ROS-20260828-73-0002

The vulnerability of the usbnetprobe function in the drivers/net/usb/usbnet.c module of the Linux network adapter driver module is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

CVE-2026-82078: Use of Externally-Controlled Input to Select Classes or Code

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

CVE-2026-38636: Uncontrolled Resource Consumption

An issue in the seekdir function /dirent/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...

Linux x86 KVM Heap Buffer Overflow DoS

The vulnerability of the vcpublock function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability could allow an attacker to cause a service...

Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco Catalyst SD-WAN Configuration Input Compromise

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

Firefox Thunderbird Confidential Data Access

The vulnerability of the Engine component in web browsers such as Firefox and Firefox ESR, as well as in the Thunderbird email client, is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

HPLIP Printer Driver DoS

The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-83139

The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and output escaping of user-supplied data via the rocket beacon AJAX endpoint. This makes it possible for unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-81523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted witho...

CVE-2026-54085 Wazuh: Missing input validation in multiple active response scripts allows argument injection

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

EUVD-2026-67304

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jetty-server jar (CVE-2026-10051, CVE-2026-6790)

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-10051 and CVE-2026-6790 reported for jetty-server-12.0.25.jar Vulnerability Details CVEID:CVE-2026-10051 DESCRIPTION: In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the...

CVE-2026-81525

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

CVE-2026-81522

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...

CVE-2026-81523

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

DEBIAN-CVE-2026-81523

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

DEBIAN-CVE-2026-81522

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...

DEBIAN-CVE-2026-81525

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...