30995 matches found
CVE-2026-92925: Out-of-bounds Read
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...
CVE-2026-90375: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix non-AQL packet accounting for MLO stations mt76txqueueskb overrides the wcid passed by the driver with sta-drvpriv, so the wcid might incorrectly be changed after TX, causing wcid-nonaqlpackets to be counted on th...
CVE-2026-90083: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/sched: actife: Only operate on Ethernet frames actife encapsulates/decapsulates the original Ethernet header and uses skb-dev-hardheaderlen as the length of that header. That is only correct for Ethernet devices: on a device...
PT-2026-94411
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio-net component where a user can specify an arbitrary gso size in a packet crafted with an AF PACKET PACKET VNET HDR socket. If the gso size is set to a value...
PT-2026-94438
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds DMA read exists in the TX path of the Bluetooth btmtksdio driver. The btmtksdio tx packet function rounds the transfer size up to the SDIO block size of 256 bytes while...
PT-2026-94569
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFC NCI component where the functions nci core init rsp packet v1 and nci core init rsp packet v2 parse the CORE INIT RSP packet without verifying if the socket...
CVE-2026-62949
A flaw was found in AsyncSSH, a Python package for SSHv2 protocol implementation. A malicious SSH server or an authenticated client can exploit this vulnerability by sending a specially crafted SSH packet with a zero-sized maximum packet size. This can cause the AsyncSSH event loop to freeze,...
CVE-2026-89949
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadvarpipsrc or the batadvarpipdst will have an unaligned access on HW without native unaligned read...
CVE-2026-73453
An unauthenticated P4Runtime Programming Protocol-Independent Packet Processors Runtime client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. P4Runtime is disabled by default in Arista EOS. By crafting a malicious...
CVE-2026-73468
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...
CVE-2026-73455
On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly...
Securing the unpatchable in an age of AI-driven vulnerabilities
AI is accelerating vulnerability discovery, leaving unpatchable operational technology OT systems at risk. Hoping for the best is not a viable anti-exploitation strategy. Deploying next-generation firewalls directly upstream allows for virtual patching through deep packet inspection. These system...
CVE-2026-73468
CVE-2026-73468 affects Arista EOS platforms configured with PIM Sparse Mode (both IPv4 and IPv6, in default or non-default VRFs). A specially crafted packet can cause premature expiry of multicast forwarding state , resulting in temporary loss of multicast traffic forwarding. The underlying weakn...
CVE-2026-73468 Security Advisory 0175
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...
CVE-2026-73468 Security Advisory 0175
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...
EUVD-2026-80592
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...
EUVD-2026-80588
An unauthenticated P4Runtime Programming Protocol-Independent Packet Processors Runtime client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. P4Runtime is disabled by default in Arista EOS. By crafting a malicious...
CVE-2026-73453 Security Advisory 0174
An unauthenticated P4Runtime Programming Protocol-Independent Packet Processors Runtime client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. P4Runtime is disabled by default in Arista EOS. By crafting a malicious...
CVE-2026-73455 Security Advisory 0173
On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly...