Astra Linux – Vulnerability in Linux, Linux 5.10

A stack overflow flaw was discovered in the Linux kernel’s TIPC protocol functionality. This flaw occurs when a user sends a packet containing malicious content, where the number of domain member nodes exceeds the allowed limit of 64. This flaw allows a remote user to crash the system or...

CVE-2026-82791: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

PT-2026-91095

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82793: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product...

CVE-2026-82792: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-90614: Deserialization of Untrusted Data

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.readmodel of the file fedml/core/distributed/communication/s3/remotestorage.py of the component MQTT+S3 Communication Backend. This manipulation of the argument s3keystr causes...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

UBUNTU-CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

EUVD-2025-210893

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480: Incorrect Resource Transfer Between Spheres

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2026-90647

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...

CVE-2026-90647: Improper Certificate Validation

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...

CVE-2026-89175

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

CVE-2026-89174

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...

Malicious code in strapi-plugin-vinsoc-1109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbb0aa83cfffbdd408abb8f73299d5a47a0e9855c65b5940bb22112e0928d41 The package's postinstall lifecycle script node postinstall.js || true fires automatically on npm install. postinstall.js reads os.hostname, embeds t...

MAL-2026-16126 Malicious code in strapi-plugin-vinsoc-1109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbb0aa83cfffbdd408abb8f73299d5a47a0e9855c65b5940bb22112e0928d41 The package's postinstall lifecycle script node postinstall.js || true fires automatically on npm install. postinstall.js reads os.hostname, embeds t...

CVE-2026-89175

The Smart Video Intercom System developed by Kingdom Communication Associated contains a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values. The CVSS 3.1 score is 5.3 (MEDIUM)...