PT-2026-110152

Name of the Vulnerable Software and Affected Versions OpenDocMan versions 2.4.0 through 2.10.0 Description Authenticated users can cause a denial of service by uploading specially crafted office documents ODT, DOCX, or XLSX. These files utilize a decompression bomb technique, where small XML...

Apache Celix 2.4.0 EDEF XML Parser Heap Buffer Overflow

Apache Celix version 2.4.0 contains a heap-based buffer overflow in its remote-services Endpoint Description Extender XML parser. The supplied proof of concept generates a crafted endpoint descriptor that triggers the overflow. !/usr/bin/env python Apache Celix 2.4.0 EDEF XML Parser Heap-Based...

flatpak security update

1.12.9-4.4 - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271518 1.12.9-4.3 - Avoid symlink path traversal in revokefs writer CVE-2026-96808 Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction CVE-2026-96275 Resolves: RHEL-26743...

CVE-2026-108769: Improper Resource Shutdown or Release

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public...

CVE-2026-86706: Missing Authorization

The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allowing unauthenticated users to alter arbitrary site settings and to make the site unavailable...

PT-2026-110225

The Bluetooth Link Layer Control Procedure LLCP implementation for Connected Isochronous Stream CIS creation retains an RX node ctx-node ref.rx, marked NODE RX TYPE RETAIN so it can later be reused as the host notification — on the peripheral while awaiting the Host's reply to an LL CIS REQ, and ...

PT-2026-120744

A crafted .zst input under 128 KB can force ruzstd to allocate several gigabytes at once, crashing the process with an out-of-memory condition. Since ruzstd is a decoder for untrusted input, a single small file is enough to take down anything decoding it. The compressed size of a block was capped...

PT-2026-110227

Name of the Vulnerable Software and Affected Versions Zephyr versions 3.4.0 through 3.7.x Description The Link Layer Control Procedure LLCP implementation of the Bluetooth LE Controller fails to release a retained receive node when processing invalid Protocol Data Units PDUs during PHY Update,...

CVE-2026-108755: Allocation of Resources Without Limits or Throttling

Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Attackers can send arbitrarily large or concurrent request bodies to POST /api/v1/sns/tenant/event with any UUID, which...

CVE-2026-108682: Improper Resource Shutdown or Release

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

CVE-2026-98291

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver btintelpcie. An off-by-one bounds checking error during receive queue handling allows an index to reference one element past the allocated array boundaries. A local user could exploit this flaw to cause a Denial of Service DoS...

CVE-2026-98290

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. A local user can cause a Denial of Service DoS by triggering a kernel deadlock that hangs the system. This issue occurs during the cleanup of listening sockets, where child socket locks and internal...

CVE-2026-98286

A flaw was found in the Linux kernel's dropmonitor subsystem. A local user can trigger this issue during monitor teardown under memory pressure, where a race condition allows a timer to be re-armed after it has been cancelled. When the module is subsequently unloaded, the active timer executes...

CVE-2026-98284

A flaw was found in the Linux kernel's Netlink network communication subsystem. A timing issue race condition during socket group memory reallocation allows memory to be freed while concurrent read operations are still accessing it. A local user could exploit this flaw to cause a Denial of Servic...

CVE-2026-98283

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for PowerPC. A race condition occurs during memory management emulation when nested guest virtual machine structures are freed while still in use by another virtual processor. A malicious guest virtual machine can...

CVE-2026-98280

A flaw was found in the Linux kernel's Intel Xe graphics driver. During device unbinding, internal driver structures are freed before interrupt requests IRQs are disabled. If an interrupt occurs during this timing window, it can trigger a use-after-free condition where the system accesses already...

CVE-2026-98276

A flaw was found in the Linux kernel's networking subsystem. A local attacker can exploit a race condition during concurrent socket operations, such as retrieving timestamps while binding a network socket, because socket flags are modified without proper locking. This issue causes socket memory t...

CVE-2026-98273

A flaw was found in the Linux kernel's x86 kprobes subsystem. A privileged local user could cause a Denial of Service DoS and system crash when attaching probes to certain function call instructions using tracing tools such as extended Berkeley Packet Filter eBPF. This issue occurs because the...

CVE-2026-98271

A flaw was found in the Linux kernel's network subsystem. When trimming or carving network packets, the kernel fails to reset stale header offsets in reallocated socket buffers. A remote attacker could exploit this vulnerability by sending specially crafted network packets, causing packet trackin...

CVE-2026-98270

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to verify that internal reliability and error-handling structures are initialized before accessing them during interrupt handling. If an interrupt occurs during this early startup window, the driver encounters a null pointer...