CVE-2026-97552

A flaw was found in the Linux kernel's XFS file system. An uninitialized variable in the deferred operation handling routine can cause the kernel to return an indeterminate value when processing empty work items during online repair. A local user initiating or interacting with file system repair...

CVE-2026-101265 Intelbras TIP 125i Básico sensitive information in source

A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. A high complexity level is associated wi...

CVE-2026-101265

A vulnerability exists in Intelbras TIP 125i versions 4.3.35 and 4.3.41 involving an unknown function within the Básico Page component. This flaw allows for the inclusion of sensitive information in the source code via a remote attack. The attack is characterized by high complexity and difficult ...

CVE-2026-87482

A flaw was found in chromium-browser. The HttpsUpgrades feature fails to properly enforce encrypted connections, resulting in the cleartext transmission of sensitive data. A remote attacker could exploit this vulnerability by sending crafted network traffic to intercept and expose sensitive...

CVE-2026-87517

A flaw was found in Google Chrome on iOS. A race condition in the mobile browser component allows a remote attacker to bypass the same-origin policy by tricking a user into opening a specially crafted HTML page. Successful exploitation enables unauthorized access to sensitive cross-origin web dat...

CVE-2026-98045

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain stack retrieval helper functions can perform blocking filesystem operations, but were not properly marked as sleepable. A local user with permission to load BPF programs could exploit this flaw by invoking these...

CVE-2026-101262

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/setonlineclient. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2026-101261

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetupwifi. Executing a manipulation of the argument loginpwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. Th...

CVE-2026-101260

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-98044

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...

CVE-2026-101264 Ziroom ZHOME A0101 set_passwd command injection

A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/setpasswd. This manipulation of the argument password1 causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

CVE-2026-101264

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located in an unknown function within the /api/ZRnetwork/set_passwd file, where manipulation of the password1 argument allows for remote execution. The exploit has been publicly disclosed and may be utili...

CVE-2026-98043

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly assumes that certain pointer types are non-null without accounting for unbounded offsets that can wrap around to zero at runtime. A local user with permissions to load BPF programs can exploit thi...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

CVE-2026-98040

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. When validating conditional jump operations using register comparisons against null values, the verifier fails to properly track register precision across different execution paths. A local user capable of loading BPF...

CVE-2026-101263 Ziroom ZHOME A0101 set_online_client command injection

A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRQos/setonlineclient. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could b...

CVE-2026-101263

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw resides in the processing of the /api/ZRQos/set_online_client file, where manipulating the mac argument allows for remote command execution. While the vendor has not responded to the disclosure, the exploit ...

CVE-2026-98038

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When validating programs that manage shared reference-counted objects, the BPF verifier incorrectly treats borrowed references as always valid and fails to require null-pointer checks. A local user can exploit this...

CVE-2026-97546

A flaw was found in the Linux kernel's XFS file system. A local user could trigger this vulnerability by mounting or repairing a corrupted file system containing zero-length directory entries. When salvaging these malformed entries during directory repair operations, the kernel fails to advance a...

CVE-2026-101262

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw resides in the set_online_client functionality located at the /api/ZRQos/set_online_client endpoint. By manipulating the ip argument, a remote attacker can execute arbitrary commands. The exploit has been pu...