GO-2026-6291 mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias in github.com/sonirico/mcp-shell

mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias in github.com/sonirico/mcp-shell...

CVE-2026-74741

CVE-2026-74741 is a NULL pointer dereference in the Linux kernel's ngbe network driver, occurring in the non-MSI-X interrupt enabling path. When the driver operates in legacy INTx or single MSI mode, the wx->msix_entry pointer is not allocated or initialized, so calling NGBE_INTR_MISC(wx) dere...

SUSE-SU-2026:23289-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. - CVE-2026-53785: --relative implied-parent...

CVE-2026-15365

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode on vivo devices allows users to view local gallery photos directly within that page. The vulnerability is scored CVSS 4.0 base 2.4 (LOW) with a physical attack vector , indicating proximity access is required and no privileges or ...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15365

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

CVE-2026-15365

CVE-2026-15365 affects vivo Kids Mode , where a pop-up logic flaw in a certain feature allows users to bypass password verification and access Quick Apps outside the app. The vulnerability requires a physical attack vector and is scored CVSS 4.0 Base 2.4 (LOW) , with low impact on confidentiality...

EUVD-2026-66295

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

CVE-2026-15365

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

kernel: netfilter: xt_policy: fix strict mode inbound policy matching

A flaw was found in the Linux kernel's netfilter component, which is responsible for network packet filtering. This vulnerability, located in the xtpolicy module, involves an error in how strict inbound network policies are matched. This could allow an attacker to bypass established security rule...

SUSE CVE-2026-61711

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

SUSE CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-9805

CVE-2026-9805 affects Insyde SMM firmware , specifically the IHISI command handler (FMTSWriteUseIntelLib) responsible for processing FMTS command 0x32 . The handler reads and writes data without validating buffer size, potentially leading to a buffer overflow . The CNA-assigned CVSS 3.1 score is ...

PT-2026-81972

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A pop-up logic flaw in a specific feature of Kids Mode enables users to bypass password verification, allowing the use of Quick Apps outside the intended...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-104841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104841 advisory. A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX client path. This occurs...

CVE-2026-15365: Improper Enforcement of Behavioral Workflow

A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app...

PT-2026-81973

Name of the Vulnerable Software and Affected Versions Kids Mode affected versions not specified Description A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page. Recommendations At the moment, there is no information...