CVE-2026-76794

MongoSQL Transition Readiness Tool (part of the MongoDB BI Connector) contains an improper HTML encoding flaw when processing database metadata. A MongoDB user with write access can inject crafted metadata that, when another user generates and opens the Transition Readiness Report, may cause scri...

SUSE CVE-2026-72067

In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks for the same hotplug state when one instance fails. The rollback path currently reuses ret, so a successful rollback can hide the...

CVE-2026-76798: Improper Neutralization of Input During Web Page Generation

The MongoSQL Transition Readiness Tool writes query text and user names read from BI Connector log files into its generated HTML report without encoding them for that output context. A user able to issue queries through the BI Connector can influence log content so that markup supplied in a query...

PT-2026-83274

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...

CVE-2026-76794: Improper Neutralization of Input During Web Page Generation

MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...

CVE-2026-76797: Improper Neutralization of Formula Elements in a CSV File

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

CVE-2026-81678

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

EUVD-2026-67034

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

CVE-2026-81678

AVideo versions prior to 24.0 contain a server-side request forgery (SSRF) vulnerability in the isSSRFSafeURL function. The flaw is that this function fails to extract embedded IPv4 addresses when they are encoded within NAT64 , 6to4 , and Teredo IPv6 transition address formats. Unauthenticated a...

CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

PT-2026-82579

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 24.0 Description An issue exists in the isSSRFSafeURL function where it fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass...

EUVD-2026-66237

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...

CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2026-58089

The hwpmc(4) driver in FreeBSD contains a vulnerability where it fails to detach Performance Monitoring Counters (PMCs) owned by unprivileged processes during an execve(2) call to a setuid or setgid image. This is caused by an inverted check in the kernel, allowing a local unprivileged user to co...

FreeBSD : FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions (9c2801aa-a0fd-11f1-ae1f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9c2801aa-a0fd-11f1-ae1f-bc241121aa0a advisory. When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs own...

CVE-2026-73422

A flaw was found in Astro. A remote attacker can exploit a reflected Cross-Site Scripting XSS vulnerability due to unescaped View Transition animation properties in the server-side CSS generator. By manipulating an animation value, such as 'duration', an attacker can inject arbitrary HTML or...

FreeBSD-SA-26:56.hwpmc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:56.hwpmc Security Advisory The FreeBSD Project Topic: hwpmc fails to detach PMCs during exec credential transitions Category: core Module: hwpmc Announced:...