PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...

PT-2026-94589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IOMMU VT-d component where the intel pasid setup sm context function fails to properly tear down scalable-mode context entries during a probe failure. When pci for...

CVE-2026-93082: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Unwind P2A receiver mailbox setup failure mailboxchansetup can request an additional P2A receiver channel after successfully acquiring the primary P2A channel. If that later request fails, the function returns...

CVE-2026-90352: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure The hif2 reference obtained by mt7915pciinithif2 is only released on error paths that key off dev-hif2, which is not assigned until after the IRQ setup. If...

CVE-2026-92860: Improper Input Validation

A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. Th...

PT-2026-94536

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the null blk driver when shared tags is enabled. The null setup tagset function allocates a global tag set using null init global tag set. If device creation...

PT-2026-94246

Name of the Vulnerable Software and Affected Versions rcourtman Pulse versions 6.0.4 and 6.1.0-rc.4 Description Improper input validation occurs in the Quick Security Setup Handler component when processing the Username argument within the fmt.Sprintf function at the '/api/security/quick-setup'...

CVE-2026-92954: Uncaught Exception

vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions = 3.10.0 and = 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handle...

PT-2026-94615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SCSI subsystem when scsi alloc sgtables fails. The function sd set special bvec allocates a special payload page for UNMAP and WRITE SAME commands. If a...

PT-2026-94880

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the mailbox chan setup function fails to properly release resources. When the function requests an additional P2A...

PT-2026-94881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the mailbox chan setup function fails to properly release resources. When the function requests an additional unidirectional TX...

PT-2026-94319

Name of the Vulnerable Software and Affected Versions vm2 versions 3.9.6 through 3.11.6 Description A NodeVM builtin allowlist bypass allows a sandbox escape on Node.js 24 and newer when the embedder explicitly allows the node:test builtin. On Node.js 24+, module.builtinModules exposes the...

PT-2026-94325

Name of the Vulnerable Software and Affected Versions vm2 versions 3.10.0 through 3.11.7 Description Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary. While Promises created inside the sandbox are wrapped with a rejection-swallowing handler i...

PT-2026-93518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the saa7164 dev setup function where a device is added to the global saa7164 devlist before PCI BAR memory regions are requested. If the get resources function fails,...

PT-2026-93639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when loading and unloading a table. This occurs if userspace initiates two concurrent table load ioctls where one succeeds and the other fails. The issue arises...

The vulnerability of the Wireless Setup Section component in the microprogramming software of D-Link DSL-2740R routers allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...

CVE-2026-87151

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...

CVE-2026-87150

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...

CVE-2026-83450

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...

EUVD-2026-79806

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...