PT-2026-43314

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Insufficient state checks create a vector that allows the bypass of two-factor authentication 2FA checks. Recommendations At the moment, there is no information...

CVE-2026-43486 arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults

In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix setaccessflags no-op check for SMMU/ATS faults contpteptepsetaccessflags compared the gathered ptepget value against the requested entry to detect no-ops. ptepget ORs AF/dirty from all sub-PTEs in the CONT...

Linux Distros Unpatched Vulnerability : CVE-2026-31676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: only handle RESPONSE during service challenge Only process RESPONSE packets while the service connection is still in RXRPCCONNSERVICECHALLENGING. Check...

ROS-20260420-73-0006

A vulnerability in the TSRESPverifyresponse function of the OpenSSL library is related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination

A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service...

Audio/Video Web codecs Mozilla Firefox Thunderbird DoS

Vulnerability of Audio/Video components: Mozilla Firefox, Firefox ESR, and Thunderbird’s email client use web codecs. This vulnerability is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Audio/Video Web codecs Mozilla Firefox Thunderbird DoS

Vulnerability of Audio/Video components: Mozilla Firefox, Firefox ESR, and Thunderbird’s email client use web codecs. This vulnerability is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of state checks in the rosetransmitlink function, potentially leading to null pointer...

[20260511] - Core - MFA Authentication Bypass

Insufficient state checks lead to a vector that allows to bypass 2FA checks...

Linux KVM SVM svm_vcpu_pre_run Buffer Overflow

The vulnerability of the svmvcpuprerun function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel trace dynevent Heap Buffer Overflow DoS

The vulnerability of the dyneventopen function in the kernel/trace/tracedynevent.c module, which supports kernel tracing in Linux operating systems, is related to the lack of state checking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Advanced DNS Security PAN-OS DoS

The vulnerability of the Advanced DNS Security ADNS security service for the PAN-OS operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted package...

CVE-2026-23191

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are...

CVE-2026-23191 ALSA: aloop: Fix racy access at PCM trigger

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback of aloop driver tries to check the PCM state and stop the stream of the tied substream in the corresponding cable. Since both check and stop operations are...

Linux kernel UDF iget function

The vulnerability of the udfiget function in the fs/udf/inode.c file of the Linux kernel file system is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

CVE-2026-23063

In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling putqueue carries risks since it cannot guarantee that resources of uaccequeue have been fully released beforehand. So adding a stopqueue operation for the...

OpenSSL PKCS7_digest_from_attributes Function DoS

The vulnerability of the PKCS7digestfromattributes function in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

OpenSSL PKCS#12 DoS

The vulnerability of the PKCS12 format form field parsing code in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260129-73-0078

Vulnerability in mongodb-org related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Linux mchp_eic_domain_alloc Heap Buffer Overflow DoS

The vulnerability of the mchpeicdomainalloc function in the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...