CVE-2026-101354: Stack-based Buffer Overflow

A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...

CVE-2026-102762: Missing Release of Memory after Effective Lifetime

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

CVE-2026-73594: Improper Certificate Validation

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-95305: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-95376: Externally Controlled Reference to a Resource in Another Sphere

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95346: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

CVE-2026-100297: Server-Side Request Forgery (SSRF)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries...

Important: bluez

Issue Overview: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the...

FreeBSD-SA-26:69.udp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:69.udp Security Advisory The FreeBSD Project Topic: IPv6 UDP sendto2 bypasses jail loopback restriction Category: core Module: udp Announced: 2026-09-29...

When Cyber Scoring Systems Diverge: An Empirical Comparison

Vulnerability scoring systems underpin cyber patch prioritization and risk management, but their comparative behavior is almost always assessed in the abstract, through correlation studies in IT vulnerability databases, rather than by the operational consequences they produce when embedded in a...

ROS-20260929-73-0070

The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0098

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c module of the Linux network device driver framework is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

ROS-20260929-73-0064

The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260929-73-0090

The vulnerability of the fore200eopen function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

PT-2026-102874

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...

Behavior-Centric Malware Classification with Fine-Grained Malicious Logic Localization

Effective malware analysis requires understanding not only whether a program is malicious, but also which behaviors it exhibits and where those behaviors originate in the code. Existing machine-learning-based malware detectors largely operate as black boxes, providing limited insight into the...

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...

CVE-2026-100289: Missing Authorization

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

PT-2026-102669

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

ROS-20260929-73-0058

The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...