Crosswork Data Gateway Auth Bypass

The vulnerability of the Crosswork Data Gateway data collection platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected informatio...

Cisco Secure Workload protection Multi-cloud Data Center Input Validation

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of t...

CentOS Linux 6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debug / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779738827)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779738827 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported version...

ROS-20260930-73-0063

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

Linux MPTCP pm_add_timer Heap Buffer Overflow DoS

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

PT-2026-103530

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0 Description An authenticated user can store crafted content that executes arbitrary JavaScript in another user's authenticated session during the preview of shared content. This Stored Cross-site Scriptin...

ROS-20260930-73-0126

The vulnerability of the ufxopsioctl function in the Linux kernel’s drivers/video/fbdev/smscufx.c module is related to the assignment of an untrusted pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-102092: Improper Neutralization of Input During Web Page Generation

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting XSS that could allow an authenticated user to store crafted content that executes arbitrary JavaScript in another user's authenticated session when they preview shared content. This could potentially lead to session...

ROS-20260930-73-0044

The vulnerability of the es58xallocrxurbs function in the drivers/net/can/usb/etases58x/es58xcore.c module of the Linux network device driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise th...

AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1785143860)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785143860 advisory. - A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This i...

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762361016)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762361016 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible fo...

CentOS Linux 6 [TuxCare] Security Update: mysql / mysql-bench / mysql-devel / mysql-embedded / etc (CENTOS6:CLSA-2026:1777683582)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777683582 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.59...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2026:1785153163)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785153163 advisory. - A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This i...

ROS-20260930-73-0120

The vulnerability in the drivers/gpu/drm/exynos/exynosdrmvidi.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources. Exploiting this vulnerability can allow an...

ROS-20260930-73-0018

The vulnerability of the j1939sessionactivate function in the net/can/j1939/transport.c module, which handles J1939 sockets for CAN interfaces in Linux operating systems, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

ROS-20260930-73-0017

The vulnerability of the interruptcntprobe function in the drivers/counter/interrupt-cnt.c module of the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2026-105983

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

ROS-20260930-73-0124

The vulnerabilities of the functions qla2x00updateoptrom and qla2x00managehoststats in the drivers/scsi/qla2xxx/qlabsg.c module of the SCSI device driver for the Linux operating system are related to operations involving resources after their expiration. Exploiting these vulnerabilities could all...

ROS-20260930-73-0009

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...