CVE-2026-89669: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4copynotify finished initializing the cpntf state after nfs4allocinitcpntfstate had already linked it into the s2scpstateids IDR and the parent's sccplist, with cscoun...

CVE-2026-89663: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2scpstateids IDR and on their parent stid's sccplist, pinned by a single membership reference. freecpntfstatelocked only unlinks ...

PT-2026-90410

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd component where the manage cpntf state function fails to verify client ownership when cancelling a copy-notify stateid on the OFFLOAD CANCEL path. Because the...

PT-2026-90385

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A use-after-free issue exists in the nfsd4 copy notify function. The cpntf state was being initialized after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR an...

PT-2026-96333

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4 copy notify finished initializing the cpntf state after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR and the parent's sc cp list,...

CVE-2026-89694: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOADCANCEL path clp != NULL, managecpntfstate freed the target cpntf state without checking ownership. The lookup key st-siopaque.soid is allocated...

PT-2026-96366

In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOAD CANCEL path clp != NULL, manage cpntf state freed the target cpntf state without checking ownership. The lookup key st-si opaque.so id is allocated...

PT-2026-96345

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom battmgr: fix use-after-free qcom battmgr pdr notify queues enable work when the PMIC GLINK service comes up, and the worker recovers battmgr through container of to issue firmware requests. The PMIC GLINK clie...

async-notify (>=0.5.17, <=0.6.3), async-sender (1.4.4) +8 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.6)

aiosmtplib PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.5.17, =0.1.3, =0.2.3, =1.0.4, =2.0.11, =0.9.13.1, =0.8.4, =0.1.0a0, =0.1.6a0 Source cves: CVE-2026-55558 Source advisory:...

async-notify (>=0.8.0, <=0.8.11), navigator-api (>=2.3.10, <=2.3.17) potentially affected by CVE-2026-55558 via aiosmtplib (2.0.0)

aiosmtplib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.8.0, =2.3.10, =2.3.17 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

kernel: smb: client: fix change notify replay double-free

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability occurs due to a double-free error when handling change notify replies. If a response attempt returns a replayable error and frees its buffer, and then SMB2notifyinit fails, the same buffer can be freed agai...

PT-2026-91331

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf tables: don't queue packet path object notifications All file:line references below are against v7.2-rc4 ac5b0e5651b1. The trace was captured on 7.2.0-rc6-kasan72rc6 075b74841bd0, where the same lines apply. nft obj...

CVE-2026-9852

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

CVE-2026-9852

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

EUVD-2026-70321

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

CVE-2026-9852: Improper Neutralization of Formula Elements in a CSV File

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

CVE-2026-49832

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49833

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

CVE-2026-49832 DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

EUVD-2026-70237

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...