CVE-2026-72295

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

UBUNTU-CVE-2026-72295

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

UBUNTU-CVE-2026-72421

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled but no rule is added, fiblookup performs route lookup directly on two tables. Since the first lookup does not properly bail out, the...

CVE-2026-72421

CVE-2026-72421 : In the Linux kernel, a logic flaw in IPv4 route lookup under CONFIG_IP_MULTIPLE_TABLES can cause an error route from a merged local/main table to be overwritten by a route in the default table when no rule is added. The issue occurs in fib_lookup() where two tables are searched a...

EUVD-2026-59194

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

CVE-2026-72295 LoongArch: KVM: Validate irqchip index in irqfd routing

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip index is not validated for LoongArch. Add validation and reject out-of-range irqchip indexes to avoid indexing past the routing table's chi...

CVE-2026-72295

Technical details (affected product/version, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.

EUVD-2026-59145

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use correct direction to set up tunnel route The layer 2 encapsulation and layer 3 tunnel information in the xmit path is taken from the other tuple, because the tunnel information that is included in the...

PT-2026-72483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the LoongArch architecture, the Kernel-based Virtual Machine KVM fails to validate the irqchip index during irqfd routing. This lack of validation allows for out-of-range irqchip...

PT-2026-72434

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use correct direction to set up tunnel route The layer 2 encapsulation and layer 3 tunnel information in the xmit path is taken from the other tuple, because the tunnel information that is included in the...

PT-2026-71456

Serendipity versions = 2.3.5 and . In include/functions routing.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives strip tags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search li...

CVE-2026-18750

A Insecure Direct Object Reference (IDOR) vulnerability exists in the vinny/views.py file within the ModifyEmailNotifications view. The application fetches a VinceCommEmail object using a raw primary key (pk) provided in the URL but fails to verify if the record's contact belongs to the requestin...

CVE-2026-18750 CVE-2026-18750

vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...

[SECURITY] [DLA 4735-1] neutron security update

Debian LTS Advisory DLA-4735-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón August 12, 2026 https://wiki.debian.org/LTS Package : neutron Version : 2:21.0.0-7+deb12u1 CVE ID : CVE-2026-55707 Debian Bug : 1142937 1143170 Multiple vulnerabilities were...

PT-2026-71335

vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email function/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...

CVE-2026-18750: Authorization Bypass Through User-Controlled Key

vinny/views.py: ModifyEmailNotifications IDOR: view fetches VinceCommEmail by raw pk from URL and toggles emailfunction/name without checking the record's contact belongs to the requesting group-admin. Lets a vendor admin flip notification routing or read email/name for another vendor's contact...

Debian dla-4735 : neutron-api - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4735 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4735-1 [email protected] https://www.debian.org/lts/security/...

CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2026-62819: Use After Free

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-72761 Webhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup

The webhook URL validator in website/notifications/webhooks.py uses ip.isglobal to reject non-public addresses after DNS resolution. IPv6 transition addresses NAT64 64:ff9b::/96, 6to4 2002::/16, Teredo 2001:0000::/32 are classified as globally routable by IANA, so isglobal returns True even when...