139 matches found
CVE-2026-120596
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in Nut/OS, developed by Ethernut/Egnite. Nut/OS releases up to version 5.1 are affected. An unauthenticated attacker can send a single TCP segment containing an unknown TCP...
CVE-2026-120596 CVE-2026-120596
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in Nut/OS, developed by Ethernut/Egnite. Nut/OS releases up to version 5.1 are affected. An unauthenticated attacker can send a single TCP segment containing an unknown TCP...
CVE-2026-120596
A remotely exploitable denial-of-service (DoS) vulnerability exists in the Nut/Net TCP/IP stack within Nut/OS (developed by Ethernut/Egnite), affecting releases up to version 5.1 . An unauthenticated attacker can send a single TCP segment containing an unknown TCP option with a length byte of zer...
EUVD-2026-115333
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in Nut/OS, developed by Ethernut/Egnite. Nut/OS releases up to version 5.1 are affected. An unauthenticated attacker can send a single TCP segment containing an unknown TCP...
CVE-2026-120596 CVE-2026-120596
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in Nut/OS, developed by Ethernut/Egnite. Nut/OS releases up to version 5.1 are affected. An unauthenticated attacker can send a single TCP segment containing an unknown TCP...
CVE-2026-120596: Ethernut / egnite GmbH Nut/Net TCP/IP Stack: A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack…
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in Nut/OS, developed by Ethernut/Egnite. Nut/OS releases up to version 5.1 are affected. An unauthenticated attacker can send a single TCP segment containing an unknown TCP...
PT-2026-135540
A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack included in Nut/OS, developed by Ethernut/Egnite. Nut/OS releases up to version 5.1 are affected. An unauthenticated attacker can send a single TCP segment containing an unknown TCP...
@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +14 more potentially affected by CVE-2026-114121 via electron (>=42.0.0, <=42.11.1)
electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.5.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.4.2 - sunrize 2.1.5 and more Source cves: CVE-2026-114121 Source advisory: OSV:GHSA-997Q-GVVC-JWMX...
@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +14 more potentially affected by CVE-2026-113800 via electron (>=42.0.0, <=42.11.1)
electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.5.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.4.2 - sunrize 2.1.5 and more Source cves: CVE-2026-113800 Source advisory: SNYK:JS-ELECTRON-21431563...
@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102673 via electron (>=42.0.0, <=42.4.1)
electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102673 Source advisory: SNYK:JS-ELECTRON-20335498...
@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +12 more potentially affected by CVE-2026-102673 via electron (>=42.0.0, <=42.4.1)
electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.1.20 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102673 Source advisory: OSV:GHSA-HQ2X-R82H-9WJ4...
@0x-copilot/cli (>=0.1.0, <=0.2.0), @cafeai/cafe-code (>=0.0.35, <=0.0.36) +13 more potentially affected by CVE-2026-102676 via electron (>=42.0.0, <=42.7.1)
electron NPM version =42.0.0, =0.1.0, =0.0.35, =0.1.28, =0.1.0, =6.0.0, =0.0.0-alpha.1, =0.10.0, =0.1.4, =0.1.2, =0.1.1, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102676 Source advisory: GHSA-9QH4-3JW8-366W...
@happy-nut/monacori (>=0.1.28, <=0.1.34), @hayasaka7/haya-pet (>=0.1.0, <=0.3.28) +5 more potentially affected by CVE-2026-102677 via electron (>=42.3.3, <=42.9.3)
electron NPM version =42.3.3, =0.1.28, =0.1.0, =0.5.0, =0.1.4, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102677 Source advisory: GHSA-QMV3-FV6V-RMHQ...
@happy-nut/monacori (>=0.1.28, <=0.1.34), @hayasaka7/haya-pet (>=0.1.0, <=0.3.28) +5 more potentially affected by CVE-2026-102677 via electron (>=42.3.3, <=42.9.3)
electron NPM version =42.3.3, =0.1.28, =0.1.0, =0.5.0, =0.1.4, =0.3.75, =0.3.91 - sunrize 2.1.5 - wrap-it-up 0.0.17 Source cves: CVE-2026-102677 Source advisory: OSV:GHSA-QMV3-FV6V-RMHQ...
Linux Distros Unpatched Vulnerability : CVE-2026-54161
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - nut - None Ubuntu Linux - upsmon: remote OS command injection RCE via attacker- controlled ups.alarm in NOTIFYCMD execution CVE-2026-54161 Note...
CVE-2026-54161
Remote OS command injection in Network UPS Tools NUT upsmon. An attacker who can control a UPS's ups.alarm value malicious/compromised UPS or MITM of the driver-to-upsd channel gets that value substituted into the NOTIFYCMD handler, which upsmon passes to system, allowing arbitrary command...
CVE-2025-65548
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...
CVE-2025-65548
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...
CVE-2025-65548
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...