PT-2026-125477

Name of the Vulnerable Software and Affected Versions libfvde versions prior to 20260924 Description A heap out-of-bounds read occurs in the libfvde encrypted metadata read type 0x0024 function because the xml plist data size variable is not validated against the source metadata block. An attacke...

PT-2026-125476

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103 Description A heap out-of-bounds read occurs in the vgm open function within gbs.c because the VGM command stream is processed without proper bounds checks. An attacker can cause the player to crash by...

PT-2026-125532

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile function that allows authenticated administrators to make arbitrary outbound requests by supplying crafted URLs in CSV file or image fields. Attackers can bypass the extension chec...

CVE-2026-115722

RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...

ROS-20261026-73-0002

The vulnerability of the sshpktdisconnect function in the GSSAPI component of the OpenSSH cryptographic security tool is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Netgate pfSense Code Execution

The vulnerability in the deletequeue function of the Netgate pfSense software firewall is related to improper handling of special elements. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

UBUNTU-CVE-2026-99018

In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...

PT-2026-125114

Name of the Vulnerable Software and Affected Versions jose versions 1.10.0 through 1.11.12 Description The library uses a password hash with insufficient computational effort when exporting password-encrypted private keys. Specifically, the jose jwk:to der/2 JOSE.JWK.to der/2 function utilizes th...

PT-2026-125029

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInference opset1 to 6 processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. T...

CVE-2026-116259

A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption. The attack requires a local...

PT-2026-125480

Name of the Vulnerable Software and Affected Versions Furnace versions prior to 0.6.8.4 Description An out-of-bounds write exists in the DivEngine::loadFTM function. This occurs when the software processes a FamiTracker module containing a GROOVES block with an unchecked subsong index. An attacke...

PT-2026-125110

Name of the Vulnerable Software and Affected Versions jose versions 1.2.0 through 1.11.12 Description The pure-Erlang AES-GCM fallback in jose jwa aes derives the number of verified authentication tag bits from the attacker-supplied tag. In the aes gcm, Bits clause of the block decrypt/4 function...

PT-2026-123403

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

PT-2026-125503

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextField.vue. The manipulation of the argument text results in cross site scripting. The attack can be executed remotely. The...

PT-2026-125487

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts. Attackers can send an email with a uuencoded line whose length character is 'b' but is not a 'begin' line,...

PT-2026-125483

Name of the Vulnerable Software and Affected Versions flatcc versions prior to 0.6.5 Description An integer overflow exists in the check header function of the FlatBuffers verifier due to an overflow guard that acts as dead code. On 32-bit builds, an attacker can provide a crafted buffer offset...

PT-2026-125475

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103 Description A heap out-of-bounds read occurs in the gbr open function within gbs.c because the software fails to verify the file length before scanning the GBR ROM title field. An attacker can provide a...

PT-2026-125381

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268 B20221104. This affects the function setCloudUpgradeFW of the file lib/cste modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely...

PT-2026-125462

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

kernel security, bug fix, and enhancement update

4.18.0-553.178.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...