PT-2026-95700

Name of the Vulnerable Software and Affected Versions Cotonti versions prior to 1.0.1 Description The software contains an open redirect issue within the cot url check function. This occurs because the function uses a regular expression to validate redirect destinations that lacks an end-of-strin...

PT-2026-95260

Name of the Vulnerable Software and Affected Versions Hide My WP Ghost versions prior to 7.0.11 Description An issue exists where the plugin fails to properly validate loopback security-check requests. When a request's verification value is missing or incorrect, the plugin disables its login and...

PT-2026-95253

Name of the Vulnerable Software and Affected Versions Bookit — Booking & Appointment Calendar WordPress plugin versions prior to 2.6.0.5 Description An issue exists where the plugin fails to perform a capability check within an appointment-deletion function. This allows users assigned to the...

PT-2026-95284

Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce versions prior to 2.8.6 Description This issue involves a Directory Traversal flaw that allows unauthenticated attackers to read arbitrary files on the server, potentially exposing...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2026-3769)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the 'pri...

Linux Distros Unpatched Vulnerability : CVE-2026-93178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup vddInd and vddcInd fields from VBIOS- parsed tables are used to index into voltage lookup...

ROS-20260918-73-0005

The vulnerability in the arch/loongarch/include/asm/topology.h component of the Linux operating system’s kernel is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0023

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c module of Broadcom’s wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

CVE-2026-86800: Protection Mechanism Failure

The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request before disabling its login and URL hiding protection, dropping that protection precisely when the request's verification value is missing or incorrect, which any visitor can arrange,...

PT-2026-95509

Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.3 Description A remote attack is possible through the Self Update Handler component. The SelfUpdater::update function in the app/Updater/SelfUpdater.php file allows the download of code without an integrity...

PT-2026-95547

Name of the Vulnerable Software and Affected Versions LubeLogger versions prior to 1.6.8 Description An authenticated user can exploit a missing authorization check in the DuplicateRecordsToOtherVehicles endpoint. While the system verifies the destination vehicles, it fails to call the...

EulerOS Virtualization 2.12.1 : samba (EulerOS-SA-2026-3618)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

VulnCheck KEV: CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2026-3722)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the 'pri...

Linux Distros Unpatched Vulnerability : CVE-2026-92516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK...

Linux Distros Unpatched Vulnerability : CVE-2026-92495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Clear VMMAYWRITE on DBR/toggle page mmap bnxtremmap rejects VMWRITE for the DBRPAGE and TOGGLEPAGE mmap flags, but a read-only mapping can still...

EulerOS Virtualization 2.11.1 : samba (EulerOS-SA-2026-3471)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Upstream Security Advisories: https://www.samba.org/samba/security/CVE-2007-2447.html...

Linux Distros Unpatched Vulnerability : CVE-2026-93191

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of t...

EulerOS Virtualization 2.11.0 : libsodium (EulerOS-SA-2026-3518)

According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rxlist to bypass the intended recvmsg record-type handling, potentially causing subsequent TLS records to be processed using...