CVE-2026-4833 Orc discount Markdown markdown.c compile recursion

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

EUVD-2026-16078

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

SUSE CVE-2026-34085

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c...

CVE-2026-32748

CVE-2026-32748 affects Squid, a web caching proxy. The issue is a heap Use-After-Free in ICP handling, allowing a remote attacker to cause Denial of Service when ICP is enabled (icp_port configured). The attack is remote, requires ICP support, and cannot be mitigated by icp_access rules. A fix is...

WAVLINK WL-NU516U1 安全漏洞

WAVLINK WL-NU516U1 is a wireless print server developed by WAVLINK Corporation. The WAVLINK WL-NU516U1 260227 version contains a security vulnerability. This vulnerability stems from incorrect handling of the Content-Length parameter in the function ftext located in the /cgi-bin/nas.cgi file. It...

PT-2026-28359

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race C++ undefined behavior triggered by a 1-phase ↔ 3-phase switch request ac switch three phases while charging...

RockyLinux 8 : kernel-rt (RLSA-2026:3964)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:3964 advisory. kernel: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr CVE-2025-71085 kernel: macvlan: fix possible UAF in macvlanforwardsource CVE-2026-230...

The vulnerability of the nvme_init_ctrl() function in the drivers/nvme/host/core.c module of the NVME driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmeinitctrl function in the drivers/nvme/host/core.c file of the NVME driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wl1251event_wait() function in the drivers/net/wireless/ti/wl1251/event.c module of the wireless adapter support driver from Texas Instruments’ Linux kernel allows a hacker to cause a service failure.

The vulnerability of the wl1251eventwait function in the drivers/net/wireless/ti/wl1251/event.c module of the wireless adapter support driver for Texas Instruments’ Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an...

RockyLinux 8 : kernel (RLSA-2026:3963)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:3963 advisory. kernel: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr CVE-2025-71085 kernel: macvlan: fix possible UAF in macvlanforwardsource CVE-2026-230...

PT-2026-33142

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description A use after free issue in Graphite allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Use after free...

The vulnerability of the amdgpu_amdkfd_gpuvm_import_dmabuf() function in the drivers/gpu/drm/amd/amdgpu/amdkfd_gpuvm.c driver module of the Direct Rendering Infrastructure (DRI) for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpuamdkfdgpuvmimportdmabuf function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release. Exploiting this vulnerability can all...

PT-2026-28186

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

PT-2026-28794

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.471 Description The ActivityMonitor Livewire component exposes a public $activityId property that lacks the Locked attribute. The system loads activities using the Activity::find function without implementi...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1)

The version of AHV installed on the remote host is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1 advisory. - A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the hea...

The vulnerability of the __poolDestroy() function in the drivers/md/dm-thin.c file of the multi-device Linux kernel driver software allows a hacker to cause a service failure.

The vulnerability of the poolDestroy function in the drivers/md/dm-thin.c file of the Linux device driver for multiple devices RAID and LVM involves the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mipid_spi_probe() function in the drivers/video/fbdev/omap/lcd_mipid.c file of the Linux kernel-based device buffer driver allows a hacker to cause a system failure.

The vulnerability of the mipidspiprobe function in the drivers/video/fbdev/omap/lcdmipid.c file of the kernel graphics buffer device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the imx_clk_scu_alloc_dev() function in the drivers/clk/imx/clk-scu.c file of the Linux operating system control chip driver for Samsung Exynos cores allows a hacker to cause a service failure.

The vulnerability of the imxclkscuallocdev function in the drivers/clk/imx/clk-scu.c file of the Linux operating system controller driver for Samsung Exynos cores is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-16026

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly parsed. The value 1 is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected...

CVE-2026-30892 Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly parsed. The value 1 is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected...