PT-2026-98552

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.3-rc1 Description An issue exists in the MPLS push/pop path where skb mpls pop fails to clear the inner protocol record. This allows a stale network header offset to persist. When Open vSwitch re-pushes MPLS onto a packe...

PT-2026-98556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched component where a batched RTM NEWACTION request can lead to memory and resource leaks. When replacing an existing action, the tcf idr check alloc functio...

CVE-2026-43642

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43642 Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43642 Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

EUVD-2026-84622

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

On the Security and Privacy of LLMs in Mobility

The mobility sector is undergoing a paradigm shift driven by advances in Generative Artificial Intelligence. With a global market valued at approximately 2.9 trillion dollars annually, considering only cars, the integration of these technologies has the potential to impact more than 1.5 billion...

CERTFR-2026-ACT-040

creationtimestamp| type| source ---|---|--- 2026-09-21 14:17:52+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mvzvp7hn2r2x 2026-09-21 14:18:02+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117309457770446816 2026-09-22 06:00:50+00:00| seen|...

PT-2026-94431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the act ife component of the network scheduler where the system incorrectly uses skb-dev-hard header len to determine the length of the Ethernet header during...

PT-2026-94426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Issues exist in the tcf skbmod act function regarding length calculations and header handling. The function incorrectly assumes the transport header is set when calling skb network heade...

AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of

Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added a NULL check for the lookupatid function. The lookupatid function may return NULL if the ATID is invalid or does not exist in the identifier table. This could lead to dereferencing a null pointer without any...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Do not override retval if we have already lost the skb. If we are redirecting the skb, and have not yet called tcfmirredforward, we need to inform the kernel to discard the skb by setting the retcode to SHOT...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow actct to bind to clsact/ingress qdiscs and shared blocks. As Paolo mentioned earlier 1: “Since the problematic commit below, classify can return TCACTCONSUMED while holding the current skb that is managed by...

cra-watch

cra-watch Does anything you ship have a known-exploited vul...

CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...

CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...

CVE-2026-79698

A command injection vulnerability in the Node-RED Library component (function nodered_lib_apply) affects multiple Advantech WISE-6610 series industrial computers running firmware 1.2.1_20251110 . Manipulation of the act argument allows a remote attacker with low privileges to inject commands. The...

PT-2026-86634

A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This affects the function...

PT-2026-86635

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1 20251110. This vulnerability affects the...