Linux Distros Unpatched Vulnerability : CVE-2026-74331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmwareloader: Fix recursive lock in devicecachefwimages A recursive locking deadlock can occur in the firmware loader's power management notification handler...

PT-2026-78230

Name of the Vulnerable Software and Affected Versions Tapo C200 version v5 Description An improper authentication issue exists within the login authentication verification module. An attacker on the local network can exploit weaknesses in the validation of the challenge parameter to bypass...

EUVD-2021-34865

Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB...

CVE-2021-43716

A firmware update verification bypass in the Epson EH-TW5350 projector (firmware 150075647YWWV110, EasyMP Network Updater Ver.1.20) allows an attacker to push encrypted firmware via USB without proper verification. Discovered by team B-BEAM-BOB during the KITRI Best of the Best program in 2021, t...

CVE-2026-52480

CVE-2026-52480 affects the SJRC F11 SJ-GPS-PRO consumer drone (firmware build 2019-09-17, Fullhan FH8856 SoC, Linux 3.0.8). The inetd service exposes an unauthenticated FTP interface on port 21 , allowing an attacker on the adjacent network to obtain sensitive information without credentials. The...

CVE-2026-52481

CVE-2026-52481 affects the SJRC F11 / SJ-GPS-PRO consumer drone (firmware build 2019-09-17, Fullhan FH8856 SoC, Linux 3.0.8). The root cause is a hardcoded backdoor in the tcp_actions() function within the vs_play binary: any TCP packet sent to port 8888 beginning with the bytes da (0x64 0x61) ca...

PT-2026-77253

Name of the Vulnerable Software and Affected Versions EPSON 150075647YWWV110 EasyMP Network Updater version 1.20 Description A verification bypass allows the Epson projector to be updated using encrypted firmware via USB. Recommendations At the moment, there is no information about a newer versio...

Linux Distros Unpatched Vulnerability : CVE-2026-72131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmwa...

CVE-2021-43716

Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB...

Linux Distros Unpatched Vulnerability : CVE-2026-72215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initia...

Linux Distros Unpatched Vulnerability : CVE-2026-74409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: add bounds check on firmware macid in link lookup The macid field in RX descriptors is 8 bits wide 0-255, but assoclinkonmacid has only...

Linux Distros Unpatched Vulnerability : CVE-2026-68456

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its...

PT-2026-77291

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

CVE-2026-52480

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...

CVE-2021-43718

CVE-2021-43718 is an authentication bypass in the Web Control interface of the Epson EH-TW5350 projector (firmware 150075647YWWV110 ). A remote, unauthenticated attacker can send a specially crafted series of HTTP requests to cause a Denial of Service . The vulnerability was discovered by team B-...

CVE-2026-72089

A flaw was found in the Linux kernel's Intel Versatile Processing Unit IVPU accelerator driver. An attacker could exploit a vulnerability in how the driver handles firmware logs with incorrect size information. This could lead to an out-of-bounds read, potentially disclosing sensitive information...

CVE-2026-72077

A flaw was found in the Linux kernel's ims-pcu input driver. This vulnerability occurs when the firmware object is not properly released if validation fails during an asynchronous update. This oversight can lead to a firmware leak, potentially exposing sensitive information or system resources. T...

CVE-2026-67967

Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...

MINI-PPC9-4GG3-RC65

Bulletin has no description...

CVE-2026-75013

A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...