CVE-2026-52748

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. An unauthenticated remote attacker can trigger a configuration backup and retrieve it, although the data is encrypted with a device-specific key. Critically, triggering this funct...

CVE-2026-52748 Missing authentication for backup functionality in Kaon AR2140X

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

EUVD-2026-88245

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed...

CVE-2026-101069 dbgate Export databaseConnections.js exportModelSql path traversal

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed...

CVE-2026-101069 dbgate Export databaseConnections.js exportModelSql path traversal

A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed...

CVE-2026-101069

A path traversal vulnerability exists in dbgate versions up to 7.3.1 . The flaw is located within the Export Handler component, specifically in the exportModelSql function of the file packages/api/src/controllers/databaseConnections.js. By manipulating the outputFile argument, an attacker can per...

CVE-2026-101068

A path traversal vulnerability exists in dbgate up to version 7.3.1 . The flaw is located in the zipJsonLinesData function within the file packages/api/src/utility/zipJsonLinesData.js of the Create Connection Endpoint component. By manipulating the filePath argument, an attacker can perform a pat...

CVE-2026-93273

A flaw was found in the Linux kernel's TPS6594 regulator driver. When configuring multi-phase regulators during device initialization, the driver fails to verify whether a device node exists before accessing it and fails to properly release acquired node references. A local attacker could exploit...

CVE-2026-98112

A flaw was found in the Linux kernel's ksmbd module. When handling network device events or connection teardown, a timing issue allows a background listener task to be freed before it is properly stopped, resulting in a use-after-free condition. A local attacker capable of triggering network...

CVE-2026-100310

A flaw was found in libextractor. When executed by privileged applications, such as those running with elevated set user ID setuid permissions, the library loads plugins from an untrusted search path defined by the LIBEXTRACTORPREFIX environment variable without verifying caller privileges. A loc...

EUVD-2026-88238

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...

CVE-2026-101067

A path traversal vulnerability exists in dbgate versions up to 6.8.1, 7.0.2, 7.1.8, and 7.2.5. The flaw resides in the saveUploadedFile function of the files.js file within the save-uploaded-file endpoint. By manipulating the filePath or fileName arguments, an attacker can perform path traversal....

CVE-2026-101067 dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...

CVE-2026-101067 dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...

CVE-2026-98109

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs during device registration when background initialization tasks execute before internal structures and locks are fully prepared. A local user can trigger this issue during device setup, causing the system to attem...

CVE-2026-93270

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When the BPF interpreter processes specific per-CPU instructions instead of using Just-In-Time JIT compilation, it fails to properly handle memory offset calculations. A local user could exploit this flaw by loading a...

vim: Vim: Arbitrary command execution via crafted vimball

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function...

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

CVE-2026-101053

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...