CVE-2026-18746

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

PT-2026-102455

Missing authentication in the local .NET backend Fiddler.WebUi of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost HTTP and SignalR RPC channel...

CVE-2026-86158: Missing Authentication for Critical Function

Missing authentication in the local .NET backend Fiddler.WebUi of Progress Software Fiddler Everywhere 8.0.2 allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate through an unauthenticated localhost HTTP and SignalR RPC channel...

ROS-20260929-73-0059

The vulnerability of the rxkaddecryptticket function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from the lack of checking for the return value. Exploiting this vulnerability could allow a remote attacker to compromise...

ROS-20260929-73-0066

The vulnerability of the drivers/net/ethernet/cadence/macbmain.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260929-73-0077

The vulnerability of the functions x25queuerxframe and x25clearqueues in the net/x25/x25in.c module, which are part of the networking functions in the Linux kernel, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

CVE-2026-74220: Signed to Unsigned Conversion Error

U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadreply function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the...

ROS-20260929-73-0047

The vulnerability of the sctprcvasconflookup function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter discrepancies. Exploiting this vulnerability can allow an attacker to gain access to protected...

Important: perl-Net-DNS

Issue Overview: Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the...

ROS-20260929-73-0017

The vulnerability of the netpollcleanup function in the net/core/netpoll.c module of the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

ROS-20260929-73-0104

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

CVE-2026-18746: NULL Pointer Dereference

parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...

ROS-20260929-73-0147

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the net/sched subsystem of the Linux kernel’s network management mechanism, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise...

ROS-20260929-73-0148

The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient handling of format strings. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0156

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the network scheduling subsystem of the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260929-73-0163

The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

ROS-20260929-73-0131

The vulnerability of the nrsendmsg function in the net/netrom/nrout.c module of the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0092

The vulnerability of the teamportadd function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260929-73-0185

The vulnerability of the qfqresetqdisc function in the net/sched/schqfq.c module, within the net/sched subsystem of the Linux operating system’s kernel, is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0189

The vulnerability of the decodepool function in the net/ceph/osdmap.c module, which implements kernel networking functions in the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected...