Linux Distros Unpatched Vulnerability : CVE-2026-79982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/devicenext/class/bthci.c, copies every controller-to-host HCI packet into a USB...

vulnupnp

vulnupnp Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959...

CVE-2026-116508

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508

A stack-based buffer overflow exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) within the Device-Information CGI component. Specifically, the function sub_402340 in the infostat.cgi file is vulnerable when an attacker manipulates the CONTENT_LENGTH argument. This flaw allows for rem...

CVE-2026-116508 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-84605

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to read the device's name...

CVE-2026-116505

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-112479

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious USB device may be able to cause unexpected system termination or read...

CVE-2026-116505

A command injection vulnerability exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104 ). The flaw is located in the getDeviceInfo function of the device-information Handler component, specifically affecting the file /var/lib/misc/udhcpd.leases . By manipulating the MAC address argument,...

EUVD-2026-110448

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-116505 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-84605

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to read the device's name...

CVE-2026-84605

An authorization issue in iOS and iPadOS allows an application to potentially read the device's name . The root cause involves improper state management, which has been addressed in versions iOS 26.7.2 , iPadOS 26.7.2 , iOS 27.2 , and iPadOS 27.2 . No specific exploit details are provided in the ...

EUVD-2026-110215

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to read the device's name...

CVE-2026-112479

An out-of-bounds read vulnerability exists in various Apple operating systems, including iOS , iPadOS , macOS Golden Gate , macOS Sequoia , and macOS Tahoe . The root cause is a lack of sufficient bounds checking, which can be triggered by a malicious USB device . This flaw may allow an attacker ...

CVE-2026-70381

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...

CVE-2026-70381 Unauthorized Access to Internal Web Resources

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...

CVE-2026-70381

An access-control vulnerability exists in a web server configuration , allowing an unauthenticated attacker with network access to the web interface to remotely access resources intended for on-device use only. While the accessible resources do not expose credentials or provide administrative fun...

EUVD-2026-110302

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...

CVE-2026-115916

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...