ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

ROS-20260922-73-0052

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0069

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

ROS-20260922-73-0095

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0097

The vulnerability of the dpsdpmessagedebugfswrite function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the copying of buffers without checking the size of the...

Check Point Security Management R82.20 Compromise Checks

These shell scripts check Check Point Security Management logs and temporary directories for indicators associated with CVE-2026-93616...

CVE-2026-76709: Improper Access Control

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

ROS-20260922-73-0044

The vulnerability of the iucvsockgetsockopt function in the net/iucv/afiucv.c module, which implements networking functions in the Linux kernel, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260922-73-0070

The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-76713: Improper Privilege Management

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...

CVE-2026-76714: Improper Neutralization of Special Elements used in an OS Command

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system...

PT-2026-96998

Name of the Vulnerable Software and Affected Versions Analytics and Location Engine affected versions not specified Description The web interface contains a flaw that allows remote authenticated users to execute arbitrary commands on the underlying host. A successful exploit could enable an...

PT-2026-96993

Name of the Vulnerable Software and Affected Versions HPE Analytics and Location Engine versions 5.0.0.0 and earlier Description A flaw in the internal administrative component allows an unauthenticated remote attacker to obtain unauthorized write access to the file system with elevated privilege...

ROS-20260922-73-0101

The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260922-73-0066

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s parallel port is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0093

The vulnerability of the l2capecredreconfrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

PT-2026-96992

Name of the Vulnerable Software and Affected Versions Analytics and Location Engine affected versions not specified Description The Analytics and Location Engine ALE and its underlying operating system utilize default, hard-coded credentials for multiple system and administrative accounts. An...

Electron Shell Open Path

The vulnerability of the shell.openPath function in the Electron application development platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

NPM vm2 Access Control

The vulnerability of the NPM packet manager’s vm2 library is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

vm2 Sandbox Prepare Stack Trace

The vulnerability of the defaultSandboxPrepareStackTrace function in the lib/setup-sandbox.js file of the vm2 library, a part of the npm package manager, is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to compromise the integrity of the...