PT-2026-105848

Environment - Project: sooperset/mcp-atlassian - Affected function: validate url for ssrf - Affected path: header-based Jira/Confluence URL authentication flow - Tested endpoint: POST /mcp - Tested version: 2.14.5 Description The SSRF protection in validate url for ssrf can be bypassed with a URL...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2021_0549)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20210549 advisory. nodejs-mixin-deep: prototype pollution in function mixin-deep CVE-2019-10746 nodejs-set-value: prototype pollution in function set-value CVE-2019-10747...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2021_0551)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20210551 advisory. nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS CVE-2020-7754 nodejs-y18n: prototype pollution vulnerability...

Rocky Linux 9.6 [TuxCare] Security Update: ignition / ignition-edge / ignition-grub / ignition-validate Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789469873)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789469873 advisory. - Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

PT-2026-102762

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw exists in the nx icmpv6 validate options function where it fails to examine a one- or two-byte residue at the end of an option area. This allows subsequen...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages: kernel6.18 Issu...

EUVD-2026-87690

froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and fragment components returned by parseurl, and never inspects the userinfo user:pass@ components. This is an incomplete fix f...

PT-2026-99388

Name of the Vulnerable Software and Affected Versions froxlor versions prior to 2.3.12 Description An authenticated low-privilege customer with subdomain-create rights can inject arbitrary web-server configuration lines. The Validate::validateUrl function fails to inspect the userinfo component o...

CVE-2026-97929

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transfer from a malfunctioning device would cause the handler to process...

CVE-2026-97926

In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufsreadcylinder copies the cylinder group index and the rotor positions straight from the on-disk group and caches them without any check: ucpi-ccgx = fs32tocpusb, ucg-cgcgx...

CVE-2026-97910

In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against fixed allocations sprdplatformcompropen allocates the stage 0 IRAM buffer 32K data area and the stage 1 DDR buffer 2M data area with fixed sizes, but sprdplatformcomprcopy derive...

CVE-2026-97538

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusrogryujin Validate HID report lengths rogryujinrawevent parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driver consu...

PT-2026-99138

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 2.0.0 Description An issue exists where the endpoint '/attendance/approve-validate-attendance-request/' modifies attendance validated, is validate request approved, approved by, and pending-request states via an HTTP...

PT-2026-98515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Stateless AV1 decoders fail to properly bound the tile cols and tile rows fields within std validate compound. These fields are used as loop bounds, as indices for the mi starts and in s...

Exploit for CVE-2026-12227

CVE-2026-12227 - Visual Composer Unauthenticated LFI via vcv-t...

AZL-103748 CVE-2026-97453 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate bytecount in acpipsgetnextpackagelength Validate package length reading in acpipsgetnextpackagelength...

DEBIAN-CVE-2026-97453

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate bytecount in acpipsgetnextpackagelength Validate package length reading in acpipsgetnextpackagelength...

UBUNTU-CVE-2026-97453

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate bytecount in acpipsgetnextpackagelength Validate package length reading in acpipsgetnextpackagelength...

CVE-2026-97453 ACPICA: validate byte_count in acpi_ps_get_next_package_length()

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate bytecount in acpipsgetnextpackagelength Validate package length reading in acpipsgetnextpackagelength...

EUVD-2026-85728

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...