PT-2026-125260

This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network...

CVE-2026-116207

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...

EUVD-2026-109465

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...

CVE-2026-80862

A flaw was found in the Linux kernel's nvme-tcp component. When block devices are created in parallel threads, the pagefragcache is used in a manner that is not thread-safe. This can lead to incorrect reference counting of memory pages and premature freeing, potentially causing a system crash...

Crowcpp Crow resource management error vulnerability

Versions of Crowcpp prior to 1.3.4 contain a resource management error vulnerability. This vulnerability stems from uncontrolled recursion in crow::json::load. Remote unauthenticated attackers can exploit it by sending deeply nested JSON, thereby exhausting the work thread stack and causing the...

CVE-2026-19741

Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default "J01NME" in modules/openthread/Kconfig.thread previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread. J01NME is the example Joining Device Credential used throughout the public...

CVE-2026-19741

Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default "J01NME" in modules/openthread/Kconfig.thread previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread. J01NME is the example Joining Device Credential used throughout the public...

CVE-2026-19741 OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)

Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default "J01NME" in modules/openthread/Kconfig.thread previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread. J01NME is the example Joining Device Credential used throughout the public...

CVE-2026-19741 OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)

Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default "J01NME" in modules/openthread/Kconfig.thread previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread. J01NME is the example Joining Device Credential used throughout the public...

EUVD-2026-109139

Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default "J01NME" in modules/openthread/Kconfig.thread previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread. J01NME is the example Joining Device Credential used throughout the public...

CVE-2026-99075

In the Linux kernel, the following vulnerability has been resolved: rustbinder: reschedule node refcount update on thread exit When a thread exits via BINDERTHREADEXIT, its pending work items are cancelled. If a thread exits while holding a pending node refcount increment e.g. pushed as deferred...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. It arises from a trust corruption entry size caused by an overflow in the CPER ring, resulting in no progress on read pointers. During recovery loops while holding the CPER ring mutex, the same location is checked...

HUSTOJ 26.08.19 Thread Moderation Authorization Bypass

HUSTOJ versions 24.09.10 through 26.08.19 contain a missing authorization check in the threadadmin.php forum moderation endpoint. A proof of concept demonstrates that any authenticated user can delete, lock, or pin arbitrary forum threads. https://packetstorm.news/download/237292...

PT-2026-122052

In the Linux kernel, the following vulnerability has been resolved: rust binder: reschedule node refcount update on thread exit When a thread exits via BINDER THREAD EXIT, its pending work items are cancelled. If a thread exits while holding a pending node refcount increment e.g. pushed as deferr...

CVE-2026-114651 Cross-document data leak via malformed BSON array parsing in reused thread buffer

A memory-handling weakness in the BSON deserialization component of the MongoDB C Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps...

Cross-document data leak via malformed BSON array parsing in reused thread buffer

A memory-handling weakness in the BSON deserialization component of the MongoDB C Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps...

CVE-2026-114651 Cross-document data leak via malformed BSON array parsing in reused thread buffer

A memory-handling weakness in the BSON deserialization component of the MongoDB C Driver may cause data left over from previously processed content to be returned when specially crafted serialized input is parsed. An unauthenticated party able to supply serialized data to an application that maps...

CVE-2026-114651

A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver allows for potential data leakage. By providing specially crafted serialized input, an unauthenticated party can cause the application to return residual bytes from unrelated data processed earlier on the sa...

SUSE CVE-2026-110354

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...

AZL-111017 CVE-2026-110354 affecting package haproxy for versions less than 2.9.11-9

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...