PT-2026-71991

The getgrav/grav-plugin-api Composer package before 1.0.13 affected = 1.0.12 fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpoint, disable2fa authorizes the admin non-self path solely via ACL reads isSuperAdmin/hasPermission and never invokes...

CVE-2026-58314

Two SSRF findings in Gitea 1.26.2...

CVE-2026-58314 Two SSRF findings in Gitea 1.26.2

Two SSRF findings in Gitea 1.26.2...

SUSE CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-16192)

Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with the restConnector-1.0 or restConnector-2.0 enabled. Vulnerability Details CVEID:CVE-2026-16192 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a...

CVE-2026-68350

A flaw was found in the Linux kernel's carl9170 Wi-Fi driver. An out-of-bounds read vulnerability exists within the carl9170txprocessstatus function. This issue is caused by an off-by-two error in a bounds check, allowing the system to read beyond the intended memory buffer when processing...

ROOT-OS-UBUNTU-2204-CVE-2024-2236 CVE-2024-2236 in libgcrypt20 - Patched by Root

Root has patched CVE-2024-2236 in the libgcrypt20 package for Root:Ubuntu:22.04. Multiple fixed versions available...

wifi: carl9170: fix OOB read from off-by-two in TX status handler

...

ROOT-OS-UBUNTU-2204-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root

Root has patched CVE-2025-68972 in the gnupg2 package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-68293

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords 128 bytes when the device advertises the mcia32dwords capability, but struct mlx5ifcmciaregbits only defines dword0..11,...

CVE-2026-68241

In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper bound to the new interrupts occurring during interrupt processing to n...

CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...

UBUNTU-CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...

CVE-2026-68129

In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop. If the number of buffers posted to hardware falls below a critical low thresho...

CVE-2026-68123

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta from the original skb length in OVSCBskb-cutlen. When a later userspace action segments a GSO skb, queuegsopackets reuses that delta...

EUVD-2026-55627

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

Malicious code in iconova-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590534a7b05eb30959d9422e2ea700fb525b66b357a62f7ba1795caba4ad799 iconova-react is a re-hosted copy of lucide-react every icon file carries a @license lucide-react header; the package name is iconova-react but its...

EUVD-2026-55618

Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authenticated user to grant any role, including their own, the complete set of application permissions via a crafted POST request to the permission save endpoint, which performs no...

CVE-2026-68398

CVE-2026-68398 is a Linux kernel UAF in PPPoL2TP: pppol2tp_recv() can dereference a freed internal PPP channel when a bound-but-unattached channel is closed, leading to potential local escalation. The fix defers freeing the channel to an RCU callback (call_rcu) to ensure a grace period for in-fli...

CVE-2026-68364 drm/amd/display: Fix ISM dc_lock deadlock during suspend

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dclock deadlock during suspend Why System hang observed during suspend/resume while video is playing. amdgpudmismdisable is called under dclock and waits for ISM delayed work via disabledelayedworksync. T...