MGASA-2026-0482 Updated ntfs-3g package fixes security vulnerabilities

Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...

Updated ntfs-3g package fixes security vulnerabilities

Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...

CVE-2026-84286

The exllamav3_ext CUDA extension contains an out-of-bounds (OOB) memory access vulnerability in its kernel-table dispatch process. The root cause is a lack of bounds checking where the checkpoint-derived block index (cbi ) is used to access a fixed 24-entry array. If a crafted input sets the kern...

CVE-2026-84286 OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table

ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions...

CVE-2026-84286 OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table

ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions...

CVE-2026-109334

SurrealDB versions before 3.3.0 are vulnerable to a cross-tenant access flaw because the system fails to verify caller-selected namespaces or databases against the authentication level of a namespace- or database-level system user. An authenticated attacker can exploit this by setting Surreal-NS/...

CVE-2026-109289 Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

CVE-2026-103528

Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered,...

CVE-2026-103528

The open-source e-commerce platform Thelia v2.6.0 is vulnerable to Remote Code Execution (RCE) due to improper restrictions on the Smarty template engine . An authenticated administrator can inject malicious Smarty expressions into email templates through the messages configuration interface . Wh...

EUVD-2026-97480

Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered,...

tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

Moderate: Red Hat Security Advisory: tftp security update

An update for tftp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

PT-2026-121733

Heap buffer overflow in ntfs acl owner Heap buffer overflow in ntfs same sid Denial-of-service in ntfs inode attach all extents Heap buffer overflow in ntfs check restart area Heap buffer overflow in ntfs ea check wsldev Heap buffer overflow in ntfs external attr find Heap data corruption in ntfs...

ALSA-2026:80663 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

TencentOS Server 4: qemu (TSSA-2026:1083)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1083 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

CVE-2026-77366: Authorization Bypass Through User-Controlled Key

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token JWT has no vault claim, and the folder access-control list is...

Rocky Linux 8 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_78952)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202678952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fro...