EUVD-2026-74599

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74596

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74595

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49311

CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...

PT-2026-88794

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88793

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Security Advisory 0154

Security Advisory 0154 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73458 CVSSv3.1 Base Score: 8.2...

CVE-2026-49313: Undefined Security Weakness

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-88806

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88796

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-88809

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

SAP NetWeaver AS Java Denial of Service (3736494)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...

PT-2026-88803

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

Linux Distros Unpatched Vulnerability : CVE-2026-87735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or...

CVE-2026-65669

creationtimestamp| type| source ---|---|--- 2026-09-08 20:08:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztak4iaf2f 2026-09-08 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzuynrzg52y 2026-09-08 22:00:55+00:00| seen|...

CVE-2026-9215

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-77110

Adobe Commerce is affected by a Path Traversal vulnerability (CWE-22) that can lead to a security feature bypass . An attacker with high privileges can access unauthorized files or directories outside intended restrictions, resulting in limited availability disruption . Exploitation requires no u...

CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-9215

A CSRF vulnerability in the web interfaces of NETGEAR XR500, XR1000, and XR1000v2 routers allows an attacker, via social engineering , to induce a router administrator into tampering with router configuration, resulting in high integrity and availability impact with no confidentiality impact. The...

BIT-JENKINS-2026-84654

In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public static fields of the bound configuration object, allowing attackers who can submit configuration forms to modify publi...