EUVD-2026-72359

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

CVE-2026-86288

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nnmodules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument gidx leads to out-of-bounds read. The attack can be...

CVE-2026-86288

ModelCloud GPTQModel versions up to 7.2.0 contain an out-of-bounds read vulnerability in the Triton dequantization kernel (gptqmodel/nn_modules/qlinear/tritonv2.py). The root cause is improper handling of the g_idx argument, which can be manipulated by an unauthenticated remote attacker (with use...

CVE-2026-86288 ModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nnmodules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument gidx leads to out-of-bounds read. The attack can be...

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...

SUSE-SU-2026:4031-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...

Security update for c-ares

This update for c-ares fixes the following issues: CVE-2024-25629: out of bounds read in aresreadline bsc1220279. CVE-2025-31498: use-after-free in readanswers when processanswer may re-enqueue a query bsc1240955. CVE-2025-62408: c-ares 1.32.3-1.34.5 use after free bsc1254738. CVE-2026-33630:...

SUSE-SU-2026:4021-1 Security update for c-ares

This update for c-ares fixes the following issues: - CVE-2024-25629: out of bounds read in aresreadline bsc1220279. - CVE-2025-31498: use-after-free in readanswers when processanswer may re-enqueue a query bsc1240955. - CVE-2025-62408: c-ares 1.32.3-1.34.5 use after free bsc1254738. -...

Security update for libidn

This update for libidn fixes the following issue: CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed f...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31613 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns...

K000163224: Linux kernel vulnerabilities CVE-2026-53401, CVE-2026-53402

Security Advisory Description CVE-2026-53401 In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfbmmap omapfbmmap has a race condition with OMAPFBSETUPPLANE ioctl that can lead to use-after-free: The fbmmap entry point holds mmlock but not...

CVE-2026-75104

A flaw was found in Hugging Face Transformers. Attackers can exploit this by supplying malicious checkpoint index files with parent-directory references or absolute paths that are not properly validated. This vulnerability allows for reading arbitrary files outside the model directory, leading to...

BIT-ELK-2026-72633 Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

Incorrect Authorization CWE-863 in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only read-level Security feature access, and no Elasticsearch privileges, could stop the recurri...

CVE-2026-86314

Integer overflow in the source-bounds check in Memory::init src/runtime/Memory.cpp in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses t...

CVE-2026-86314

Samsung Walrus (a WebAssembly runtime) is vulnerable to an integer overflow in the source-bounds check within Memory::init() (src/runtime/Memory.cpp). A crafted WebAssembly module can trigger a 32-bit unsigned addition that wraps around, bypassing the bounds check and causing an out-of-bounds hea...

EUVD-2026-72176

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

PT-2026-86937

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

PT-2026-86739

Incorrect Authorization CWE-863 in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only read-level Security feature access, and no Elasticsearch privileges, could stop the recurri...

PT-2026-86788

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

Linux Distros Unpatched Vulnerability : CVE-2026-80759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciaml: validate firmware segment lengths amldownloadfirmware reads two lengths from the firmware header and uses them to build pointers before...