super v1.2.5

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...

PT-2026-76804

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTH ENABLED=true but the undocumented, defaultless INTERNAL SERVICE SECRET environment variable is unset, the is internal request check in src/memos/api/middleware/auth.py fails open:...

Important: qemu

Issue Overview: In QEMU's VNC server implementation ui/vnc.c, the setpixelformat function does not properly validate the redmax, greenmax, and bluemax fields from a client's SetPixelFormat message. These fields are received as 16-bit values but are stored internally as uint8t. A malicious VNC...

LLMs for Zero-Shot Threat Detection Via Structured Risk Indicators

We propose a two-stage large language model LLM framework for zero-shot detection of insider threats and advanced persistent threats APTs from heterogeneous security logs. The framework models user activity as chronological timelines and incorporates retrieval-augmented generation RAG to provide...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100292 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099766)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099766 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix divide-by-zero in tipcskfilterconnect A user can set conntimeout to any value via...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100331 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3arb A userspace program can trigger the RIVA NV3 arbitratio...

CUSTOS: Toward Forensic-Ready Zero Trust at the Capture-Containment Boundary

Zero Trust ZT replaces implicit trust with continuous verification, but mutual TLS, ephemeral workloads, identity-centric control, and automated remediation reduce payload visibility, weaken IP-based attribution, and shrink the window for acquiring volatile evidence. We propose CUSTOS, a...

The vulnerability in the driver/media/i2c/ccs/ccs-core.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/media/i2c/ccs/ccs-core.c component of the Linux operating system is related to the lack of zero-division checking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100374)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100374 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix divide-by-zero in tipcskfilterconnect A user can set conntimeout to any value via...

The vulnerability of the act_skbedit.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the actskbedit.c component in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099940 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100152 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for...

geoserver-0day-rce

GeoServer SQL Injection to RCE Zero-Day CVE: None yet?...

SUSE CVE-2026-74449

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculatemcachesetting on zero viewport If a plane reaches calculatemcachesetting with a zero-area viewport, calculatemcachesetting exits early with nummcaches == 0 and mvmpgwidth/height == ...

SUSE CVE-2026-74546

In the Linux kernel, the following vulnerability has been resolved: hwmon: adt7470 Fix divide-by-zero TOCTOU crash in fan speed read If the fan data becomes 0 between the FANDATAVALID check and the FANPERIODTORPM conversion, it will result in a divide-by-zero crash due to a race with a concurrent...

SUSE CVE-2026-74558

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

CVE-2026-74558

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

AZL-96294 CVE-2026-74558 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...

UBUNTU-CVE-2026-74558

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...