CVE-2026-98232 scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsicdlenable scsicdlenable uses length fields returned by MODE SENSE to locate the ATA feature mode page in a 64-byte stack buffer. A target can report a total length shorter than its...

CVE-2026-98232

The Linux kernel contains a vulnerability in the scsi core where scsi_cdl_enable() fails to properly validate MODE SENSE length fields. A target can report a total length shorter than its mode header and block descriptors, causing an unsigned subtraction wrap that allows buf_data to point beyond ...

CVE-2025-10681

CVE-2025-10681: مفتاح حساب تخزين Azure Blob مُضمَّن بشكل ثابت إشعار الحقل| القيمة ---|--- CVE| CVE-2025-10681 ICSA| ICSA-26-055-03 CVSS 3.1| 8.6 عالية المتجه| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CWE| CWE-798 استخدام بيانات اعتماد مُضمَّنة بشكل ثابت الباحث| Michael Groberman — Gr0m تاريخ...

CVE-2026-5076

CVE-2026-5076 - ثغرة إعادة تعيين كلمة المرور في ARMember معلومات الثغرة العنصر| التفاصيل ---|--- CVE ID| CVE-2026-5076 البرنامج المساعد| ARMember – إضافة العضوية وتقييد المحتوى الإصدار المتأثر| Premium = 7.3.1 الإصدار المُصحَّح| 7.3.2 درجة CVSS| 9.8 حرجة CWE| CWE-640: استرداد كلمة مرور ضعيف النوع...

nuclei-cve-analyzer

Nuclei CVE Analyzer A fast CLI tool for analyzing CVE coverage in Nuclei templates. Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps. Built for...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher Vulnerability Details CVEID:CVE-2026-14375 DESCRIPTION: IBM Storage Scale does not validate or improperly validates TLS certificate validation when...

ROS-20261006-73-1003

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

CVE-2026-54472: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8...

PT-2026-107278

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.54.6 Description Cloud storage catalog providers do not sufficiently validate object paths. A principal with permissions to create or rename objects in a configured AWS S3 or Azure Blob Storage catalog source can...

PT-2026-107279

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package contains improper input validation within cloud storage URL readers. An attacker possessing write access to a cloud storage bucket utilized by the framework...

PT-2026-107270

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper authorization enforcement for static content. An authenticated user with access to one TechDocs documentation site can craft a URL t...

PT-2026-107271

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper input validation during static content requests. When the Azure Blob Storage provider is utilized and entity-level permissions are...

CVE-2026-61421: Use of Hard-coded Credentials

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-106764

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

PT-2026-106763

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-106765

Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-106773

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-67273: Improper Neutralization of Special Elements Used in a Template Engine

Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-70411: Missing Authentication for Critical Function

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-67269: Improper Privilege Management

Dell Container Storage Modules CSM Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privilege...