CVE-2026-68765: Heap-based Buffer Overflow

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-49303: Undefined Security Weakness

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099982 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where i...

CVE-2026-49307: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

The vulnerability of the octeontx2-af module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the octeontx2-af module in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the auth_gss module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the authgss module in the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the nvme_pr_read_keys() function in the drivers/nvme/host/pr.c kernel of the Linux operating system allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the nvmeprreadkeys function in the drivers/nvme/host/pr.c module of the Linux operating system is related to unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the function ieee80211_ml_reconfiguration() in the net/mac80211/mlme.c module of the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the function ieee80211mlreconfiguration in the net/mac80211/mlme.c module of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protected...

The vulnerability of the rsi_mac80211_config() function in the drivers/net/wireless/rsi/rsi_91x_mac80211.c driver module of the Redpine Signals wireless communication adapter driver for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rsimac80211config function in the drivers/net/wireless/rsi/rsi91xmac80211.c driver of the wireless adapter driver from Redpine Signals in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100387 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: drop pending enqueued packets on removal Packets sitting in nfqueue might hold ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100383)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100383 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: replace riofreenet with kfree in rioscanallocnet When idtab allocation fails, net is not...

PT-2026-73223

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

CVE-2026-49306: Use After Free

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60357

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...

CVE-2026-67926

The JeecgBoot v.3.9.2 software is affected by a vulnerability in its AI Chat Module that allows a remote attacker to achieve arbitrary code execution . The flaw is triggered via the files Parameter . The impact is rated as CRITICAL with a CVSS v3.1 score of 9.8 , indicating high severity across c...

PT-2026-76781

Name of the Vulnerable Software and Affected Versions FreeCAD versions prior to 1.1.2 Description An issue exists in the PropertyPythonObject::Restore function within src/App/PropertyPythonObject.cpp where the software passes an attacker-controlled module attribute from serialized...

PT-2026-73227

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-63667: Improper Limitation of a Pathname to a Restricted Directory

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...