 2.56.0 has an authorization bypass in TimesheetVoter::voteOnAttribute() , which maps permissions only to own_timesheet or other_timesheet without enforcing team-membership checks. Any authenticated user holding ROLE_TEAMLEAD (or a role with edit_other_timesheet/delete_other_timesheet...

CVE-2026-80197 Kimai before 2.57.0 Improper Authorization via Favorite Endpoints

Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints that allows authenticated users to manipulate other users' bookmarks. Attackers can add or remove timesheet entries from another user's favorite list by referencing their...

CVE-2026-80197 Kimai before 2.57.0 Improper Authorization via Favorite Endpoints

Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints that allows authenticated users to manipulate other users' bookmarks. Attackers can add or remove timesheet entries from another user's favorite list by referencing their...

CVE-2026-80195

Kimai before 2.63.0 has a business logic / improper authorization flaw in the team update API endpoint (PATCH /api/teams/{id} ). The endpoint deletes all existing team membership rows before validating the submitted replacement member list. An authenticated user with team-edit permission can ther...

CVE-2026-80194

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_project_view_export). Authorization guards are attached to the sibling __invoke method rather than at the class level, leaving the export route without any authorization checks. As...

CVE-2026-80191 GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests

GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards the check with a condition requiring the user to be non-null, so a request that carries n...

CVE-2026-80191

GROWI (a knowledge management platform) prior to 8.0.2 contains a missing authorization flaw in the attachment retrieval logic. The function retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards its page-viewer permission check with a condition requiring the user to...

CVE-2026-80191 GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests

GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards the check with a condition requiring the user to be non-null, so a request that carries n...