223 matches found
Two critical RCEs in PHP core
Update 10/22: Added section detailing observations of in the wild exploitation and associated IOCs. Cisco Talos is tracking the disclosure of two unauthenticated remote code execution RCE flaws in PHP core, dubbed "php2shell", triggered by a plain HTTP request and exploitable before any applicati...
CVE-2026-98449
A flaw was found in the Linux kernel's SMB Server Message Block client. This issue may allow a remote attacker or malicious server to trigger a Denial of Service DoS by inducing network transmission failures during compound request processing. Because the client releases its connection lock witho...
Astra Linux – Vulnerability in WebKit2GTK
A vulnerability related to out-of-bounds reads has been addressed through improved input validation. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may disclose internal states of...
ROS-20261007-73-0065
The vulnerability of the nxpncii2csetmode function in the drivers/nfc/nxp-nci/i2c.c module of the Linux NFC kernel driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow a attacker to cause a service failure...
CVE-2026-58415
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
ROS-20260918-73-0003
The vulnerability of rds component of the Linux operating system’s kernel is related to incomplete recognition of its internal state. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-92963 vm2 before 3.11.2 Information Disclosure via Internal State
vm2 versions before 3.11.2 fail to properly restrict access to the VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL global variable. Attackers can access this internal state object through globalThis to retrieve sensitive sandbox internals...
Linux SPI Buffer Overflow DoS
The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...
Linux kernel NFC DoS
The vulnerability in the nxpncii2csetmode function within the drivers/nfc/nxp-nci/i2c.c file of the Linux kernel NFC driver is related to an incorrect definition of the internal state. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iavf: Use internal state to free traffic IRQs If the system attempts to close the netdev while iavfresettask is running, the LINKSTATESTART field will be cleared, and netifrunning will return false in iavfreinitinterruptscheme. A...
RUSTSEC-2026-0223 Preemption and traps during bulk operations enable breaking internal VM state
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2hw9-mc66-jc2q For more information see the GitHub-hosted security advisory...
Linux kernel USB gadget Heap Buffer Overflow DoS
The vulnerability in the cdns3gadgetinit function within the drivers/usb/cdns3/cdns3-gadget.c file of the Linux kernel USB device driver is related to an improper definition of the internal state. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrit...
Siemens SIMATIC S7-1500 CPU 1518 MFP Incomplete Internal State Distinction (CVE-2026-43030)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505629; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...
SUSE CVE-2026-9546
A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to CURLOPTREFERER suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously...
Data exposure via ZeroMQ on multi-node vLLM deployment
ImpactIn a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-node communication purposes. The primary vLLM host opens an XPUB ZeroMQ socket and binds it to ALL interfaces. While the socket is always opened for a multi-node deployment, it is only used when doing tensor parallelism across...
CVE-2026-9546
A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to CURLOPTREFERER suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously...
CVE-2026-9546 sending old referer
A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to CURLOPTREFERER suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously...
CVE-2026-9546 sending old referer
A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to CURLOPTREFERER suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously...
CVE-2026-9546: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to CURLOPTREFERER suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously...
