PT-2026-90820

Name of the Vulnerable Software and Affected Versions vvbbnn00 WARP-Clash-API versions up to c7bf2360073959861219b422e51ae86411051b46 Description A remote attack is possible due to missing authentication in the authorized function. This occurs when the SECRET KEY argument is manipulated. This iss...

PT-2026-90871

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f Description A weakness in the Registration Handler component allows remote attackers to achieve improper authorization. This occurs through the...

PT-2026-90851

Name of the Vulnerable Software and Affected Versions SIPp versions prior to 3.7.8 Description A buffer overflow occurs in the get header function within src/sip parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted S...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2022-000997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000997 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code o...

CVE-2026-78159

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the issafewidgetinstance objec...

Linux Distros Unpatched Vulnerability : CVE-2026-80974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the...

CVE-2026-80999

A flaw was found in the Linux kernel's Realtek Digital Subscriber Line DSA driver. The driver incorrectly uses gpiodsetvalue instead of gpiodsetvaluecansleep for reset GPIO operations. This can lead to system warnings when the reset GPIO is managed by a sleeping controller, potentially causing...

CVE-2026-89491

A flaw was found in the Linux kernel's ocfs2 cluster module. This vulnerability allows a local attacker to trigger a denial of service. The issue arises when a sleeping function is called while a spinlock is held within the o2hbregionpin function, which can lead to a system crash or deadlock. Thi...

CVE-2026-81001

A flaw was found in the Linux kernel's Serial Line Internet Protocol SLIP driver. A race condition in the slsync function allows for a use-after-free vulnerability, where the driver attempts to access a network device pointer after it has been freed. A local attacker could exploit this to cause a...

CVE-2026-89633

A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization through the store function. An attacker can modify product thumbnail and gallery images without proper authorization by invoking the store method on the media component during an authenticated admin-panel session...

CVE-2026-89634

A flaw was found in the Server Message Block SMB client within the Linux kernel. An integer overflow in the ALIGN function, specifically within the symlinkdata error context loop, can lead to an out-of-bounds read. This issue allows a malicious SMB server to cause a denial of service DoS by...

CVE-2026-89733

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In uvcfunctionbind error path, we use usbepfreerequest which uses uvc-controlreq but does not set it to NULL afterwards. Thus, uvc-controlreq is a...

DEBIAN-CVE-2026-89491

In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...

DEBIAN-CVE-2026-80974

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...

CVE-2026-80953

In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts adii3cmasterprobe requests the IRQ and unmasks REGIRQPENDINGCMDR before the controller's IBI state, transfer queue list and transfer queue lock are initialized. A...

UBUNTU-CVE-2026-89718

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writebackstore Patch series "zram: fix stale scan bounds after reinitialization". Both writebackstore and readblockstate derive their table scan bounds from zram-disksize before acquiring devlock...

CVE-2026-89452

In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msmiommuprobe adds its devm-managed IOMMU object to qcomiommudevices before adding the IOMMU sysfs device and registering it with the IOMMU core. If iommudevicesysfsadd fails,...

CVE-2026-89733 usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In uvcfunctionbind error path, we use usbepfreerequest which uses uvc-controlreq but does not set it to NULL afterwards. Thus, uvc-controlreq is a...

EUVD-2026-76297

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501devdata in sm501pciprobe and sm501platprobe is not freed by the corresponding remove functions sm501pciremove and sm501platremove. Fix that...