2026.3 IPU, Intel® UEFI Firmware Advisory

Summary: A potential security vulnerability for some Intel® UEFI Reference BIOS may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20712 Description: Incomplete cleanup in some UEFI firmware for so...

CVE-2026-10141

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

CVE-2026-10141

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

EUVD-2026-105323

A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...

CVE-2026-10141

The Totolink X2000R (version: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to an Unsigned Firmware flaw in the boa Firmware Update functionality. The root cause is the improper verification of cryptographic signatures (CWE-347); while the system checks for magic bytes and checksums, i...

CVE-2026-93153

A flaw was found in the Linux kernel's RDMA/bngre component. This vulnerability occurs when the waitforresp function fails to properly handle firmware responses that stall, causing it to ignore timeout expiry. A local attacker could exploit this by triggering a stalled firmware response, leading ...

CVE-2026-93093

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the SCMI channel setup, a race condition can occur where callbacks are enabled before the channel state is fully initialized. If a callback fires in this window, it can lead to a null pointer...

CVE-2026-93091

A flaw was found in the armscmi firmware component of the Linux kernel. A race condition exists during the teardown of notifications or on the probe error path. This can allow an attacker to trigger a use-after-free vulnerability, where the system attempts to access memory that has already been...

CVE-2026-93085

A flaw was found in the ARM System Control and Management Interface SCMI firmware within the Linux kernel. This vulnerability occurs because the system fails to properly reject out-of-range Device Tree DT protocol identifiers. A local attacker could exploit this by providing a malformed 32-bit DT...

CVE-2026-93081

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. This vulnerability occurs due to improper handling of device reference counts during the device destruction process. A concurrent unregister operation can release a device while its pointer is still ...

CVE-2026-92491

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware. During the registration of protocol tables, the scmiprotocoltableregister function may fail to properly unregister previous requests if a subsequent entry fails. This can result in a dangling pointer...

CVE-2026-92490

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. When a driver fails to register, the system may not properly unregister associated protocol devices, leaving behind invalid references. This can lead to the system attempting to access memory...

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

CVE-2026-43835

A vulnerability exists in the firmware upgrade functionality that allows an authenticated attacker to upload a forged firmware upgrade file . This flaw could lead to the permanent compromise of the affected device. Specific details regarding the affected product, software version, root cause, and...

EUVD-2026-104830

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

CVE-2026-100737

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

EUVD-2026-104797

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

CVE-2026-100737

Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...

CVE-2026-100737

A hidden functionality issue exists in multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. An attacker with administrator privileges can exploit this flaw to upgrade the affected devices to unauthorized firmware . The vulnerability is characterized by a Medium severity (...