PT-2026-81308

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Decryption using ChaCha20-Poly1305 and AES-OCB ciphers may report success without verifying the authentication tag when an empty ciphertext is processed via the...

ROS-20260825-73-0030

The vulnerability of the bcmqspiprobe function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-81479

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.11 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description OpenEXR, the reference implementation for the EXR image format, is subject to a crash when processing a specially crafted...

ROS-20260825-73-0019

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260825-73-0038

The vulnerability of the mipidspiprobe function in the drivers/video/fbdev/omap/lcdmipid.c file of the kernel graphics buffer device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260825-73-0034

The vulnerability of the rcuirqenterchecktick function in the kernel/rcu/tree.c module of the synchronization subsystem in multi-threaded Linux kernel systems is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an...

ROS-20260825-73-0009

The vulnerability of the tcpdisconnect function in the net/ipv4/tcp.c module of the Linux operating system’s IPv4 protocol implementation is related to improper release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260825-73-0017

The vulnerability of the liotargetnaclinfoshow function in the drivers/target/iscsi/iscsitargetconfigfs.c file of the Linux kernel’s TCM driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

The vulnerability of the privcmd_init() function in the drivers/xen/privcmd.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the privcmdinit function in the drivers/xen/privcmd.c module of the Linux kernel is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2026-81342

Nokogiri before 1.18.8 packages a vulnerable version of libxml2 before 2.13.8 that contains a heap-based buffer under-read CVE-2025-32415 in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. The issue can be triggered when validating against an untrusted XML Schema, or when validating...

FreeBSD-SA-26:59.mac_do

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:59.macdo Security Advisory The FreeBSD Project Topic: Unauthorized credential switching Category: core Module: macdo Announced: 2026-08-25 Credits: Hazley...

EulerOS Virtualization 2.13.1 : libtiff (EulerOS-SA-2026-3182)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenab...

EulerOS Virtualization 2.13.1 : python-idna (EulerOS-SA-2026-3189)

According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...

PT-2026-81298

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high...

PT-2026-81307

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description An issue exists in the Certificate Management Protocol CMP password-based MAC protection verification. The library uses the X509 ALGOR get0 function to read the protectionAlg algorithm...

PT-2026-81460

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.11 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description An issue exists where the TypedDeepImageChannel::row function can return an out-of-bounds pointer when processing a crafte...

PT-2026-81863

Name of the Vulnerable Software and Affected Versions Punk::Plugin::TOTP versions prior to 0.05 Description The software incorrectly validates recovery codes during the two-factor authentication challenge. The totp use recovery function searches the recovery model for a submitted code's digest...

TencentOS Server 4: postgresql (TSSA-2026:0860)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0860 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

EulerOS Virtualization 2.13.0 : libxslt (EulerOS-SA-2026-3224)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsin...

EulerOS Virtualization 2.13.0 : libtiff (EulerOS-SA-2026-3222)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenab...