CVE-2026-15971 CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

SUSE CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

CVE-2026-50046

A use-after-free flaw was found in Unbound's DNS-over-TLS DoT forwarded query handling. A remote attacker can exploit a timing error during TLS handshake failures on a server under load to trigger a daemon crash, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, avoid...

CVE-2022-4994 KVM: x86: wean fast IN from emulator_pio_in

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulatorpioin Use emulatorpioin directly for fast PIO instead of bouncing through emulatorpioin now that emulatorpioin fills "val" when handling in-kernel PIO. vcpu-arch.pio.count is guaranteed to be...

CLEANSTART-2026-ZH09331 Security fixes in wait-for-port 1.0.10-r5

Package wait-for-port version 1.0.10-r5 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-QU37048 Security fixes in wait-for-port 1.0.10-r6

Package wait-for-port version 1.0.10-r6 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CVE-2026-44107 Exposed Reboot via Modbus

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

EUVD-2026-51042

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-47873

The Boots Dashboard Docker integration in Spring Tools exposes container control ports on all host interfaces (0.0.0.0) instead of restricting to loopback, affecting Spring Tools for Eclipse (version 5.2.0 and earlier). The CVE-2026-47873 entry indicates a high-severity issue with CVSS 3.1: AV Ad...

CVE-2026-64528

A flaw was found in the Linux kernel's Samsung serial driver. When console flow control is enabled, a redundant attempt to acquire a port lock occurs within the receive helper functions. This can lead to a deadlock on the same CPU, causing the system to become unresponsive...

CVE-2026-64463

A flaw was found in the Linux kernel's USB Type-C subsystem, specifically within the tcpcirt1711h driver. When a USB Type-C port is initialized, the system may fail to properly unregister the port if certain setup steps do not complete successfully. This oversight in resource management could lea...

PT-2026-66615

Name of the Vulnerable Software and Affected Versions RCU II+ affected versions not specified Multiload II+ affected versions not specified Description An unauthenticated service exposes a debug interface that grants full root-level access to the embedded system. This issue is caused by a...

PT-2026-66559

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An issue exists when the optional dumper subsystem is enabled and the DUMPER SERVER PORT variable is set. This allows for a sandbox escape, which can lead to remote code execution during...

PT-2026-66632

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The MMS BER decoder has a boundary-handling flaw when processing specific fields in confirmed-request messages. If a crafted BER-encoded element is sent over an...

CVE-2026-5491

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

CVE-2026-5492

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which...

CVE-2026-5489

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

CVE-2026-5490

DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...

CVE-2026-5487

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

CVE-2026-5492 DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which...