EUVD-2026-76605

In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4acltoattr return value in nfsd4create nfsd4create stores the return value of nfsd4acltoattr in status, but the switchcreate-crtype block unconditionally overwrites it in every branch. ACL translation errors are...

CVE-2026-89665 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-89527

This Linux kernel vulnerability affects the svcrdma (RPC/NFS RDMA server) subsystem. The root cause is an improper error-path cleanup in svc_rdma_create(): when svc_rdma_create_listen_id() fails, the code calls kfree() on the transport structure, bypassing svc_xprt_free(). This leaks the net name...

CVE-2026-49009

CVE-2026-49009 — Mender Server Authenticated Path Traversal to Remote Code Execution Discovered by j0xh-sec via HackerOne · PoC by INTELEON404 Table of Contents Vulnerability Summary Affected Versions Technical Analysis Proof of Concept Python Exploit Nuclei Template ShodanX + Nuclei Scanner Usag...

PT-2026-90415

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the NFSv4 CREATE operation, the nfsd4 decode create function fails to properly validate the length of symlink targets. Specifically, it accepts an unbounded cr datalen value from the...

PT-2026-90494

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.2.0 through 9.5.2 Description The Area API's 'block-create' endpoint fails to invoke the validate method of the block type controller for submitted data. For blocks that reference files, such as hero image and gallery,...

PT-2026-90409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the nfsd component, the nfsd4 create function fails to properly handle the return value of the nfsd4 acl to attr function. The return value is stored in the status variable, but a...

PT-2026-90403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd file do acquire function where it may use a file that has not been opened. This occurs because the -atomic open handler can return success without opening the...

PT-2026-96441

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdr decode sattr: iap-ia atime.tv nsec = tmp2 NSEC PER USEC; tmp2 is a u32 and NSEC PER USEC is...

CVE-2026-89665: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

PT-2026-96362

In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4 acl to attr return value in nfsd4 create nfsd4 create stores the return value of nfsd4 acl to attr in status, but the switchcreate-cr type block unconditionally overwrites it in every branch. ACL translation...

CVE-2026-68535: Missing Authorization

Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate method on submitted data, which, for file-referencing blocks such as heroimage and gallery, is where the referenced file is authorized against the user's file-manager...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-88056 Source advisory: OSV:GHSA-F6MR-PJWC-34M4...

create-momentum-app (>=0.0.1, <=0.5.11), foliokit (0.0.0) +1 more potentially affected by CVE-2026-88056 via @angular/platform-server (>=21.1.2, <=21.2.9)

@angular/platform-server NPM version =21.1.2, =0.0.1, =0.0.2, =0.0.3 Source cves: CVE-2026-88056 Source advisory: SNYK:JS-ANGULARPLATFORMSERVER-19778590...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable queues by sending unauthenticated requests. Remediation Upgrade...

SUSE CVE-2026-80821

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

CVE-2026-12230: Improper Neutralization of Input During Web Page Generation

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'layoutcustomcss' parameter in all versions up to, and including, 4.3.9.1 due to insufficient input sanitization and output escaping. This makes it...

PT-2026-89742

Name of the Vulnerable Software and Affected Versions strongSwan versions 5.9.7 through 6.0.7 Description The libcharon component mishandles the behavioral workflow within the IKEv2 state machine. This improper handling of CREATE CHILD SA requests can lead to an authentication bypass...

CVE-2026-85701

A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/init.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be...

CVE-2026-80821 nvmet: pci-epf: put CQ ref on create_cq mapping failure

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...