kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...

PT-2026-84929

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the dev validate header function. The issue occurs when the function reads dev-hard header len to zero-pad short link layer headers for users with CAP SY...

PT-2026-90881

In the Linux kernel, the following vulnerability has been resolved: af packet: Don't send zero-byte data in tpacket snd. syzbot reported a WARNING in dev queue xmit triggered via tpacket snd: skb assert len WARNING: at include/linux/skbuff.h:2753 skb assert len WARNING: at dev queue...

PT-2026-85254

Name of the Vulnerable Software and Affected Versions Xpdf versions prior to 4.07 Description A divide-by-zero error occurs when processing a Type 3 font containing a glyph with a height of zero. Recommendations Update to a version newer than 4.06...

PT-2026-84940

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where sending zero-byte packets via the TPACKET ring buffer on devices without a hard header where dev-hard header len is 0 can trigger a warning in t...

CVE-2026-80742: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: afpacket: Don't send zero-byte data in tpacketsnd. syzbot reported a WARNING in devqueuexmit triggered via tpacketsnd: skbassertlen WARNING: at include/linux/skbuff.h:2753 skbassertlen WARNING: at devqueuexmit+0x21bc/0x4970...

PT-2026-84939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the drm log draw kmsg record function when processing a message with a length of 0. Because the len variable is an unsigned integer, subtracting 1 from it...

CVE-2026-85458: Divide By Zero

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

The vulnerability of the fnnlosf_add_callback() function in the net/netfilter/nfnetlink_osf.c module of the netfilter kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fnnlosfaddcallback function in the net/netfilter/nfnetlinkosf.c module of the netfilter kernel of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bfqq_request_over_limit() function in the block/bfq-iosched.c module exposes the block-level support for the Linux operating system, allowing a hacker to cause a service failure.

The vulnerability of the bfqqrequestoverlimit function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves errors related to division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-2MW5-23GM-PCCQ OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Service Management Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59639 was introduced in 10.0.0 and later of Jira Service Management Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS...

CVE-2026-77794 RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants...

CVE-2026-77794

RegistrationMagic (WordPress plugin, versions 6.0.0.0–6.0.9.8) fails to validate a client-supplied quantity multiplier when calculating the total price of a paid registration. An unauthenticated attacker can supply a zero quantity to make the computed price zero, bypassing payment entirely and ob...

SUSE CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Confluence Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59639 was introduced in versions 9.2.8, 9.5.4, 10.0.3, 10.1.0, and 10.2.0 of Confluence Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and ...

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access SMA 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -...

Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.

SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...

tutor-lms-methodmap-poc

Tutor LMS ≤ 4.0.5 — Unauthenticated PHP Function Execution via...

Specter 2.8 NFC Reader / Skimmer Bug-Sweep

Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...