The vulnerabilities of the functions aq_nic_service_timer_cb() and aq_nic_get_stats() in the driver drivers/net/ethernet/aquantia/atlantic/aq_nic.c of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions aqnicservicetimercb and aqnicgetstats in the driver/net/ethernet/aquantia/atlantic/aqnic.c file of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system are related to unvalidated array indexing. Exploiting these...

EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2026-1337)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command...

EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2026-1311)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command...

EulerOS 2.0 SP11 : grub2 (EulerOS-SA-2026-1607)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a...

EulerOS Virtualization 2.10.0 : grub2 (EulerOS-SA-2026-1555)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the...

PT-2026-25748

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files...

The vulnerability of the io_init_req() function in the io_uring/io_uring.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinitreq function in the iouring/iouring.c module of the Linux kernel’s asynchronous input/output interface is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the shutdown_interception() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the shutdowninterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

OESA-2026-1572 nginx security update

NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker with a man-in-the-middle MI...

Ubuntu 22.04 LTS / 24.04 LTS : go-git vulnerabilities (USN-8088-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8088-1 advisory. Ionut Lalu discovered that go-git incorrectly handled certain specially crafted Git server responses. An attacker could possibly use this iss...

ROS-20260313-73-0022

A vulnerability in the raid1reshape function of the Linux operating system kernel is related to incorrect resource clearing or freeing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

CVE-2026-21359 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have limited...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that could be exploited by an attacker to bypass security measures and have a limited impact on...

The vulnerability of the Linux operating system’s kernel Bluetooth module, which allows a hacker to compromise data integrity

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to reading data from buffer fields beyond their allowable limits. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

PT-2026-24565

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have limited...

The vulnerability of the adf_dev_shutdown() function in the drivers/crypto/intel/qat/qat_common/adf_init.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adfdevshutdown function in the drivers/crypto/intel/qat/qatcommon/adfinit.c file of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the discovery_init() function in the include/net/bluetooth/hci_core.h file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the discoveryinit function in the include/net/bluetooth/hcicore.h file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

EUVD-2026-10456

SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a high impact on the confidentiality, integrity, and availability of the host system...

CVE-2026-24316

SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery SSRF. Successful exploitation could lead to interaction with...

CVE-2026-1286

Summary (details from provided docs): CVE-2026-1286 is a CWE-502 deserialization of untrusted data vulnerability affecting Schneider Electric EcoStruxure Foxboro DCS control software on Foxboro DCS workstations and servers. The issue could lead to loss of confidentiality, integrity and potential ...