Astra Linux – Vulnerability in Chromium

Leakage of side-channel information in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: Networks: Fixed a stack overflow issue when LRO is disabled for virtual interfaces. When the features of a virtual interface are updated, the updated features are synchronized with its underlying interfaces. This synchronization...

Astra Linux – Vulnerability in Chromium

Insecure security user interfaces in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: cfg80211: Calling cfg80211stopap when switching from P2PGO type If the user-space tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsgNL80211CMDSETINTERFACE, it does not call the cleanup function cfg80211stopap...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2026-19178

Summary The Web UI and REST interfaces allowed users with administrative-level role-mapping privileges to modify their own role mapping, creating a race condition in which a user could potentially preserve or restore elevated privileges while an administrator was changing the user's role. This...

EUVD-2026-101372

An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is...

EUVD-2026-101488

A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces...

CVE-2026-101936: Reachable Assertion

A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces...

CVE-2026-102048: Allocation of Resources Without Limits or Throttling

An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is...

PT-2026-114332

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.9.0 Discourse versions prior to 2026.8.1 Discourse versions prior to 2026.7.3 Discourse versions prior to 2026.1.9 Description An issue exists in oEmbed processing where an entire attacker-controlled HTML...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libvirt vulnerabilities (USN-8652-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8652-1 advisory. It was discovered that libvirt incorrectly handled guest reboots in the libxl...

chipsec

CHIPSEC: Marco de Evaluación de Seguridad de la Plataforma CHIPSEC es un marco de trabajo para analizar la seguridad de plataformas de PC, incluyendo hardware, firmware del sistema BIOS/UEFI y componentes de la plataforma. Incluye un conjunto de pruebas de seguridad, herramientas para acceder a...

CVE-2026-108506

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...

CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...

CVE-2026-108506

The ZTE Z80 Ultra is affected by an unauthorized access vulnerability caused by inadequate access control and a lack of robust invocation authentication on its system interfaces. Specifically, third-party applications can utilize reflection to call these interfaces and retrieve sensitive informat...

EUVD-2026-96303

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...

CVE-2026-108505

The ZTE Z80 Ultra is affected by a local information disclosure vulnerability. Due to improper privilege management (CWE-269 ), third-party applications can capture data returned by system interfaces to obtain device-related information . The base severity is rated as LOW (3.3). No specific explo...

EUVD-2026-96302

ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information...

CVE-2026-108505 Information disclosure vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information...

CVE-2026-108506: Improper Privilege Management

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...