CVE-2026-74529

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI synchronization component. This vulnerability, a Use-After-Free UAF, occurs when a connection object is prematurely released while the hcisync task is still active. A local attacker could potentially exploit this to...

CVE-2026-16047

Mattermost versions 11.7.x ≤ 11.7.6, 10.11.x ≤ 10.11.21, and 11.8.x ≤ 11.8.3 contain an authorization flaw in the board-to-channel linking functionality. The server fails to verify that the requesting user has read access to a target channel before associating a board with it. An authenticated us...

CVE-2026-19693

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-74549

A flaw was found in the hwmon hardware monitoring driver for the nct6775-core in the Linux kernel. During initialization, the driver incorrectly accesses memory beyond the allocated buffer when handling certain register arrays. This out-of-bounds read can lead to the use of invalid hardware...

CVE-2026-72069

A flaw was found in the Linux kernel. The rtspinunlock function, and similar real-time RT locking mechanisms, incorrectly release Read-Copy-Update RCU protection before fully unlocking, leading to a Use-After-Free UAF vulnerability. This issue could allow a local attacker to potentially cause a...

EUVD-2026-60204

Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

MINI-3PRC-GHH9-VWMV

Bulletin has no description...

MINI-C5HQ-RVJ7-8C8W

Bulletin has no description...

MINI-HJQ3-4XH6-3857

Bulletin has no description...

MINI-M5X7-847R-99W2

Bulletin has no description...

MINI-476J-R2XJ-CGH5

Bulletin has no description...

MINI-3743-F47X-8Q7H

Bulletin has no description...

MINI-CF6G-35GR-9H6W

Bulletin has no description...

MINI-2H8C-QGMR-7HCC

Bulletin has no description...

CVE-2026-68457

A flaw was found in ksmbd in the Linux kernel. This vulnerability allows certain file system control FSCTL operations, specifically SETSPARSE, SETZERODATA, and SETCOMPRESSION, to use incorrect credentials. Consequently, these operations can bypass the security checks established when the file was...

CVE-2026-16139 Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

CVE-2026-19693

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

CVE-2026-70412

Dell iDRAC9 (pre-7.20.30.50) and iDRAC10 (pre-1.20.60.50) expose remanent data after memory erase, enabling a low-privileged remote attacker to disclose information. CVSS 3.5 (LOW) requires low privileges and user interaction. No exploit code or in-the-wild exploitation is documented; apply Dell ...

CVE-2026-70412

Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...