CVE-2026-36176

The GNCC GP5 (a 2K indoor security camera) in version v7.1.76 is vulnerable to the leakage of sensitive information. The device stores pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext on the serial console. This allows an attacker with physical proximity to monitor the serial UART ...

CVE-2026-49189: Improper Privilege Management

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations...

Acer M6E security vulnerabilities

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from public access rights that are not checked by the core Broadcast Receiver. This vulnerability may allow unauthorized local software component...

CVE-2026-36176: Cleartext Storage of Sensitive Information

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs PUT requests in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface...

CVE-2026-22055

Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations...

CVE-2026-22055

CVE-2026-22055 affects NetApp Active IQ OneCollect 2.7.3. The vulnerability is due to hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. Public references in NVD/CNA data indicate high impact (CVE-3.1: Confidential...

CVE-2026-22054

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations...

CVE-2026-22054

CVE-2026-22054 affects NetApp Active IQ Config Advisor, version 6.7.3. The root cause is hard-coded credentials, which could let an authenticated attacker with low privileges perform unauthorized AutoSupport operations. Documents do not provide exploitation details or specific attacker actions be...

CVE-2026-46251

A flaw was found in the Linux kernel's Btrfs filesystem. When the EXTENTTREEV2 incompatibility flag is enabled, the block group tree's dirty list can become corrupted. This corruption occurs because the block group tree is incorrectly added to a commit list while already being tracked, leading to...

CVE-2026-25259

Memory corruption while processing multiple IOCTL command for escape operations...

CVE-2026-25258

Memory corruption while processing IOCTL calls for escape operations...

samba: Missing access check on reparse point operations

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-onl...

CVE-2026-22055: Use of Hard-coded Password

Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations...

CVE-2026-22054: Use of Hard-coded Password

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations...

Linux Distros Unpatched Vulnerability : CVE-2026-46154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schedext: Read scxroot under scxcgroupopsrwsem in cgroup setters...

PT-2026-52249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memcg reparent list lrus function where the xarray entry of a dying memory control group memcg is cleared using xas store&xas, NULL before its per-node lists are...

EUVD-2026-33823

Memory corruption while processing IOCTL calls for escape operations...

EUVD-2026-33824

Memory corruption while processing multiple IOCTL command for escape operations...

IBM WebSphere Application Server identity spoofing vulnerability

IBM WebSphere Application Server is a Java enterprise application server developed by IBM. It is primarily used for deploying and managing enterprise-level web applications. IBM WebSphere Application Server has a vulnerability known as “Identity Spoofing.” This vulnerability arises from the failu...

CVE-2026-10701: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3...