PT-2026-94421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init function sets q-quantum using psched mtu without an overflow check. On devices with an...

PT-2026-94420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow issue exists in the Stochastic Fairness Queueing sfq scheduler. When sfq init sets the q-quantum value using psched mtu, a device with an excessively large Maximum...

PT-2026-94158

Name of the Vulnerable Software and Affected Versions Dictionary WordPress plugin versions prior to 1.1 Description The plugin fails to escape user input before reflecting it in the responses of several directly accessible scripts. This allows unauthenticated attackers to execute Reflected...

PT-2026-94160

Name of the Vulnerable Software and Affected Versions Choose User Role at Registration WordPress plugin versions prior to 1.3.3 Description An issue exists where the plugin fails to validate the role requested during registration against the roles predefined by an administrator. This allows...

PT-2026-94299

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.3.8 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An authentication bypass allows unconfirmed users to obtain a session, bypassing mandatory email confirmation requirements...

KLA91296 Multiple vulnerability in Microsoft Other

Multiple vulnerability was found in Microsoft Other. Malicious users can exploit this vulnerability to bypass security restrictions, obtain sensitive information. Original advisories CVE-2026-55946 Exploitation Related products Microsoft-Copilot-Studio CVE list CVE-2026-55946 unknown Solution...

KLA91292 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability i...

PT-2026-94771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the RDMA/rxe component. The function rxe odp mr init user assigns a memory reference to mr-umem before calling rxe odp init pages. If rxe odp init...

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-94651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the show pte function when CONFIG DEBUG USER=y and the user debug=31 command line option is enabled. This occurs because a user fault can trigger show pt...

PT-2026-94901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the esp ssg unref function where it incorrectly releases page references on the source scatterlist after an AEAD operation. When a socket buffer skb contains managed...

RockyLinux 9 : firewalld (RLSA-2026:67585)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rlotti...

CVE-2026-92584

AVideo through 29.0 current revision e01e41ecc contains a stored cross-site scripting vulnerability. The unauthenticated view-counter endpoint objects/videoAddViewCount.json.php reaches VideoStatistic::save, which writes the caller's User-Agent via getUserAgentInfo, which returns unrecognized age...

GHSA-G3PG-FRFM-PR2M OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

Description In OpenFGA, the ListUsers API could incorrectly return a user who should have been excluded. Preconditions This applies if all of the following are present: - The authorization model contains a relation defined as an intersection and where at least one operand is an exclusion of the...

GHSA-C7C5-5J6R-Q957 djust has broken object-level access control (IDOR)

Impact djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry points: a the initial HTTP GET render, b SPA urlchange navigation, and c % liverender % embedded child views. An authenticated...

CVE-2026-92589 Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reorder

Craft CMS 5.0.0 through 5.10.12 fixed in 5.10.13 contains a broken access control flaw in the nested-elements reorder endpoint. When an authenticated control panel user with viewEntries and viewPeerEntries but without savePeerEntries opens another author's entry in read-only mode, Craft...

CVE-2026-92584

AVideo through version 29.0 (revision e01e41ecc) is affected by a stored cross-site scripting vulnerability in the unauthenticated view-counter endpoint objects/videoAddViewCount.json.php. The attacker-supplied User-Agent header is written into the videos_statistics.app column via VideoStatistic:...

CVE-2026-92584 AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header

AVideo through 29.0 current revision e01e41ecc contains a stored cross-site scripting vulnerability. The unauthenticated view-counter endpoint objects/videoAddViewCount.json.php reaches VideoStatistic::save, which writes the caller's User-Agent via getUserAgentInfo, which returns unrecognized age...

CVE-2026-92584 AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header

AVideo through 29.0 current revision e01e41ecc contains a stored cross-site scripting vulnerability. The unauthenticated view-counter endpoint objects/videoAddViewCount.json.php reaches VideoStatistic::save, which writes the caller's User-Agent via getUserAgentInfo, which returns unrecognized age...