PT-2026-82964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter module, the xt nat SNAT and DNAT target handlers assume that IP-family conntrack state is present. When instantiated from an unsupported family through nft compat, such ...

CVE-2026-80664: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...

CVE-2026-80634: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is u8, so if it's already 0 the decrement still happens and wraps it to...

PT-2026-82934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable component where a post-decrement of the num encaps variable occurs within the DEV PATH BR VLAN UNTAG case. Because num encaps is an unsigned...

CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

CVE-2026-76639 Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

EUVD-2026-67165

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability scored CVSS 8.8 (HIGH) . An attacker on an adjacent network can chain three weaknesses—an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key with world-readable permissio...

SUSE CVE-2026-74625

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: release template ct on non-IP path A bridge nftables ct zone set rule can attach a conntrack template to an skb before nfctbridgepre sees it. For non-IPv4 and non-IPv6 EtherTypes, nfctbridgepre currently...

PT-2026-82732

Name of the Vulnerable Software and Affected Versions Unitree G1 EDU firmware versions prior to 1.5.3 Description An unauthenticated remote code execution flaw allows network-adjacent attackers to execute arbitrary commands as root. This is achieved by chaining three weaknesses: an unauthenticate...

CVE-2026-77552

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

CVE-2026-77552

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

CVE-2026-77552

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

CVE-2026-77552

UniFi Enterprise Audio/Video Bridge (by Ubiquiti) is affected by an Improper Input Validation vulnerability that allows a network-accessible malicious actor to execute a Command Injection on the device. The flaw requires no authentication or user interaction, yielding a CVSS 3.1 score of 9.8 (CRI...

SUSE CVE-2026-45404

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized extraBaggageItems map which can cause a panic. Because Go maps are not safe for concurrent read/write access, concurrent SetBaggageItem an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098723 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebtredirecttg dereferences brportgetrcu return without a NULL...

Linux Distros Unpatched Vulnerability : CVE-2026-45404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized...

CVE-2026-77552: Improper Input Validation

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

PT-2026-82075

Name of the Vulnerable Software and Affected Versions UniFi Enterprise Audio/Video Bridge affected versions not specified Description An improper input validation issue allows a network-based actor to perform command injection on the device. Command injection is a flaw where an attacker can execu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098926 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in...