CVE-2026-89505 RDMA/uverbs: Guard legacy bundles without method_elm

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without methodelm The legacy write path dispatches through a uverbsapiwritemethod, but the uverbsattrbundle passed to provider code does not have an ioctl method element. If malformed provider...

EUVD-2026-76400

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlmmiglockreshandler A node receiving a DLMMIGLOCKRES message trusts several fields of the peer-supplied dlmmigratablelockres without validation. numlocks and locknamelen are bounded only on the sending...

CVE-2026-89494

CVE-2026-89494 is a CRITICAL (CVSS 9.8) vulnerability in the OCFS2 Distributed Lock Manager (DLM) within the Linux kernel. The dlm_mig_lockres_handler trusts peer-supplied num_locks and lockname_len fields without validation, leading to an out-of-bounds read (triggering a BUG_ON panic) and a heap...

CVE-2026-89443

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isstifgetperflevelmask and isstifgetbasefreqmask use the user-provided level as an index into perflevels via readpplevelinfo and readbflevelinfo, but neither helper validates...

CVE-2026-89438

This CVE affects the Linux kernel 's platform/x86: ISST (Intelligent Speed and Frequency Tuning Technology) driver. The root cause is a missing validation of the maximum CLOS ID and logical CPU ID for the core power feature. These values are used to calculate MMIO offsets , so an out-of-range val...

CVE-2026-81017

CVE-2026-81017 affects the Linux kernel's platform/chrome/sensorhub driver. The root cause is a missing validation of the 8-bit EC-reported sensor number in cros_ec_sensorhub_ring_handler(); the unvalidated value is then used to index sensorhub->batch_state[], an array allocated with only sens...

CVE-2026-81007

CVE-2026-81007 affects the Linux kernel 's ipmi/ipmb subsystem. The function ipmb_write() read message fields before validating the length byte, allowing a zero or short write to read uninitialized stack bytes and causing an integer underflow in the block write length when the length is smaller t...

EUVD-2026-76247

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-77490

CVE-2026-77490 affects Microsoft Edge (Chromium-based) due to improper neutralization of input during web page generation, i.e., a cross-site scripting (XSS) flaw. An unauthorized attacker can leverage this over a network to perform spoofing . The CVSS 3.1 score is 6.1 (Medium) with a vector of A...

CVE-2026-81910

Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection SSTI in Theme Customizer via Unvalidated Style Values. Values submitted through the customizer color channels and other style properties handled by ColorStyle and sibling Style classes such as FontFamilyStyle and...

CVE-2025-69904

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files...

CVE-2026-89332 Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obtain sensitive information from a developer workstation. Crafted repository content can cause the agent to modify the...

Security Bulletin: Security Misconfiguration Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22748)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-22748 DESCRIPTION: Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecode...

EUVD-2026-76193

Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection SSTI in Theme Customizer via Unvalidated Style Values. Values submitted through the customizer color channels and other style properties handled by ColorStyle and sibling Style classes such as FontFamilyStyle and...

CVE-2026-7298

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: before 8.4.2.0...

CVE-2026-7298 Reflected XSS in IdeaSoft's Smart E-Commerce

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: before 8.4.2.0...

CVE-2026-7298 Reflected XSS in IdeaSoft's Smart E-Commerce

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: before 8.4.2.0...

CVE-2026-7298

CVE-2026-7298 is a Reflected XSS vulnerability in IdeaSoft Smart E-Commerce (through version 11092026), caused by improper neutralization of input during web page generation. The CVSS 3.1 score is 6.1 (Medium) with a network attack vector, low complexity, no required privileges, but user interact...

EUVD-2026-76163

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: through 11092026. NOTE: The vendor was contacted early about this disclosure bu...

CVE-2026-89010 WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...