10708 matches found
CVE-2026-44091 Creation of a new configuration by posting a malicious ID to MQTT
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...
CVE-2026-64513
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 architectures. When the apicupdateppr function does not find a deliverable interrupt, it fails to recompute the CR8 intercept, leading to a stale Task Priority Register Threshold TPRTHRESHOLD. This issue can cause a...
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
A flaw was found in the perl-Archive-Tar component. An attacker can exploit this vulnerability by providing a crafted tar header with an excessively large entry size field. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...
The vulnerabilities of the functions batadv_bla_claim_dump_entry() and batadv_bla_backbone_dump() in the net/batman-adv/bridge_loop_avoidance.c module of the Linux kernel allow a hacker to trigger a service failure.
The vulnerability of the functions batadvblaclaimdumpentry and batadvblabackbonedump in the net/batman-adv/bridgeloopavoidance.c module of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-66419
Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The MQTT Service contains a Server-Side Request Forgery SSRF flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the...
MINI-WJ2R-39XR-85C4
Bulletin has no description...
MINI-MMGX-3X6W-28C5
Bulletin has no description...
MINI-2QP3-C9JM-R5JC
Bulletin has no description...
MINI-PJCF-RGV5-W3MQ
Bulletin has no description...
MINI-766C-HXVC-W2XX
Bulletin has no description...
CVE-2026-10684
In subsys/debug/coredump/coredumpshell.c, printcoredumphdr used the 16-bit tgtcode field of a stored Zephyr coredump header directly as an index into coredumptargetcode2str, a fixed 7-element array of string pointers, with no bounds check. A stored coredump whose tgtcode is = 7 causes an...
Exploit for Deserialization of Untrusted Data in Mediawiki
CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry...
tar: Node-tar: Denial of Service via malformed tar archive header
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...
CVE-2026-10684
CVE-2026-10684 affects Zephyr's coredump print shell: in coredump_shell.c, print_coredump_hdr() uses the 16-bit tgt_code as an index into a fixed 7-element coredump_target_code2str[] without bounds checks, enabling an out-of-bounds read of a pointer to a string. A stored coredump with tgt_code &g...
EUVD-2026-50445
In subsys/debug/coredump/coredumpshell.c, printcoredumphdr used the 16-bit tgtcode field of a stored Zephyr coredump header directly as an index into coredumptargetcode2str, a fixed 7-element array of string pointers, with no bounds check. A stored coredump whose tgtcode is = 7 causes an...
MINI-MWWM-Q37F-WXR4
Bulletin has no description...
MINI-5G46-67FX-2XMF
Bulletin has no description...
MINI-HQRM-29HF-VRFQ
Bulletin has no description...