CVE-2026-25275: Buffer Over-read

Transient DOS when processing authentication frames with invalid FILS information element header lengths...

PT-2026-95017

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description In the MidnightBSD Package Manager, directory assets handled as ASSET DIR or ASSET DIR OWNER MODE in the libmport/bundle read install pkg.c file utilize path-based mport mkdirp, ownership, and permissi...

PT-2026-94186

Name of the Vulnerable Software and Affected Versions @fastify/static versions prior to 10.1.4 Description On case-insensitive filesystems, such as Windows or default macOS volumes, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path segment. This occurs...

PT-2026-95012

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The ping function in libmport/ping.c fails to validate icmp id or icmp seq when accepting ICMP replies and uses a fixed IP-header offset instead of ip hl for parsing. A network attacker capable of...

PT-2026-95146

Name of the Vulnerable Software and Affected Versions PoDoFo versions 1.0.0 through 1.1.0 Description Processing a crafted PDF containing an Indexed color-space image can lead to a heap out-of-bounds read. This occurs because the PODOFO INVARIANT macro does not perform a runtime check, allowing a...

CVE-2026-54579: Out-of-bounds Read

mport is the MidnightBSD Package Manager. Prior to 2.7.8, ping in libmport/ping.c accepted ICMP replies without validating icmpid or icmpseq and parsed the reply using a fixed IP-header offset instead of iphl. A network attacker able to inject or spoof visible ICMP replies could influence mirror...

CVE-2026-54633: Out-of-bounds Read

PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in PdfColorSpaceFilterIndexed::FetchScanLine in src/podofo/main/PdfColorSpaceFilter.cpp. PODOFOINVARIANT does not perform a...

CVE-2026-90263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property set to true, all write operations including acl and xattr should be denied. However, acl can still be set even if btrfs r...

CVE-2026-90328: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Controller FEATURE reports encode the size of the message in the message itself. Previously we were trusting that the size reported matched the size we actually read, leading to a potential...

PT-2026-94569

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFC NCI component where the functions nci core init rsp packet v1 and nci core init rsp packet v2 parse the CORE INIT RSP packet without verifying if the socket...

PT-2026-94997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-pcache component where the system fails to validate cache segment IDs retrieved from persistent memory metadata. Specifically, the functions cache pos decode,...

CVE-2026-93201: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate segid fields from persistent memory cacheposdecode, cachekeydecode and the last-kset branches of cachereplay, the writeback worker and the GC worker take a cache segment id from the cache device metadata and...

CVE-2026-90982: Improper Handling of Case Sensitivity

@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:68644)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68644 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

PT-2026-95112

Name of the Vulnerable Software and Affected Versions libbson affected versions not specified Description An integer underflow occurs in the bson new from buffer function when processing BSON data with a zero-length prefix. The function fails to verify that the 32-bit document length read from th...

PT-2026-94167

Name of the Vulnerable Software and Affected Versions Newsletter WordPress plugin versions prior to 9.3.8 Description The plugin fails to generate its email tracking signing key with sufficient entropy and utilizes an unkeyed hash to sign tracking links. This allows an unauthenticated attacker wh...

CVE-2026-93188: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: bound device-supplied profile index konekeepvaluesuptodate and koneprofileactivated use an 8-bit, device-supplied profile value as an index into the 5-element kone-profiles array without a range check. A malicious US...

PT-2026-94473

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A request buffer leak exists in the asynchronous read path of the SMB client. The function smb2 new read req allocates a request buffer using smb2 plain req init, but fails to release th...

CVE-2026-90350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: reject out-of-range link ids in mt76viflink mt76viflink indexes mvif-link without validating linkid, but callers pass mvif-deflinkid / msta-deflinkid, which hold IEEE80211LINKUNSPECIFIED 0xf until the first link has...

The vulnerability of the VideoLAN VLC media player lies in its ability to read data beyond the permitted range of memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the VideoLAN VLC media player lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...