CVE-2026-72238 x86/boot: Validate console=uart8250 baud rate to fix early boot hang

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

PT-2026-72403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In 64-bit configurations, calling firmware entry points from a kernel thread other than the initial one causes the stack to be placed in the XKPHYS 64-bit memory segment. This results in...

Linux Distros Unpatched Vulnerability : CVE-2026-74424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbcon: fix NULL pointer dereference for a console without vcdata fbconnewmodelist runs when a framebuffer's modelist changes. For each console mapped to it with...

VulnCheck KEV: CVE-2021-2109

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...

CVE-2026-66807

A flaw was found in console. The getCodeSpan helper in SharedResourceWarning.js constructs an HTML string using string concatenation without proper HTML encoding. This unescaped string is then rendered via React's dangerouslySetInnerHTML. While current Kubernetes DNS-1123 name validation prevents...

CVE-2026-53472

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

CVE-2026-53472 Migration-planner: credentialurl validator accepts javascript: urls

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

CVE-2026-53472 Migration-planner: credentialurl validator accepts javascript: urls

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

EUVD-2026-58664

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

CVE-2026-53472

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

CVE-2026-53472

The CVE-2026-53472 issue affects the migration-planner component. Root cause: insufficient validation of AgentStatusUpdate.CredentialUrl allows an authenticated attacker to store a javascript: URL, which a victim can render in the Hybrid Cloud Console to trigger Cross-Site Scripting (XSS). Impact...

CVE-2026-53472 Migration-planner: credentialurl validator accepts javascript: urls

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

GO-2026-4513 vulnerabilities

Vulnerabilities for packages: flyte...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: kargo, snyk-cli, dagger, pulumi-language-yaml, terragrunt, crossplane, trivy-fips, argo-events-fips, chainloop-cli, google-osconfig-agent, scorecard, kubevela-fips, chainctl-fips, gitlab-rails-ce-fips, packer-fips, gptscript, skaffold, osv-scanner,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, cilium, harbor-fips, kube-arangodb-fips, prometheus-podman-exporter, snyk-cli, dagger, pulumi-language-yaml, terragrunt, gitlab-kas, trivy-fips, argo-events-fips, chainloop-cli, commercial-grafana, minio-fips, scorecard, teleport-operator-fips,...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server and WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server and KCCI WebSphere Liberty Server which are included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-8408 DESCRIPTION: IBM WebSphere Application Server is affected by ...

CVE-2026-53472: Improper Neutralization of Input During Web Page Generation

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

PT MultiScanner Web Console Code Execution

The vulnerability in the web console of the PT MultiScanner anti-virus system, the PT Sandbox network sandbox, the multi-level corporate email protection systems PT Email Security, and PT Email Gateway are related to the lack of protective measures for the website structure. Exploiting this...

net.linlan.emis:emis-console (1.2.7), net.linlan.emis:emis-core (>=1.2.2, <=1.2.7) +27 more potentially affected by CVE-2026-73086 via org.webjars.npm:nanoid (>=4.0.0, <=4.0.2)

org.webjars.npm:nanoid MAVEN version =4.0.0, =1.2.2, =1.2.1, =1.2.1, =1.2.5, =1.2.1, =1.2.6, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.7 - net.linlan.emis:emis-synchronizer 1.2.7 - org.webjars.npm:github-com-dolanmiu-docx 8.2.0 and more Source cves: CVE-2026-73086 Source advisory:...

ROS-20260812-73-0037

The vulnerability of the XStream library used by Jenkins automation servers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or...