CVE-2026-13059: Reliance on Untrusted Inputs in a Security Decision

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

CVE-2026-10678

The MCTP-over-I2C+GPIO target binding in Zephyr subsys/pmci/mctp/mctpi2cgpiotarget.c processes pseudo-register writes from an I2C bus master byte-by-byte in mctpi2cgpiotargetwritereceived without validating the order or the receive buffer. In the affected versions the MCTPI2CGPIORXMSGADDR data...

EUVD-2026-44506

jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization...

EUVD-2026-41608

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

libssh: libssh: denial of service via zero advertised channel packet size

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...

CVE-2026-64825

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive during the initial onboarding window. Attackers can manipulate the 'name' field...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the extractItem process. An attacker can write arbitrary files outside the intended directory by crafting a malicious .delta file that exploits intermediate symlinks in the extraction path. This is only exploitab...

EUVD-2026-46301

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive during the initial onboarding window. Attackers can manipulate the 'name' field...

CVE-2026-47121 Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta

Sparkle is a software update framework for macOS. Prior to version 2.9.2, Autoupdate/SUBinaryDeltaApply.m enforces relativePath.pathComponents containsObject:@".." and rejects writes whose immediate parent directory IS itself a symbolic link, but does not detect symlinks deeper in the relative...

SUSE CVE-2026-64063

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will allow "streaming writes" in which dirty data is stored directly into folios without reading them first. Such folios are marked...

CVE-2026-64064

A flaw was found in the Linux kernel's netfs component. When a streaming write operation is performed, a memory page folio can remain marked as 'dirty' even after the associated data is removed by a file truncation. If this dirty page is subsequently accessed through a memory-mapped file mmap, th...

CVE-2026-63853

A flaw was found in the Linux kernel's AMD GPU Video Core Next VCN driver. This vulnerability arises because the VCN encoder and decoder rings, responsible for video processing, do not support 64-bit user fence writes. An attacker could exploit this by submitting command requests that include the...

CVE-2026-63811

A flaw was found in the Linux kernel's f2fs filesystem. During an atomic write operation, the system may attempt to decrypt data using an incorrect encryption context, specifically when the original file is unencrypted but its Copy-On-Write COW inode is encrypted. This mismatch can lead to a...

CVE-2026-53385

A flaw was found in the Linux kernel's vcscreen module. A race condition in the vcswrite function can lead to a null pointer dereference. This occurs when the vcdata pointer becomes stale during concurrent write operations, and a subsequent call attempts to use the now-invalid pointer. A local...

PT-2026-61978

Name of the Vulnerable Software and Affected Versions Home Assistant Core versions prior to 2026.6.0 Description An issue exists that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem. This occurs during the initial onboarding window when a crafted...

pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport

A path traversal vulnerability was found in pulpcore. The relativepathvalidator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relativepath containing...

CVE-2026-63852

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit Video Core Next VCN component. This vulnerability arises because the VCN encoder and decoder rings do not properly handle 64-bit user fence writes, leading to the rejection of command submissions that utilize these fences. An...

CVE-2026-63850

A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN component. The VCN encoder and decoder rings, specifically version 5.0.0, do not correctly support 64-bit user fence writes. This can lead to a denial of service, as the kernel will reject command submissions that attempt to use...

CVE-2026-63849

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit Video Core Next VCN component. This vulnerability arises because the VCN encoder and decoder rings do not properly support 64-bit user fence writes. A local attacker could potentially exploit this by submitting command stream...

CVE-2026-63842

A flaw was found in the Linux kernel's AMD GPU JPEG driver. This vulnerability arises from the driver's inability to properly handle 64-bit user fence writes to its JPEG rings. A local user could exploit this by submitting specially crafted commands, potentially leading to system instability or a...