Lucene search
+L

36525 matches found

Vulnrichment
Vulnrichment
added 2026/07/25 10:45 a.m.8 views

CVE-2026-66013 OpenRemote before 1.26.2 Authentication Bypass via Console Registration

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without...

9.3CVSS5.9AI score0.00388EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/25 10:45 a.m.63 views

CVE-2026-66013

OpenRemote has a vulnerability (CVE-2026-66013) affecting versions before 1.26.2 where the console registration API is vulnerable to authentication bypass. This allows unauthenticated attackers to update existing console assets by supplying a known asset identifier, enabling them to overwrite pus...

9.3CVSS5.9AI score0.00388EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/25 10:17 a.m.5 views

CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

7.8CVSS0.00126EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/25 10:17 a.m.9 views

CVE-2026-64267

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

5.5CVSS0.00198EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/25 10:17 a.m.8 views

UBUNTU-CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

7.8CVSS5.6AI score0.00126EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64511

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 "ACPI: NFIT: Install Notify handler before getting NFIT table", acpinfitprobe installs an ACPI notify handler for the NFIT device before checking t...

5.7AI score0.00156EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64267

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

5.5CVSS5.7AI score0.00198EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/25 8:52 a.m.9 views

EUVD-2026-48855

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 "ACPI: NFIT: Install Notify handler before getting NFIT table", acpinfitprobe installs an ACPI notify handler for the NFIT device before checking t...

5.8AI score0.00156EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/25 8:52 a.m.25 views

CVE-2026-64511

CVE-2026-64511 concerns the Linux kernel where an ACPI NFIT NULL-pointer dereference could occur if NFIT_NOTIFY_UC_MEMORY_ERROR arrives before the NFIT table is allocated. The fix guards acpi_nfit_uc_error_notify() against a NULL acpi_desc, preventing dereferencing when the NFIT table is absent a...

5.8AI score0.00156EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.33 views

CVE-2026-64401 smb: client: resolve SWN tcon from live registrations

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

7.8CVSS0.00126EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/25 8:50 a.m.19 views

CVE-2026-64401

CVE-2026-64401 affects the Linux kernel SMB/CIFS client. The bug occurs in cifs_swn_notify() which, under cifs_swnreg_idr_mutex, uses a cached tcon pointer that is not a stable reference, risking use-after-free when multiple tcons exist for a net/share. A same-share mount can keep the registratio...

7.8CVSS5.7AI score0.00126EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.31 views

CVE-2026-64267 fuse: avoid 32-bit prune notification count wrap

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

0.00198EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/25 8:49 a.m.24 views

CVE-2026-64267

CVE-2026-64267 affects the Linux kernel’s FUSE (Filesystem in Userspace) path. The issue is an integer overflow in handling FUSE_NOTIFY_PRUNE messages on 32-bit architectures, where the product of outarg.count and sizeof(u64) can wrap during payload length validation, potentially causing the kern...

5.5CVSS5.7AI score0.00198EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.8 views

CVE-2026-64267

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

5.5CVSS5.7AI score0.00198EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/25 8:49 a.m.11 views

EUVD-2026-48979

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

5.7AI score0.00198EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/25 8:49 a.m.7 views

CVE-2026-64267 fuse: avoid 32-bit prune notification count wrap

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSENOTIFYPRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, sizet is also 32 bits, so the daemon-controlled count...

5.7AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.24 views

PT-2026-64763

Name of the Vulnerable Software and Affected Versions OpenRemote versions prior to 1.26.2 Description An authentication bypass exists in the console registration API. Unauthenticated attackers can update existing console assets by providing a known asset identifier. This allows the overwriting of...

9.3CVSS5.9AI score0.00388EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/25 12:0 a.m.14 views

PT-2026-64488

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap FUSE NOTIFY PRUNE validates the nodeid payload length with: size - sizeofoutarg != outarg.count sizeofu64 On 32-bit kernels, size t is also 32 bits, so the daemon-controlled count...

5.7AI score0.00198EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/24 3:23 p.m.8 views

CVE-2026-64230 regulator: tps65219: fix irq_data.rdev not being assigned

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c "regulator: tps65219: Remove debugging helper function" removed the tps65219getrdevbyname helper along with the irqdata.rdev assignment that depended on...

5.8AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/24 11:19 a.m.9 views

kernel: fs/notify: call exportfs_encode_fid with s_umount

A flaw was found in the Linux kernel’s filesystem notification fs/notify code where calling inotifyshowfdinfo on a file descriptor watching an overlayfs inode during an unmount operation could lead to a NULL pointer dereference...

6.2AI score0.00197EPSS
SaveExploits0References5
Rows per page
Query Builder