CVE-2026-14366 SiWx91x WiFi driver double-unref / use-after-free of caller-owned TX net_pkt

The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...

CVE-2026-73513

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without ENDSTREAM. Envoy completes and deferred-deletes the ActiveRequest...

CVE-2026-66047

creationtimestamp| type| source ---|---|--- 2026-08-31 16:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufbmnkhyl2f 2026-08-31 16:07:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mufc22btmc2m...

CGA-6W6X-79V6-VMVQ

Bulletin has no description...

CVE-2026-80221

No description is available for this CVE...

CVE-2026-77849

No description is available for this CVE...

CGA-4P9R-2749-64VG

Bulletin has no description...

MINI-874X-5946-W4P7

Bulletin has no description...

MINI-PWRJ-C3QF-P86R

Bulletin has no description...

MINI-QG86-CH7F-F9HF

Bulletin has no description...

MINI-6VCH-97M4-FV3F

Bulletin has no description...

MINI-P97J-22WW-5W6R

Bulletin has no description...

MINI-WWVF-2MHR-4X55

Bulletin has no description...

MINI-JJ6J-9GP4-GJ3J

Bulletin has no description...

MINI-FWHH-VHQX-JHX8

Bulletin has no description...

MINI-8FJQ-4VXG-93P6

Bulletin has no description...

MINI-58JX-J435-9HF2

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-47885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring...

Fedora 44 : hcloud (2026-dd9ec8b0c2)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dd9ec8b0c2 advisory. Update to 1.67.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

The vulnerability of the SVG component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and influence the integrity of the data.

The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data through a special...