CVE-2026-68272: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CPGFXSHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPUCHUNKIDCPGFXSHADOW chunk in amdgpucspass1, matching the gate already present for the IB, FENCE and BOHANDLES chunk types. The...

UBUNTU-CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

UBUNTU-CVE-2026-15060

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

PT-2026-69750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the carl9170 tx process status function. The issue is caused by an off-by-two error in the bounds check, which uses the comparison i cmd-hdr.len / 2 + 1...

PT-2026-69974

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.111.0 ERPNext versions prior to 16.22.0 Description The send auto email function in erpnext/accounts/doctype/process statement of accounts/process statement of accounts.py lacks a Process Statement Of Accounts...

CVE-2026-70622: Improper Link Resolution Before File Access

tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...

PT-2026-69979

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.118.0 ERPNext versions prior to 16.29.0 Description An authenticated user with a common operational role can perform server-side template injection. This occurs because the validate template and render template...

CVE-2026-15059: Improper Limitation of a Pathname to a Restricted Directory

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

CVE-2026-19338 automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

EUVD-2026-54907

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

CVE-2026-19329

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...

CVE-2026-19329 andreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...

CVE-2026-19329

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...

EUVD-2026-54862

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...

CVE-2026-19329 andreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...

CVE-2026-19329

The CVE-2026-19329 entry concerns andreahaku codex_mcp (ask MCP Tool). Affected element is an unknown function in src/codex-process-simple.ts. The underlying issue is command injection triggered by manipulation of the argument model, with a LOCAL attack vector and LOW privilege requirements. Publ...

CVE-2026-19329 andreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...

PT-2026-69246

Name of the Vulnerable Software and Affected Versions Crypt::OpenSSL::PKCS12 versions prior to 1.98 Description A NULL pointer dereference occurs in the print attribute function when processing a zero length BMPSTRING attribute. The function uses Renewattribute, length, char to size the destinati...

PT-2026-69252

Name of the Vulnerable Software and Affected Versions andreahaku codex mcp versions up to 1ff521cc6cc57cfe56ddef946c644b8534771390 Description Command injection is possible in the ask MCP Tool component within the file src/codex-process-simple.ts. The issue occurs when the model argument is...

CVE-2026-19329: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in andreahaku codexmcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack...