PT-2026-125113

Name of the Vulnerable Software and Affected Versions jose versions 1.5.0 through 1.11.12 Description The jose jwk:shared secret/2 function exposed in Elixir as JOSE.JWK.shared secret/2 is used to derive an ECDH shared secret from two JSON Web Keys JWKs. A flaw exists where the function only...

CVE-2026-116259

A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption. The attack requires a local...

UBUNTU-CVE-2026-98944

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...

UBUNTU-CVE-2026-99058

In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL currentpwq deref in chained work check currentwqworker only tells us that %current is a kworker. It does not guarantee that the worker is currently executing a work item, as worker-currentpwq is populated only...

PT-2026-125483

Name of the Vulnerable Software and Affected Versions flatcc versions prior to 0.6.5 Description An integer overflow exists in the check header function of the FlatBuffers verifier due to an overflow guard that acts as dead code. On 32-bit builds, an attacker can provide a crafted buffer offset...

PT-2026-123411

A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a manipulation results in type confusion. The attack may be initiated remotely. The exploit has been released to the publ...

PT-2026-125478

Name of the Vulnerable Software and Affected Versions libfvde versions prior to 20260923 Description A heap out-of-bounds read occurs in the libfvde encrypted metadata read type 0x001a function due to an unbounded strlen operation on embedded XML plist data. An attacker can trigger this by...

PT-2026-123277

A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afc get device info key of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption. The attack requires a loca...

PT-2026-125488

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long lines. Attackers can send a crafted uuencode or x-uuencode MIME part with a large line length byte to leak up to 15 bytes...

PT-2026-123195

A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the function clipboard.readText of the file apps/electron/src/preload.ts of the component Renderer-Process IPC Bridge. This manipulation causes cross site scripting. The attack is possible to be carried o...

PT-2026-123243

A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php:: RunMagicQuotes of the file plus/ad js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed...

kernel security update

4.18.0-553.179.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the kvms390giscregister function within the arch/s390/kvm/pci.c file of the Linux kernel kernel is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Netgate pfSense Code Execution

The vulnerability in the deletequeue function of the Netgate pfSense software firewall is related to improper handling of special elements. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-123178

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole info read metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...

VulnCheck KEV: CVE-2026-92975

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser function. This is due to the function identifying the support account solely by matching against publicly...

Reva: Real-Time Vulnerability Detection through Contextual Probing of Large Language Models

A vulnerability costs more to fix the later it is discovered. As coding agents generate code faster than developers can review it, software needs a first line of defense screening each new function in real time. LLM agents have recently become capable of finding real-world vulnerabilities by...

PT-2026-125499

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from disk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settings Page. Executing a manipulation of the argument Name can lead to cross site scripting...

UBUNTU-CVE-2026-98947

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix memory leak in vmcitransportrecvdgramcb During the closure of a datagram socket, the vmcitransportrecvdgramcb function may be called, which will add the packets to the socket's backlog; then, after the receive queue is...

CVE-2026-98944

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...