PT-2026-61312

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write can occur in the CMIS firmware update code within the ethtool component. The issue arises because the system reads the start cmd payload size from the module's FW...

PT-2026-61138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the ath11k WiFi driver. When a firmware-related initialization error occurs, the buffers dp-tx ringi.tx status are released. These same buffers are released...

PT-2026-61058

Name of the Vulnerable Software and Affected Versions SJCAM AllWinner Tech SJ4000-Air versions prior to 1.4C Whitelabel based versions prior to 1.4C Description An issue allows an attacker to execute arbitrary code by using a specially crafted FEX file. Recommendations At the moment, there is no...

PT-2026-61492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver where the iwl mld tx from txq function fails to check the mld-fw status.in hw restart flag before dequeuing frames from mac80211 and pushing them to...

PT-2026-61398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm ffa firmware component where framework notification messages in the shared RX buffer are not properly validated. Specifically, the system fails to verify the...

PT-2026-61464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the pds core component during firmware reset recovery. The debugfs lookup function returns a dentry with an elevated reference count that is not released via...

PT-2026-61465

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pds core component where the pdsc devcmd wait function fails to correctly handle errors, potentially returning a stale success status from the completion register...

PT-2026-61462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the wilc wlan firmware download function when a bus acquire failure happens. The function allocates a dma buffer using kmalloc, but an early error path uses a...

PT-2026-61281

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the do flash function within the USB Type-C UCSI CCG component. The function attempts to locate the first .cyacd record using strnchr. If a firmware image lacks a : reco...

PT-2026-61080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DRM AMD GPU VCE component where patching could result in an incorrect address being written to the firmware if only one of the lo/hi address components is valid...

PT-2026-61483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm ffa firmware component where the bus match callback unconditionally dereferences the id table of FF-A drivers. Because the system assumes every driver provides...

PT-2026-61397

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the arm ffa firmware component. The notification handlers retrieve a notifier callback while holding the notify lock, but release the lock before...

CVE-2026-16096

A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub40BB50 of the file /proc/webmonrecentdomains. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This project is superseded by FreshTomato...

Exploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_Firmware

just run python CVE-202...

CVE-2026-12705

The CVE-2026-12705 entry concerns a missing integrity check in ABB KNX Update Tool (ABB) and KNX Update Tool (BJE) up to version 2.0.175. Affected components: KNX Update Tool (ABB) and KNX Update Tool (BJE); root cause: lack of integrity verification for KNX device firmware/files. Impact, as stat...

CVE-2026-12705 Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

CVE-2026-12705 Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

Missing support for integrity check vulnerability in ABB KNX Update Tool ABB, ABB KNX Update Tool BJE. This issue affects KNX Update Tool ABB: through 2.0.175; KNX Update Tool BJE: through 2.0.175...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-s...

PT-2026-60854

Name of the Vulnerable Software and Affected Versions Generic OEM UZ801 v2.1 4G LTE Router version 3.4.3 Description A remote attacker can execute arbitrary code through the sbin/adbd component. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2021-27137

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...