CVE-2026-68399

CVE-2026-68399: Linux kernel BPF sock_clone UAF fixed by resetting newsk->sk_bpf_storage to NULL after sock_copy() (in sk_clone) and removing redundant init in bpf_sk_storage_clone. Exploit could lead to use-after-free of parent socket’s BPF storage with potential DoS or arbitrary code executi...

EUVD-2026-55585

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b51a6155d14 "bpf,fork: wipe -bpfstorage before bailouts that access it", skclone performs an initial shallow copy of the socket field -skbpfstorage via sockcopy...

CVE-2026-68396

The CVE-2026-68396 entry concerns the Linux kernel SCSI subsystem, specifically the core’s handling of error recovery when using scsi_schedule_eh. The issue was a race where the error handler thread could fail to wake reliably because there was no enforced memory order between marking the host in...

EUVD-2026-55544

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP contains a maliciously corrupted osdmap, out-of-bounds memory accesses may occur in decodenewupstateweight. This happens because th...

CVE-2026-68158

CVE-2026-68158 (Linux kernel libceph) : A vulnerability in decoding CEPH_MSG_OSD_MAP can overflow when computing the length of the new_state portion, causing an overflowed bounds check and potentially out-of-bounds memory reads during osdmap decoding. The issue arises from a multiplication that m...

CVE-2026-65945 Apache Ranger: Logs contain replayable JWT bearer tokens

Logs contain replayable JWT tokens in Apache Ranger versions = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-65945 Apache Ranger: Logs contain replayable JWT bearer tokens

Logs contain replayable JWT tokens in Apache Ranger versions = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

Security Bulletin: IBM Storage Protect Operations Center is affected by a prototype pollution vulnerability (CVE-2026-29063).

Summary IBM Storage Protect Server OSSM and ObjectAgent components are affected by a prototype pollution vulnerability. Vulnerability Details CVEID:CVE-2026-29063 DESCRIPTION: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype...

Security Bulletin: IBM Storage Protect Operations Center is affected by multiple arbitrary code execution vulnerabilities(CVE-2026-8633).

Summary IBM Storage Protect Operations Center is affected by vulnerabilities that could allow remote, unauthenticated arbitrary code execution. Vulnerability Details CVEID:CVE-2026-8633 DESCRIPTION: IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM...

EUVD-2026-55105

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080

The CVE-2026-21080 affects Smart Switch prior to version 3.7.72.6. It stems from cleartext storage of sensitive information, allowing adjacent attackers to access data. Mitigation: upgrade to 3.7.72.6 or later (as described in the provided references).

Security Bulletin: IBM Storage Protect for Space Management is vulnerable to prototype pollution due to Immutable.js (CVE-2026-29063)

Summary IBM Storage Protect for Space Management uses Immutable.js as part of its web-based user interface components. A prototype pollution vulnerability in Immutable.js could allow an attacker to modify object prototypes through specially crafted input processed by affected APIs, potentially...

Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to prototype pollution due to Immutable.js (CVE-2026-29063)

Summary IBM Storage Protect Client and Virtual Environments use Immutable.js to support its web-based user interface components. A prototype pollution vulnerability in Immutable.js could allow an attacker to manipulate object prototypes through specially crafted input, potentially leading to...

PT-2026-69994

Name of the Vulnerable Software and Affected Versions TP-Link Aginet affected versions not specified Description TP-Link Aginet devices fail to properly validate symbolic links created on external USB storage devices. A symbolic link is a special type of file that serves as a reference to another...

PT-2026-69408

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Sensitive information is stored in cleartext, which allows adjacent attackers to access this data. Recommendations Update to version 3.7.72.6 or later...

CVE-2026-21080: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...