PT-2026-85610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID rapoo driver where the to usb interface function is called without first verifying if the device is actually a USB device using the hid is usb check. This is...

PT-2026-85614

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A flaw exists in the HID huawei module where the to usb interface function is called without first verifying if the device is actually a USB device using hid is usb. This is problematic...

PT-2026-85615

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A flaw exists in the HID asus module where the to usb interface function is called without first verifying if the device is actually a USB device using hid is usb. This is problematic becaus...

PT-2026-85455

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

PT-2026-85646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs attr3 leaf verify entry function accesses lentry/rentry fields, specifically namelen and valuelen, before verifying if the entry...

PT-2026-86195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/tls component where the tls sw splice read function fails to check for errors after a failed asynchronous decryption. While tls sw recvmsg and tls sw read sock...

Linux Distros Unpatched Vulnerability : CVE-2026-80904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tls: Fail tlsswspliceread after a failed async decrypt When an async decrypt fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls...

Linux Distros Unpatched Vulnerability : CVE-2026-80814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rndishost: add overflow check in rndisrxfixup Add an overflow check to ensure that dataoffset + datalen + 8 does not wrap, which would enable an OOB read of the...

PT-2026-85618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the private futex implementation during the exec process. The check to verify if the waiter's memory management mm is the same as the owner's mm is insufficien...

PT-2026-85622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the HID core. The hid set field function passes field-usage + offset to hid dump input before verifying if the offset is within the allowed bounds of...

CVE-2026-80814: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rndishost: add overflow check in rndisrxfixup Add an overflow check to ensure that dataoffset + datalen + 8 does not wrap, which would enable an OOB read of the USB data buffer...

PT-2026-86264

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...

PT-2026-86191

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message size check more robust If message offset was larger than the buffer length the size check will pass incorrectly. Refactor the check such that it is more robust to invalid sizes...

PT-2026-85487

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public...

CVE-2026-85616: Authorization Bypass Through User-Controlled Key

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

PT-2026-85442

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A heap-based buffer overflow exists in the Totem Process Group totempg message reassembly of Corosync. The issue occurs during the processing of fragmented multicast messages because the...

PT-2026-85786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Alpha architecture implementation of the Linux kernel, the pci mmap resource function fails to verify security locked downLOCKDOWN PCI ACCESS before permitting userspace to map PC...

CVE-2026-80900: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message size check more robust If message offset was larger than the buffer length the size check will pass incorrectly. Refactor the check such that it is more robust to invalid sizes...

PT-2026-91369

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm kasprintf Add a check to see if devm kasprintf is not NULL in mchp ipc get cluster aggr irq, returning -ENOMEM if the function failed...

PT-2026-85687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mailbox mchp-ipc-sbi component where the mchp ipc get cluster aggr irq function fails to verify if the devm kasprintf function returns a NULL value. This lack of a...