CVE-2026-84186 Incorrect access control in PrestaShop

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

Linux Distros Unpatched Vulnerability : CVE-2026-86308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown...

CVE-2026-86308: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DBDEBUG results in...

PT-2026-86813

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processing of the file App/Common/Conf/config.php of the component Debug Mode. The manipulation of the argument DB DEBUG results in...

Linux Distros Unpatched Vulnerability : CVE-2026-86227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation...

DEBIAN-CVE-2026-86227

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-86227

valkey-io valkey (up to 9.0.5/9.1.1) contains an out-of-bounds read in the kvstoreGetHashtable function of src/kvstore.c, triggered by manipulation of the didx argument. Exploitation requires cluster mode plus an attacker-controlled dump.rdb at startup (via data-dir write access, replication feed...

CVE-2026-86227

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-86227 valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-86227 valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

OPENSUSE-SU-2026:21765-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

CVE-2026-86256

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainerlogin view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with...

EUVD-2026-72112

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainerlogin view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with...

PT-2026-86574

Name of the Vulnerable Software and Affected Versions valkey-io valkey versions prior to 9.0.6 valkey-io valkey versions prior to 9.1.2 Description A weakness exists in the kvstoreGetHashtable function within the src/kvstore.c file. Manipulation of the didx variable can lead to an out-of-bounds...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073357 advisory. In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-085346)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085346 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released Recently, we discovered the followi...

CVE-2026-86227: Out-of-bounds Read

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

SUSE CVE-2026-67438

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/arguments.go checkShellArgumentSafety function does not treat regex: custom argument types as unsafe for Shell mode actions, allowing values that pass...

SUSE CVE-2026-80786

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

CVE-2026-85704

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...