CVE-2026-68467

The CVE-2026-68467 issue affects the Linux kernel mtd: mchp23k256 driver. The driver stored chip capacity in both the OF match table and the SPI id table, and probe used of_device_get_match_data(), which caused an id-table-only match to fallback to mchp23k256_caps. The fix switches to spi_get_dev...

EUVD-2026-59089

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

MINI-XPP2-W8J3-6CR8

Bulletin has no description...

EUVD-2026-58822

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

PT-2026-72974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the close file table ids function within the ksmbd module. A ksmbd file object can persist after a logical close if another session maintains a temporary...

PT-2026-73025

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3-iommufd component where the arm vsmmu vsid to sid function incorrectly assumes a device has exactly one stream. When a device has multiple stream...

PT-2026-72140

Name of the Vulnerable Software and Affected Versions Online Booking & Scheduling Calendar for WordPress by vcita versions prior to 4.6.1 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where...

PT-2026-72845

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the mac id field in RX descriptors, which is 8 bits wide 0-255, is used as an array index for assoc link on macid without validation. Since...

CVE-2026-19899: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /editteacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been...

PT-2026-72752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System server NFSD where the nfsd4 drop revoked stid function lacks a case for SC TYPE LAYOUT. When a client sends a FREE STATEID request for an...

PT-2026-72701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana network driver where the mana gd create mana wq cq function fails to properly initialize the queue-id variable, leaving it as 0. If the creation process fails...

CVE-2026-74384: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nvmenshead struct nvmenshead contains a flexible array member, currentpath, which is indexed using the NUMA node ID: head-currentpathnumanodeid The structure is currently allocated as...

CVE-2026-72379: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs: refuse OTMPFILE creation with an unmapped fsuid or fsgid vfstmpfile never checked that the caller's fsuid and fsgid map into the filesystem. On an idmapped mount whose idmapping does not cover the caller's fsu,gid, the -tmpfi...

CVE-2026-74265: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...

PT-2026-72184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 component where the cfg80211 gen new ie function copies multi-link probe response elements from a parent frame without sufficient validation of the EHT...

CVE-2026-74245

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245 Quay: unauthenticated exported logs download in quay

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245

Red Hat Quay 's exported logs feature contains an authorization flaw that allows an unauthenticated attacker with a valid file ID to download exported action logs. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks . The impact is information disclosure ...

CVE-2026-74245

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...