Ubuntu 18.04 LTS / 24.04 LTS : dracut vulnerabilities (USN-8828-1)

The remote Ubuntu 18.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8828-1 advisory. It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could...

CVE-2026-74225: Out-of-bounds Write

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6parseoptions that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6 ADVERTISE or REPLY packets during netboot to corrupt memory and crash the...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) potentially affected by CVE-2026-101908 via org.webjars.npm:axios (1.7.2)

org.webjars.npm:axios MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:axios and may be impacted: - com.github.linyuzai:concept-plugin-spring-boot-starter =2.0.0, =3.0.0 Source cves: CVE-2026-101908 Source advisory:...

CVE-2026-101132

A path traversal vulnerability exists in DeepSeek deepseek-harness (versions up to 0.1.7-rc.2 ). The flaw is located within the loadProfile function of the packages/boot/app-boot/src/profile.ts file in the Bundle Patch Handler component. Manipulation of the dsh.bundle.patch argument allows for pa...

EUVD-2026-88438

A security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file packages/boot/app-boot/src/profile.ts of the component Bundle Patch Handler. The manipulation of the argument dsh.bundle.patch results in path traversal...

CVE-2026-80359

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80357

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80358

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-98135

A flaw was found in the Linux kernel's NTFS file system driver. A local user capable of mounting storage volumes could cause a Denial of Service DoS and crash the operating system by mounting a specially crafted NTFS file system image. Due to missing input validation of the cluster configuration ...

K000163434: Spring Boot vulnerability CVE-2026-40976

Security Advisory Description In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on t...

CVE-2026-80359

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80359

Dell Boot Optimized Server Storage (BOSS) , versions prior to 2.2.13.2038 , is vulnerable to an On-Chip Debug and Test Interface With Improper Access Control in the SMCU on 17G BOSS-N1 controllers . An unauthenticated attacker with physical access could potentially exploit this flaw to gain Unaut...

CVE-2026-80359

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

EUVD-2026-88309

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80358

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80358

Dell Boot Optimized Server Storage (BOSS) , versions prior to 2.2.13.2038 , is vulnerable to an On-Chip Debug and Test Interface With Improper Access Control flaw within the SMCU on 17G BOSS-N1 controllers . An unauthenticated attacker with physical access could potentially exploit this vulnerabi...

EUVD-2026-88297

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80358

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

CVE-2026-80357

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...

EUVD-2026-88295

Dell Boot Optimized Server Storage BOSS, versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability,...