EUVD-2026-49051

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...

PT-2026-64809

Name of the Vulnerable Software and Affected Versions openclaw-cn versions prior to 0.2.2 Description An issue exists in the Browser Control HTTP API component within the clickViaPlaywright function located in the src/browser/routes/agent.act.ts file. A remote attacker can perform a manipulation...

pedit-cow-exploit

CVE-2026-46331 – pedit COW Local Privilege Escalation Proof-of...

CVE-2026-63981

A flaw was found in the Linux kernel's net/sched: actmirred component. An unprivileged local user, by leveraging user namespaces to gain network administration capabilities, can create a specific network configuration that triggers an unbounded recursion. This recursion bypasses a depth limit...

CVE-2026-61141

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Affordable Care Act. Supported versions that are affected are 12.2.7-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2026-63981 net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact checks schedmirrednest against MIRREDNESTLIMIT 4 to prevent deep recursion. However, when the action uses blockcast tcfmblockid != 0, the...

CVE-2026-63981 net/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Fix blockcast recursion bypass leading to stack overflow tcfmirredact checks schedmirrednest against MIRREDNESTLIMIT 4 to prevent deep recursion. However, when the action uses blockcast tcfmblockid != 0, the...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser act route due to improper validation of the current-tab URL checks. An attacker can gain unauthorized access to actions requiring higher...

CVE-2026-62226

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

CVE-2026-62226 OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

CVE-2026-62226 OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

CVE-2026-62226

OpenClaw 2026.3.28 before 2026.5.19 contains an authorization bypass in the browser act route, due to failure to properly validate current-tab URL checks. This allows attackers with lower-trust access or configured input paths to perform actions that should be restricted by stronger authorization...

PT-2026-60636

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

CERTFR-2026-ACT-030

creationtimestamp| type| source ---|---|--- 2026-07-13 13:36:35+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mqjsqx45tu2v 2026-07-13 13:36:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116912933713310926 2026-07-13 14:00:27+00:00| seen|...

CVE-2026-14475 Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 'scanid' parameter in all versions up to, and including, 4.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

OpenClaw's browser act interactions could bypass private-network navigation checks

Summary OpenClaw's browser control SSRF checks blocked direct navigation to private or loopback URLs, but some Playwright act interactions could trigger navigation after the initial check. A later browser evaluation could then read from the page reached by that action-triggered navigation. This...

Exploit for CVE-2026-46331

CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/App...

The vulnerability of the act_runner component in the Git repository management system Gitea, which allows a hacker to increase their privileges.

The vulnerability of the act Runner component in the Git repository management system Gitea is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

RHEL 9 : kpatch-patch-5_14_0-687_10_1 (RHSA-2026:33224)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:33224 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...