GHSA-55Q8-2GWX-29PC Ella Core Panics during NAS Authentication Response/Failure with missing IEs

Summary Ella Core panics when processing Authentication Response and Authentication Failure NAS message missing IEs. Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Fi...

Ella Core Panics during NAS Authentication Response/Failure with missing IEs

Summary Ella Core panics when processing Authentication Response and Authentication Failure NAS message missing IEs. Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required. Fi...

GHSA-F2F3-9CX3-WCMF Ella Core panics when processing a crafted NGAP LocationReport message

Summary Ella Core panics when processing a specially crafted NGAP LocationReport message. Impact An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Fix Add guards in NGAP Location Report handler...

EUVD-2026-16246

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

CVE-2026-3116 Improper Input Validation in Zoom Plugin Webhook Handler

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

CVE-2026-3116 Improper Input Validation in Zoom Plugin Webhook Handler

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

CVE-2026-3116

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

The vulnerability of the kvm_arch_vcpu_ioctl() function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kvmarchvcpuioctl function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the `rb_check_bpage()` function in the kernel/trace/ring_buffer.c module, which supports Linux operating system debugging, allows a malicious actor to cause a service failure.

The vulnerability of the rbcheckbpage function in the kernel/trace/ringbuffer.c module, which is part of the Linux kernel’s tracing support, is related to improper validation of the integrity check value. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the nested_svm_vmexit() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel allows a attacker to cause a service failure.

The vulnerability of the nestedsvmvmexit function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux x86 kernel platform is related to the improper elimination of certain elements in the data sent to the client. Exploiting this vulnerability can allow an attacker...

The vulnerability of the ptp_clock_register() function in the drivers/ptp/ptp_clock.c module of the Linux operating system’s PTP clock support driver allows a hacker to cause a service failure.

The vulnerability of the ptpclockregister function in the drivers/ptp/ptpclock.c module of the Linux operating system’s time support driver lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the nvme_init_ctrl() function in the drivers/nvme/host/core.c module of the NVME driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmeinitctrl function in the drivers/nvme/host/core.c file of the NVME driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tegra210_clock_init() function in the drivers/clk/tegra/clk-tegra210.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the tegra210clockinit function in the drivers/clk/tegra/clk-tegra210.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the rproc_coredump_write() function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the rproccoredumpwrite function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem is related to a numerical order loss or cyclic shift. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

The vulnerability of the `gen11_compute_sseu_info()` function in the `drivers/gpu/drm/i915/gt/intel_sseu.c` kernel module of the Linux operating system allows a hacker to access protected information or cause service failures.

The vulnerability of the gen11computesseuinfo function in the drivers/gpu/drm/i915/gt/intelsseu.c kernel module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

PT-2026-28562

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0 Description Ella Core, a 5G core designed for private networks, experiences a panic when processing a specifically crafted NGAP LocationReport message. An attacker capable of sending crafted NGAP messages to...

Mattermost Plugins 安全漏洞

Mattermost Plugins is a plugin provided by the American company Mattermost, offering powerful feature extensions and tight integration with servers and web/dashboard applications. There are security vulnerabilities in versions prior to 11.4, 11.0.4, 11.1.3, 11.3.2, and 10.11.11.0. These...

PT-2026-28565

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0 Description Ella Core, a 5G core designed for private networks, experiences a panic when processing Authentication Response and Authentication Failure NAS messages lacking Information Elements IEs. An attacker...

The vulnerability of the smc_init() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcinit function in the net/smc/afsmc.c module of the Linux kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...