CVE-2026-93063

A flaw was found in the Linux kernel's iwlwifi component. This vulnerability allows an attacker to cause a buffer overflow by sending a specially crafted Service Advertisement Protocol SAP message that exceeds the allocated buffer size. This could lead to memory corruption, potentially causing th...

CVE-2026-93052

A flaw was found in the Linux kernel's bcm-vk driver. Improper memory ordering during the initialization of message queues can cause other kernel components to read outdated queue information. This occurs when the msgqinited flag is set before the message queue data is fully synchronized, leading...

CLSA-2026-1792496879 pacemaker: Fix of CVE-2026-10649

CVE-2026-10649: integer overflows in remote message decompression...

@liff/analytics (>=2.22.0, <=2.31.0), @liff/core (>=2.22.0, <=2.31.0) +14 more potentially affected by CVE-2026-112148 via @liff/message-bus (>=2.20.0, <=2.31.0)

@liff/message-bus NPM version =2.20.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.20.0, =2.20.0, =2.20.0, =2.20.0, =2.28.0, =2.20.0, =2.22.0, =2.22.0, =2.20.0, =2.20.0, =2.31.0 - @sociably/line 0.8.0-alpha.19 and more Source cves: CVE-2026-112148 Source advisory: MEND:CVE-2026-112148...

CLSA-2026-1792464596 libsoup: Fix of 4 CVEs

CVE-2026-102557, CVE-2026-102559: cap WebSocket message reassembly and outgoing frames at the GByteArray size limit - CVE-2026-102558: cap incoming WebSocket frame payloads at the receive buffer limit - CVE-2026-102556: emit the WebSocket pong signal with a GBytes - CVE-2026-3099: reject replayed...

CLSA-2026-1792464330 libsoup: Fix of 4 CVEs

CVE-2026-102557, CVE-2026-102559: cap WebSocket message reassembly and outgoing frames at the GByteArray size limit - CVE-2026-102558: cap incoming WebSocket frame payloads at the receive buffer limit - CVE-2026-102556: emit the WebSocket pong signal with a GBytes - CVE-2026-3099: reject replayed...

EUVD-2026-104676

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

CVE-2026-107366

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

PT-2026-118434

The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero-length Certificate message therefore wraps the unsigned length to 0xFFFFFFFF, which makes the bounds check that follows...

PT-2026-119346

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Email Center...

PT-2026-118433

A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer underflow and a subsequent heap out-of-bounds read in any peer that processes a remote Certificate message. It is reachable pre-authentication, during the...

Oracle E-Business Suite: CVE-2026-101671: Critical Patch Update

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center...

PT-2026-118613

Name of the Vulnerable Software and Affected Versions Cachet versions prior to 2.4.2 Cachet version 3 Description A stored Cross-Site Scripting XSS issue exists in the incident creation form. An authenticated attacker can inject malicious HTML or JavaScript into the Incident Name and Incident...

AlmaLinux 9.6 [TuxCare] Security Update: pacemaker / pacemaker-cli / pacemaker-cluster-libs / pacemaker-cts / etc (ALMALINUX9.6:CLSA-2026:1792442836)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792442836 advisory. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message...

Rocky Linux 9.6 [TuxCare] Security Update: pacemaker / pacemaker-cli / pacemaker-cluster-libs / pacemaker-cts / etc (ALMALINUX9.6:CLSA-2026:1792442836)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792442836 advisory. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46128)

In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty...

PT-2026-120145

A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called...

PT-2026-119347

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center...

AlmaLinux 9.2 [TuxCare] Security Update: pacemaker / pacemaker-cli / pacemaker-cluster-libs / pacemaker-cts / etc (ALMALINUX9.2:CLSA-2026:1792496879)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792496879 advisory. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message...

Oracle E-Business Suite: CVE-2026-101670: Critical Patch Update

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Component. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Email Center...