PT-2026-93746

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description Observability endpoints expose live view/session state and a remote method-invocation surface via the eval handler function. In configurations where DEBUG is enabled and the optional localhost...

PT-2026-94131

Summary The XSS blueprint validator Security::detectXss runs on the raw page content before Twig processing. An attacker can use Twig's string concatenation operator to dynamically construct an event handler name at render time. The validator sees "on" "error" - a harmless Twig expression - and...

PT-2026-93927

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the BIFS Handler component within the gf sg command del function located in the src/scenegraph/commands.c file. This flaw allows for local exploitation through specific...

CVE-2026-92801: Incorrect Authorization

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands by triggering card actions in admitted chats, bypassing the per-user access controls that protect the text message handle...

PT-2026-93543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch architecture where the do bp function can reach kprobe singlestep handler even when no active probe is present, because userspace can issue the same brea...

PT-2026-93893

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A remote attack can cause a null pointer dereference in the PFCP Handler component. This occurs within the ogs pfcp parse volume measurement function located in the lib/pfcp/types.c library. A null...

Linux Distros Unpatched Vulnerability : CVE-2026-89980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: harmony: initialize locks before requesting IRQ sndharmonycreate registers the IRQ...

SUSE CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

SUSE CVE-2026-90713

A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possib...

SUSE CVE-2026-90804

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cielength/fdelength/augmentationdatasize/writeoffset results in...

SUSE CVE-2026-90828

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elforphancompatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local...

SUSE CVE-2026-90829

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfdelfsetgroupcontents of the file bfd/elf.c of the component SHTGROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been...

SUSE CVE-2026-91779

A security flaw has been discovered in GNU Binutils 2.47. This affects the function bfdelfehframesectionoffset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The...

SUSE CVE-2026-91781

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...

CVE-2026-76857

Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddnswanlistshow.cgi endpoint and related DDNSsetcgi, IGDGetCgiHandler, and IGDCgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...

CVE-2026-92256

Netcore NR255-V router version 1.5.130703 is affected by a sensitive information disclosure vulnerability in the l2tpd_config_show_cgi.c , ipsec_show_cgi.c , and mod_vpn_remote/plan.json read handlers. An attacker with low privileges can query l2tpd_config_show.cgi to expose stored IPsec PSK and ...

CVE-2026-76864

Netcore NR255-V version 1.5.130703 suffers from a stored cross-site scripting (XSS) vulnerability in its QoS management interface. QoS rule names are not sanitized before being parsed via eval() in the qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi, and qos_filter_show_cgi CGI handlers...

CVE-2026-76864 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule Names

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

CVE-2026-58698

In appmicpollmsghandler of appmicipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-91855

A security flaw has been discovered in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality of the file lib/pfcp/handler.c of the component PFCP Message Handler. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The...