Linux Distros Unpatched Vulnerability : CVE-2026-98292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct...

PT-2026-106621

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description Drivers btmtksdio.c and btmtkuart.c fail to validate the length of received WMT events before casting them to struct btmtk hci wmt evt and reading the op/flag fields. Additionally, in the...

Vaultwarden -- Multiple vulnerabilities

The Vaultwarden project reports: Organization member revocation GHSA-69q9-v8p6-xvx3 High, 8.1 Two-factor authentication GHSA-7jg8-8m5x-6j9r Medium, 6.8 Organization invitations GHSA-v576-3wvq-xh3c Medium, 6.8 Attachments GHSA-q5x6-grh5-fqgc Medium, 6.5 Organization event logs GHSA-64mc-4p6f-r7x9...

smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

Summary parse has a quadratic-time path in parseKey, reachable on default options with ordinary valid input. For every key line and table-header line, parseKey dist/struct.js, lines 58 and 86 finds the dotted-key separator with ctx.s.indexOf'.', ctx.p, where ctx.s is the whole document. When a ke...

EUVD-2026-91056

stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk...

NPM: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)

NPM: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback Unbounded Host Event-Loop Block vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)

Vulnerability Summary vm2's VM timeout option is documented and relied upon as the mechanism that bounds how long sandboxed code may execute. In the current implementation, the timeout only wraps the single synchronous call to VMrun via doWithTimeout → this.runScriptscript in lib/vm.js. It does...

GHSA-R4FX-V8HH-22MV vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)

Vulnerability Summary vm2's VM timeout option is documented and relied upon as the mechanism that bounds how long sandboxed code may execute. In the current implementation, the timeout only wraps the single synchronous call to VMrun via doWithTimeout → this.runScriptscript in lib/vm.js. It does...

CVE-2026-97257

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7...

EUVD-2026-92750

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7...

CVE-2026-97257 WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7...

CVE-2026-97257

The PressTigers Simple Event Planner WordPress plugin is vulnerable to a PHP Object Injection flaw due to the deserialization of untrusted data . This vulnerability affects versions up to and including 1.5.7 . An attacker can leverage this flaw to perform Object Injection , potentially leading to...

CVE-2026-97257 WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7...

CVE-2026-78412

Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions against the caller's Org instead of the requested Org. This allows a user with API access in one org to read events from another org for which they have ...

CVE-2026-102777

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 13.0.3 Vulnerability Details CVEID:CVE-2026-33557 DESCRIPTION: A possible security vulnerability has been identified in Apache Kafka. By default, the broker property sasl.oauthbearer.jwt.validator.class is set to...

Security Bulletin: IBM Event Endpoint Management is affected by a vulnerability in the uuid package

Summary IBM Event Endpoint Management is affected by a vulnerability in the uuid package that may allow out-of-range writes to caller-provided buffers when generating certain UUID versions. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC412...

Security Bulletin: IBM Event Endpoint Management is affected by a denial of service due to CPU exhaustion

Summary IBM Event Endpoint Management is affected by a denial of service vulnerability due to CPU exhaustion when processing a specially crafted JavaScript object. Vulnerability Details CVEID:CVE-2026-34043 DESCRIPTION: Serialize JavaScript to a superset of JSON that includes regular expressions...

SUSE CVE-2026-104861

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parsesync/svg.js and lib/parsestream/svg.js use the searching regular expression //, which repeatedly scans to the end of input when attacker-controlled data contains many less-than characters without ...

CVE-2026-102776

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...