CVE-2026-66013 OpenRemote before 1.26.2 Authentication Bypass via Console Registration

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without...

CVE-2026-66013 OpenRemote before 1.26.2 Authentication Bypass via Console Registration

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without...

CVE-2026-66013

OpenRemote has a vulnerability (CVE-2026-66013) affecting versions before 1.26.2 where the console registration API is vulnerable to authentication bypass. This allows unauthenticated attackers to update existing console assets by supplying a known asset identifier, enabling them to overwrite pus...

DEBIAN-CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

DEBIAN-CVE-2026-64383

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2flush replay SMB2flush keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifssendrecv stores a replacement...

DEBIAN-CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

CVE-2026-64401 smb: client: resolve SWN tcon from live registrations

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

CVE-2026-64380

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid1 ...

CVE-2026-64380 smb: client: harden POSIX SID length parsing

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid1 ...

CVE-2026-64327

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffsdatagotdescs generates the epsaddrmap which contains the endpoint direction. However, epfile-in was previously on...

GHSA-6XJ8-QV9J-XCJQ

creationtimestamp| type| source ---|---|--- 2026-07-25 07:31:13+00:00| seen| https://gist.github.com/alon710/e9c3b68dd2dd0898bdce9f4d836eceff...

GHSA-3R53-75J5-3G7J

creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...

ECHO-2015-E9BA-EC13

Bulletin has no description...

GHSA-HMJ8-5XMH-5573

creationtimestamp| type| source ---|---|--- 2026-07-25 05:31:39+00:00| seen| https://gist.github.com/alon710/610364d1088c3e73d54d1422be1a22f2...

CVE-2026-16796

creationtimestamp| type| source ---|---|--- 2026-07-25 02:43:25+00:00| seen| https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382...

MINI-3Q77-P367-R2P4

Bulletin has no description...

GHSA-8Q49-2H5H-434X

creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...

SUSE CVE-2026-64229

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

CVE-2026-58662

creationtimestamp| type| source ---|---|--- 2026-07-25 00:08:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgl7nigny2g 2026-07-26 05:02:38+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n 2026-07-29 00:07:07+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-65704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed...