CVE-2026-93261

A flaw was found in the Linux kernel's lock dependency validator lockdep. When lock class registration fails, the kernel omits a check for an empty result before calculating internal index values, leading to memory corruption. A local user can exploit this vulnerability during lock reacquisition ...

CVE-2026-101054 Thinkware U3000 TCP Service wpa_supplicant.conf get_file access control

A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function getfile of the file /tmp/wpasupplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available...

CVE-2026-101054

A vulnerability exists in the Thinkware U3000 (versions up to 1.02.04 ) within the TCP Service component. The flaw is located in the get_file function of the /tmp/wpa_supplicant.conf file, where improper access controls allow for remote exploitation. This vulnerability can lead to unauthorized ac...

CVE-2026-101053

The Thinkware U3000 (up to version 1.02.04 ) contains a vulnerability in the TCP Service component. Specifically, the PUT_FILE function involving the file /tmp/wpa_supplicant.conf is susceptible to improper access controls when an attacker manipulates the argument path . This flaw can be exploite...

CVE-2026-101053 Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

EUVD-2026-88221

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101053 Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-93789

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local user capable of loading custom firmware to cause a Denial of Service DoS through a system crash. The issue stems from insufficient bounds checking when parsing aligned Type-Length-Value TLV data blocks within...

CVE-2026-101039

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101040

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

CVE-2026-101052

The refly-ai refly software, version up to 1.1.0 , contains a security vulnerability in the JWT Token Handler component. The issue originates from the file apps/api/src/modules/config/app.config.ts, where unknown processing leads to the exposure of hard-coded credentials . This vulnerability can ...

EUVD-2026-88217

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-94398

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit this vulnerability by submitting requests that trigger disproportionate memory allocation. This excessive resource consumption can lead to process termination and a Denial of Service DoS for the service. Mitigation...

EUVD-2026-88211

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101039 FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101039 FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101039

A stack-based buffer overflow vulnerability exists in the devdiscover Service of FAST FAC1900R 20190827_2.0.2 . The flaw is located in the copy_msg_element function and can be triggered remotely. An exploit is publicly available and may be used for exploitation. The vendor has not responded to th...

CVE-2026-101017

A flaw was found in OpenDMARC. A NULL pointer dereference occurs in the strcasecmp call within libopendmarc/opendmarcpolicy.c during subdomain walking when processing Domain-based Message Authentication, Reporting, and Conformance DMARC records. A remote attacker could exploit this flaw by sendin...