CVE-2026-59500: Improper Authentication

: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions: All versions without Priwall v3...

CVE-2026-59503: Exposure of Sensitive Information to an Unauthorized Actor

: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Sof...

CVE-2026-59502: Observable Discrepancy

: Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions: All versions without Priwall v3...

CVE-2026-59499: Exposure of Sensitive Information to an Unauthorized Actor

: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions.. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions.: All versions without Priwall v3...

CVE-2026-59507: Use of Hard-coded Credentials

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 Ghos...

CVE-2026-64591

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 "iommu/vt-d: Only handle IOPF for SVA when PRI is supported" modified the SVA bind...

CVE-2026-64591

The CVE-2026-64591 entry concerns the Linux kernel Intel IOMMU (vt-d) driver and the SVA binding/unbinding logic when PRI is not supported. The root cause is that a previous commit skipped IOPF enablement for SVA on non-PRI hardware during bind, but the unbind path was not similarly updated, caus...

CVE-2026-64591 iommu/vt-d: Avoid WARNING in sva unbind path

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 "iommu/vt-d: Only handle IOPF for SVA when PRI is supported" modified the SVA bind...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — Linux Kernel Futex PI Use-After-Free Bug...

CVE-2026-64513

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The TPRTHRESHOLD field in the VMCS is used by VMX to induce VM exits when the guest's virtual TPR falls under the specified threshold, allowing KVM to inject...

CVE-2026-64374

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to see if there's any RT tasks that are waiting...

CVE-2026-64513

CVE-2026-64513 affects the Linux kernel KVM x86 path, where CR8 intercept is recomputed on PPR update. Root cause: after a patch to speed up TPR below-threshold vmexits, apic_update_ppr() can omit a deliverable interrupt, causing kvm_lapic_update_cr8_intercept() and vmx_update_cr8_intercept() to ...

CVE-2026-64513 KVM: x86: Unconditionally recompute CR8 intercept on PPR update

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 intercept on PPR update The TPRTHRESHOLD field in the VMCS is used by VMX to induce VM exits when the guest's virtual TPR falls under the specified threshold, allowing KVM to inject...

EUVD-2026-48971

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fusereq on SQE commit only findable after memcpy Bad userspace might try to trick us and send commit SQEs request unique / commit-id of requests that are not even send to fuse-server iouringcmddone not called...

PT-2026-64480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fuse-uring component. A malicious user could send commit SQEs Submission Queue Entries requests with unique commit-ids for requests that have not yet...

TencentOS Server 4: kernel (TSSA-2026:0663)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0663 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Adaptive Incident Prioritization for Security Operations at Scale

Large security operations centers SOCs often face hundreds of active incidents per day, creating substantial cognitive and operational demands for analysts. Analysts must quickly decide which incidents deserve attention within long, constantly changing queues, yet incidents are commonly ordered b...

A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications

Authorization violations under valid Web sessions are difficult to identify and handle in real time from traffic because they depend strongly on business semantics and exhibit few distinctive protocol-level features. This paper proposes a non-intrusive traffic analysis framework for authorization...

kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock

A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...