CVE-2026-91161: Incorrect Authorization

OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/sessionId/groups/groupId/invite-code endpoint and the GroupGetInviteCode MCP tool have no OPERATOR role requirement, allowing a valid VIEWER key scoped to a session to retrieve an active group...

CVE-2026-76907: Exposure of Sensitive Information to an Unauthorized Actor

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...

PT-2026-104913

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte count in acpi ps get next package length Validate package length reading in acpi ps get next package length...

PT-2026-104983

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in get wave state The get wave state function for v9 trusts cp hqd cntl stack size and cp hqd cntl stack offset values read directly from the MQD, which are written by GPU microcode and fully...

PT-2026-105008

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi ps get next field Add boundary checks in acpi ps get next field to prevent out-of-bounds access...

PT-2026-98078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists within the ACPICA component. This occurs due to missing boundary checks in the acpi ps get next namestring and acpi ps peek opcode functions...

PT-2026-98087

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA component where the byte count is not properly validated during package length reading within the acpi ps get next package length function. Recommendations ...

PT-2026-98115

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds memory exposure exists in the get wave state function for v9. The function trusts cp hqd cntl stack size and cp hqd cntl stack offset values read from the MQD, which can...

PT-2026-98023

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdkfd driver where the buffer size for returning buffer object bo metadata to user space is controlled by the user. A malicious user in the render group can provi...

PT-2026-98088

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ACPICA component. This occurs due to missing boundary checks within the acpi ps get next field function. Recommendations At the moment, there ...

PT-2026-98025

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the spi get device match data function when spi get device id returns NULL. This situation can arise when using driver override without a matching SP...

PT-2026-98049

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs tree-checker where ROOT REF and ROOT BACKREF items, which consist of a btrfs root ref structure followed by a subvolume name, are not properly validated. Som...

PT-2026-104900

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi ps get next namestring and acpi ps peek opcode to prevent out-of-bounds access...

PT-2026-104939

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi bus get primary device The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpi get first physical node, may return a stale device pointer most...

PT-2026-104877

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT MAP PHYSMEM END definition get free mem region and mhp get pluggable range bound their search to DIRECT MAP PHYSMEM END. LoongArch does not define it, so the fallback in include/linux/mm.h applies: under...

PT-2026-98226

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.3.0 Description The get trip summary function in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring the trips:read scope. This allows a token granted only unrelated capabilities,...

PT-2026-97904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On LoongArch architectures, the kernel fails to define DIRECT MAP PHYSMEM END, causing get free mem region and mhp get pluggable range to use a compile-time constant fallback that does n...

PT-2026-97967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the greybus audio component where the gb audio gb get topology function fetches a topology blob based on a size supplied by a module. The gbaudio tplg parse data...

Linux Distros Unpatched Vulnerability : CVE-2026-67221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The AMQP 0-9-1 shovel calls amqpuri:removecredentials...

PT-2026-97938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ACPI bus. The function acpi get first physical node may return a stale device pointer because acpi unbind one can execute after the ACPI device's...