CVE-2026-21129: Improper Input Validation

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

PT-2026-110536

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions prior to 4.8.4 Description Improper privilege management occurs due to the manipulation of the roleKey argument within the checkRoleAllowed function located in the /system/role/authDataScope file. This issue allows...

PT-2026-110874

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description An issue exists that allows for privilege escalation when the db2locssh feature is enabled within the database instance. Recommendations Disable the...

CVE-2026-21123: Improper Privilege Management

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...

CVE-2026-108825: Improper Privilege Management

A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has bee...

CVE-2026-105465: Improper Privilege Management

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance...

PT-2026-111092

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics versions 2.0 through 2.1 Description Improper validation of sub-requests allows a remote attacker to bypass authentication and escalate privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-110448

Name of the Vulnerable Software and Affected Versions WSM service versions prior to SMR Oct-2026 Release 1 Description A use after free issue exists in the WSM service. This flaw allows local attackers to potentially execute arbitrary code with system privileges. Use after free is a memory...

CVE-2026-21120: Use After Free

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

RHEL 10 : flatpak (RHSA-2026:80498)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80498 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

EulerOS 2.0 SP13 : docker-engine (EulerOS-SA-2026-4041)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

Rocky Linux 8 [CIQ] Security Update: kbd / kbd-debuginfo / kbd-debugsource / kbd-legacy / kbd-misc (crlsa-2026_78951)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202678951 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

EulerOS 2.0 SP13 : NetworkManager (EulerOS-SA-2026-4026)

According to the versions of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when...

Important: webkitgtk4

Issue Overview: In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2024-43091 In initializeSwizzl...

ROS-20261012-73-0020

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-110546

Name of the Vulnerable Software and Affected Versions Yungengxin Yun Jia Security Guard versions prior to 2.7.1.10 Description A flaw exists in the sub 14000885C function within the kgameprotect.sys library. A local attacker can manipulate the Pid argument to cause improper privilege management...

PT-2026-110529

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description An incorrect authorization issue exists in the WinBox authentication flow. A remote authenticated attacker with low-privilege credentials can obtain the authorization policy of...

CVE-2026-105464: Improper Privilege Management

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-109631: Improper Neutralization of Special Elements used in an SQL Command

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-4327)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server:...