Safety-Aware Zero Trust Enforcement for IoT and Cyber-Physical Systems

Zero Trust ZT replaces the implicit trust of perimeter-based security with explicit, continuous, context-aware authorization. This shift is particularly relevant to IoT and cyber-physical systems, whose heterogeneous, long-lived, and remotely connected components make persistent trust untenable...

ROS-20260923-73-0027

The vulnerability of the comedibufmunge function in the drivers/comedi/comedibuf.c module of the Linux kernel is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-89790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in ...

SUSE CVE-2026-92520

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Mac security researcher Patrick Wardle says it’s trivial to turn Muse into “the ultimate backdoor.” Increasingly, AI assistants are changing from tools that simply answer questions into agents that can plan tasks, use connected services, and take actions for us. These actions might include bookin...

ROS-20260922-73-0108

The vulnerability in the 389-ds-base is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

On the Construction of Trapdoor Claw-Free Functions with Certifiable Key

Trapdoor claw-free functions TCFs underpin much of classical-quantum cryptographic interaction, yet every TCF-based protocol states its guarantees relative to an honestly generated key. We give a family-agnostic abstraction of key certification for noisy TCF constructions, built on two notions: a...

Specter NFC Reader / Skimmer Bug-Sweep 3.0.1

Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...

ROS-20260922-73-0026

The vulnerability in gstreamer1-plugins-good is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0025

The vulnerability in gstreamer1-plugins-good is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2023-003110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003110 advisory. An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2023-003109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003109 advisory. An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. Tenable has extracted the...

SUSE CVE-2026-93589

ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56...

Updated nmap packages fix a security vulnerability

Denial of Service via Zero-Length TCP Option Packet. CVE-2026-72712...

SUSE CVE-2026-90086

In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDPTXMETADATA in zero-copy path The zero-copy path reads TX metadata whenever the UMEM has metadata space, even if the descriptor does not set XDPTXMETADATA. Pass descriptor options through the metadata helpers and...

SUSE CVE-2026-90272

In the Linux kernel, the following vulnerability has been resolved: perf: armpmuv3: Zero initialize hwid branch stack field PERFSAMPLEBRANCHHWINDEX is supported by BRBE so hwid is passed to userspace, but it's never set by the BRBE driver. Zero initialize it as it should be according to the docs:...

SUSE CVE-2026-92000

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory and cause denial of service...

SUSE CVE-2026-93182

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in updatetgcfsrunnable A divide-by-zero crash is observed when running hackbench: 14697.488452 CPU: 112 UID: 0 PID: 124791 Comm: hackbench Not tainted 7.1.0-rc2+ 14697.492627 RIP:...

CVE-2026-65653 temporalio/tchannel-go zero-chunk call fragment causes process termination

github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metadata but no length-prefixed argument chunks. The fragment reader left its chunk slice empty and then unconditionally selected the first element. A network peer can supply such a malformed call fragmen...