CVE-2026-27447

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon cupsd contains an authorization bypass vulnerability due to case-insensitive username comparison during authorization checks. The vulnerability allows an...

JLSEC-2026-51

Missing authorization in PostgreSQL built-in views pgstatsext and pgstatsextexprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS commands of other users. The most common values may reveal column values the eavesdropper could not otherwi...

Avahi 安全漏洞

Avahi is a set of open-source local service discovery tools for Linux. Versions of Avahi prior to 0.9-rc4 contained security vulnerabilities. These vulnerabilities allowed any unprivileged local user to cause avahi-daemon to crash by calling D-Bus methods with conflicting publication flags...

Exploit for CVE-2026-23416

CVE-2026-23416-POC POC for CVE-2026-23416 linux kernel 6.17-l...

[SECURITY] Fedora 43 Update: polkit-126-6.fc43.2

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes...

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

EUVD-2026-17510

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

CVE-2026-24154

NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information...

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

CVE-2026-34036

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. In versions 22.0.4 and prior, there is a Local File Inclusion LFI vulnerability in the core AJAX endpoint /core/ajax/selectobject.php. By manipulating the objectdesc parameter and exploiting...

[SECURITY] Fedora 44 Update: polkit-127-2.fc44.2

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes...

PT-2026-29291

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson for JetPack affected versions not specified Description An unprivileged attacker could cause a resource to initialize with an insecure default due to a flaw in the system initialization logic. A successful exploit may lead to...

PT-2026-29280

Name of the Vulnerable Software and Affected Versions Search Guard FLX versions 3.0.0 through 4.0.1 Description An issue exists in Search Guard FLX that allows users lacking appropriate permissions to perform certain management operations on data streams. Recommendations Update Search Guard FLX t...

PT-2026-29293

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux affected versions not specified Description A flaw exists in the initrd initial RAM disk, a temporary root file system used during the boot process that allows an unprivileged attacker with physical access to inject incorre...

PT-2026-30234

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.16 Description The CUPS daemon cupsd contains an authorization bypass caused by case-insensitive username comparison during authorization checks. This allows an unprivileged user to gain unauthorized...

Fedora 44 : xen (2026-f884fd0313)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f884fd0313 advisory. update to xen 4.21.1 ---- Use after free of paging structures in EPT XSA-480, CVE-2026-23554 Xenstored DoS by unprivileged domain XSA-481,...

SUSE CVE-2026-4948

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

EUVD-2026-16557

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...

AZL-85335 CVE-2026-4948 affecting package firewalld for versions less than 2.0.2-4

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication,...