CVE-2026-64487

A flaw was found in the Linux kernel's sound subsystem, specifically within the ALSA caiaq driver responsible for handling Traktor Kontrol S4 devices. A local attacker, by providing specially crafted input from a connected device, could exploit an out-of-bounds read vulnerability. This issue aris...

CVE-2026-67248 A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

EUVD-2026-50965

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-67248 A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-64468

A flaw was found in the Linux kernel's binder component. A use-after-free UAF vulnerability exists in the binderfreetransaction function, where a process's reference is accessed after the lock protecting it is released, allowing the process to terminate prematurely. A local attacker with low...

CVE-2026-67247

CVE-2026-67247 describes a path traversal vulnerability in ADM’s IHM Log handling where user-controlled disk serial input is not sufficiently validated before being used to construct the path to an IHM log database file. An authenticated attacker could access an unintended filesystem path or log ...

CVE-2026-64307

A flaw was found in the Linux kernel's crypto:ccp module. A local attacker with access to a userspace process could exploit this vulnerability. If Secure Encrypted Virtualization SEV initialization fails while Kernel-based Virtual Machine KVM is running virtual machines, the attacker can trigger ...

CVE-2026-67246

CVE-2026-67246 is a path traversal vulnerability in the Wallpaper component of ADM. Authenticated users can supply a crafted wallpaper path input that is not sufficiently validated before file access, allowing access to or manipulation of files outside the intended wallpaper directory, constraine...

CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

CVE-2026-67245

CVE-2026-67245 describes a path traversal in the ADM VPN Clients caused by insufficient validation of user-controlled certificate name when building the upload destination path. An authenticated attacker could write an uploaded certificate file outside the intended VPN certificate directory, cons...

CVE-2026-18186

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

CVE-2026-64526

A flaw was found in the Linux kernel's ethtool tsconfig component. A missing cleanup function call after an operation could lead to resource exhaustion. This vulnerability may allow a local attacker to cause a Denial of Service DoS by depleting system resources...

CVE-2026-64558

A flaw was found in the Linux kernel, specifically within the s390/pkey component. This vulnerability occurs because the pkeypckmo handler function does not explicitly check the length of the target buffer. If the generated output data exceeds the provided buffer's length, the handler function...

CVE-2026-18188

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

CVE-2026-18188 A format string vulnerability was found in the Rsync Backup on the ADM

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

EUVD-2026-50950

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...

CVE-2026-18187

CVE-2026-18187 describes a format string vulnerability in the ADM internal backup CGI. The issue stems from including user-controlled task input in error responses that are processed by an unsafe format string operation. An authenticated attacker could exploit this remotely (network access) to di...

CVE-2026-18187 A format string vulnerability was found in the Internal Backup on the ADM

A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory...

CVE-2026-64560

A flaw was found in the Linux kernel's CPU timer functionality. A race condition, which is a timing issue between different operations, can occur when a process attempts to delete a timer while another operation is still trying to access it. This can lead to a Use-After-Free UAF vulnerability,...

netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to...