CVE-2026-84947: Improper Input Validation

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

PT-2026-85613

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joycon ctlr read handler joycon ctlr read handler casts an incoming HID input report to struct joycon input report and parses it, guarding the cast only with a 12-byte length check: if siz...

The vulnerability of the cc1352_bootloader_rx() function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cc1352bootloaderrx function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Vulnerability of the .NET software platform and Microsoft Visual Studio development tools, related to improper validation of specified input types, allowing attackers to trigger service failures.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2026-50553: Improper Input Validation

Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug values with the OpenAPI/huma tag pattern:"a-z0-9-+". huma compiles this with regexp.MustCompiles.Pattern and tests it with patternRe.MatchStringstr, an UNANCHORED match. Because th...

PT-2026-91355

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input device after capabilities are set input register device exposes the device to userspace immediately. In joycon input create it was called before joycon config rumble configures the FF RUMBLE capabili...

Linux Distros Unpatched Vulnerability : CVE-2026-80771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: register input device after capabilities are set inputregisterdevice exposes the device to userspace immediately. In joyconinputcreate it was...

PT-2026-85475

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448...

PT-2026-85448

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xtemos WoodMart allows DOM-Based XSS. This issue affects WoodMart: from n/a before 8.3.8...

CVE-2026-53758: Improper Neutralization of Input During Web Page Generation

Emlog is an open source website building system. In versions 2.6.29 and prior, article content is processed by Parsedown without enabling safe mode, which means raw HTML including...

PT-2026-85431

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

PT-2026-85527

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects...

The vulnerability of the mshv_vtl_ioctl_add_vtl0_mem() function in the drivers/hv/mshv_vtl_main.c driver for the Microsoft HyperV guest mode operating system on Linux allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mshvvtlioctladdvtl0mem function in the drivers/hv/mshvvtlmain.c driver of the Microsoft HyperV guest mode operating system on Linux is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

The vulnerability of the wbt_init_enable_default() function in the block/blk-wbt.c module, which supports the block-level kernel in the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the wbtinitenabledefault function in the block/blk-wbt.c module, which supports the block-level kernel in the Linux operating system, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to...

The vulnerability of the vti6_tnl_lookup() function in the net/ipv6/ip6_vti.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6tnllookup function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability may allow an attacker, acting remotely, to...

Linux Distros Unpatched Vulnerability : CVE-2026-76178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored Cross-Site Scripting XSS vulnerability in the notification template functionality of the endpoint /ocsreports/?function=notification. A user with...

The vulnerability of the iptfs_consume_frags() function in the net/xfrm/xfrm_iptfs.c module, a component of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsconsumefrags function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the kvm_vcpu_init_nested() function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmvcpuinitnested function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to...

PT-2026-93249

Name of the Vulnerable Software and Affected Versions polkit affected versions not specified Description An issue exists where cookie input is handled incorrectly, specifically involving a stack buffer underflow in the read cookie function. This was introduced as a regression in a previous fix. A...

CVE-2026-80882: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in tegraccmdoonereq...