ROS-20260825-73-0006

The vulnerability of the smbdnegotiate function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux operating systems, is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

CVE-2026-13217: NULL Pointer Dereference

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

Linux Kernel DRI DoS

The vulnerability of the drmclientmodesetprobe function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver module of the Linux operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2026-81182

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

FreeBSD : mod_gnutls -- multiple vulnerabilities (a7b4cdfc-9f9d-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a7b4cdfc-9f9d-11f1-a655-3497f65b111b advisory. The modgnutls project reports: Security fix CVE-2026-33307: Fix out-of-bounds write when...

Smb Direct Buffer Overflow DoS

The vulnerability of the smbdpostsenditer function in the fs/smb/client/smbdirect.c module of the Smb file system in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux SMB Client Match Session

The vulnerability in the matchsession function within the fs/smb/client/connect.c file of the SMB file system in the Linux kernel is related to flaws in the authentication process. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth clientcredentials grant, validatescopesagainstkey/2 in...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privileged local attacker with user interaction could potentially exploit this to achieve Arbitrary Write . The CVSS v3.1 score is 6.6 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

EUVD-2026-65091

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-78417

The IronVNC client within Devolutions Remote Desktop Manager is vulnerable to an insufficient verification of data authenticity (CVE-2026-78417). This flaw allows an on-path attacker to intercept and tamper with VNC sessions because the client automatically accepts the server's RSA key during RSA...

CVE-2026-78417

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES...

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Minecraft clients. McAfee Labs said it detected and blocked more than 6,300 attempts to access malicious sites, adding that it found lookalike...

awxkit: path traversal via YAML !include directive

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

awxkit: path traversal via YAML !include directive

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

USN-8670-1 curl vulnerability

Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client certificates being used, contrary to expectations...

USN-8670-1: curl vulnerability

Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client certificates being used, contrary to expectations...