CVE-2026-68139

CVE-2026-68139 affects the Linux kernel mlx5e/MPV path. After PCIe DPC recovery, mlx5 reloads affected PCIe functions and replays multiport affiliation events; during resume, an RDMA multiport binding replay triggers an MPV_DEVCOM_MASTER_UP. The host panics with a NULL pointer dereference in mlx5...

The vulnerability of Cisco IOS XE operating systems, related to incorrect calculations, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

CVE-2026-53977

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler...

EUVD-2026-54078

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler...

CVE-2026-53977

OpenChamber 1.11.7 contains an unauthenticated DoS vulnerability via POST to /api/system/shutdown, triggered because the shutdown route is registered before authentication middleware in bootstrap-runtime.js. This allows remote attackers to terminate the server process and disrupt all active AI co...

MAL-2026-12378 Malicious code in express-rate-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c2ed4e91378e1ca9df444de58c0ff3afebce39741ab67011b55490740cac11 The package is published under the name express-rate-controller but describes itself as an SVG utilities library and ships a bin named svgcraft — the...

Malicious code in express-rate-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c2ed4e91378e1ca9df444de58c0ff3afebce39741ab67011b55490740cac11 The package is published under the name express-rate-controller but describes itself as an SVG utilities library and ships a bin named svgcraft — the...

Malicious code in express-mongo-santi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c97cf70eead9dda2069dc9da7e4a780f7c69953714ad050566c0e94a343e33 The package's main file index.js is a heavily obfuscated bundle obfuscator.io-style rotated string array with base64+RC4 decoders whose only purpose ...

CLSA-2026-1781571273 TuxCare security update for express (2 CVEs)

TuxCare rebuilt express to address 2 CVEs. Fixed in 4.17.1-tuxcare.1...

CLSA-2026-1781484856 TuxCare security update for express (5 CVEs)

TuxCare rebuilt express to address 5 CVEs. Fixed in 3.4.8-tuxcare.1...

CLSA-2026-1781484857 TuxCare security update for express (1 CVE)

TuxCare rebuilt express to address 1 CVE. Fixed in 4.19.2-tuxcare.1...

CLSA-2026-1781571278 TuxCare security update for express (2 CVEs)

TuxCare rebuilt express to address 2 CVEs. Fixed in 4.18.3-tuxcare.1...

CLSA-2026-1781571277 TuxCare security update for express (2 CVEs)

TuxCare rebuilt express to address 2 CVEs. Fixed in 4.18.2-tuxcare.1...

CLSA-2026-1781571275 TuxCare security update for express (2 CVEs)

TuxCare rebuilt express to address 2 CVEs. Fixed in 4.18.1-tuxcare.1...

CLSA-2026-1774570940 TuxCare security update for express-jwt (1 CVE)

TuxCare rebuilt express-jwt to address 1 CVE. Fixed in 0.1.3-tuxcare.1...

CLSA-2026-1774570939 TuxCare security update for express-jwt (1 CVE)

TuxCare rebuilt express-jwt to address 1 CVE. Fixed in 0.1.4-tuxcare.1...

CLSA-2026-1773015274 TuxCare security update for express (4 CVEs)

TuxCare rebuilt express to address 4 CVEs. Fixed in 3.21.2-tuxcare.1...

The vulnerability of the nvme_poll() function in the driver/nvme/host/pci.c file of the NVME driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-64545

A flaw was found in the Linux kernel. The xdpmasterredirect function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP eXpress Data Path packet duri...

SUSE CVE-2026-64319

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmetauthreply accesses the variable-length rval array using attacker-controlled hl hash length and dhvlen DH value length fields without verifying they fi...