Linux Distros Unpatched Vulnerability : CVE-2026-89843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t...

The vulnerability of the MediaWiki’s API/queryAbuseFilters.php tool, which is used to implement the hypertext environment, allows a violator to gain unauthorized access to protected information.

The vulnerability of the MediaWiki hypertext environment implementation, as demonstrated in the api/queryAbuseFilters.php tool, involves insufficient protection for operational data. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected informati...

CVE-2026-81870: Exposure of Sensitive Information to an Unauthorized Actor

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

PT-2026-93289

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...

Linux Distros Unpatched Vulnerability : CVE-2026-89859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing...

CVE-2026-89843: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

CVE-2026-89859: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

PT-2026-93340

A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/get iodd menu info endpoint using valid user or operator credentials allowing execution of commands with root privileges on the device...

ROS-20260916-73-0088

The vulnerability of the decodechoice function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter kernel in the Linux operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...

Linux Distros Unpatched Vulnerability : CVE-2026-89794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: zero pipe read compound padding Compound response handling extends the last response iov to an eight-byte boundary. smb2readpipe allocates only the paylo...

CVE-2026-76859

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the userpassshow.cgi component. Low-privilege attackers can exploit this flaw via uiconfig2.xml and misc.js to disclose router credentials...

CVE-2026-76854

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7webauthusershow.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network...

CVE-2026-83038

creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnjlcfbd2f 2026-09-16 00:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltyo4lle2r 2026-09-16 12:05:07+00:00| seen|...

CVE-2026-83037

creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnjcph452j 2026-09-16 00:00:20+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltgyvyop25 2026-09-23 09:48:49+00:00| seen|...

CVE-2026-83036

creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnj2qk2e2w 2026-09-16 00:00:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltgur3q22t 2026-09-23 09:48:51+00:00| seen|...

CVE-2026-83000

creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlngs47wh2g 2026-09-15 23:10:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlqnidz3c25 2026-09-23 09:50:02+00:00| seen|...

CVE-2026-82997

creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfz37552j 2026-09-15 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3izjdq2y 2026-09-23 09:50:08+00:00| seen|...

CVE-2026-82994

creationtimestamp| type| source ---|---|--- 2026-09-15 22:11:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfid46d2f 2026-09-15 22:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlpjmo7hk22 2026-09-23 09:50:13+00:00| seen|...

CVE-2026-73956

creationtimestamp| type| source ---|---|--- 2026-09-15 22:10:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlncovvge24 2026-09-15 22:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvloftkuyy2t 2026-09-23 07:37:07+00:00| seen|...