CVE-2026-97858: Improperly Controlled Modification of Dynamically-Determined Object Attributes

An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID...

CVE-2026-92777

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code...

CVE-2026-89057

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access...

CVE-2026-89057

A potential authentication bypass vulnerability exists in certain Lenovo tablets , characterized by CWE-288 . This flaw could allow an attacker with physical access to the device to gain unauthorized access . The vulnerability is rated with a CVSS 4.0 base score of 7.0 (High) . No specific softwa...

OPENSUSE-SU-2026:22120-1 Security update for cups-filters

This update for cups-filters fixes the following issues: Changes in cups-filters: - No longer provide the serial backend with 0700 permissions so cupsd does no longer run it as root but as usual as user 'lp' to avoid CVE-2026-95511 "Root arbitrary file overwrite via serial ... device-URI path"...

CVE-2026-105034

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services...

CVE-2026-105034 EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services...

CVE-2026-105034

The EnergizeLab Eilik NestJS auth service is vulnerable to unauthenticated device-token issuance. Due to missing and improper authentication (CWE-306, CWE-287), a remote attacker can obtain a valid device token for any arbitrary robot serial number. This allows the attacker to impersonate any dev...

EUVD-2026-102430

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services...

CVE-2026-105034 EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services...

CVE-2026-78660 affecting package sriov-network-device-plugin for versions less than 3.7.0-9

CVE-2026-78660 affecting package sriov-network-device-plugin for versions less than 3.7.0-9. A patched version of the package is available...

CVE-2026-78669 affecting package sriov-network-device-plugin for versions less than 3.7.0-9

CVE-2026-78669 affecting package sriov-network-device-plugin for versions less than 3.7.0-9. A patched version of the package is available...

Guangzhou Juan IoT EseeCloud App side-channel information leakage vulnerability

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability related to side-channel information leakage. This vulnerability arises from observable differences in the responses when endpoints process ID value...

Guangzhou Juan IoT EseeCloud App has a vulnerability in input validation.

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability in input validation. This vulnerability arises from improper verification of device unbinding and re-binding operations by the server. Attackers ca...

RIOT OS Buffer Error Vulnerability

RIOT OS versions before 2026.07 have security vulnerabilities. These vulnerabilities stem from the parsereply function in sys/net/applicationlayer/dhcpv6/client.c. This function fails to perform a minimum length validation before passing the IAPD and IANA option bodies to the sub-option parser...

JoeyZhou Xiaozhi ESP32 Server Java Authorization Vulnerability

JoeyZhou Xiaozhi ESP32 Server Java 6.1.0 and earlier versions have an authorization issue. This vulnerability stems from an authentication bypass. Unverified attackers can obtain a valid device WebSocket token by making a request to/api/device/ota with any MAC address. This allows them to open th...

ZoneMinder command injection vulnerability

Versions of ZoneMinder prior to 1.36.40, as well as versions 1.38.0 to 1.38.2 and 1.39.0 to 1.39.2, have a command injection vulnerability. This vulnerability stems from the insertion of an unvalidated monitor Device field into shell commands in PHP and Perl. When authenticated users with the...

Kerwin FastBee authorization issue vulnerability

Kerwin FastBee 2.1.0 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of owner checks in the GroupController query, allowing for insecure direct object references. Certified low-privilege users can read, overwrite, reassign, rewrite device...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: core: Do not bypass hidhwrawrequest The hidhwrawrequest function is actually useful for ensuring that the provided buffer and length are valid. Directly calling this function in the low-level transport driver bypassed those...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in prussclkmuxsetup In prussclkmuxsetup, devmaddactionorreset indirectly calls prussoffreeclkprovider, which calls ofnodeputclkmuxnp on the error path. However, after devmaddactionorreset returns,...