850 matches found
CVE-2026-44091
CVE-2026-44091 describes an unauthenticated remote attacker who can post a malicious ID to the MQTT Broker, causing the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss. The published CVSS metrics indicate a high severity: CVSS 4....
PT-2026-66419
Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The MQTT Service contains a Server-Side Request Forgery SSRF flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the...
The vulnerability of the s32ton() function in the drivers/hid/hid-core.c file of the Linux kernel’s user interface subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the s32ton function in the drivers/hid/hid-core.c file of the Linux kernel’s input device subsystem driver is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerabilities of the functions __ksmbd_close_fd() and ksmbd_reopen_durable_fd() in the fs/smb/server/vfs_cache.c module of the Smb kernel of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions ksmbdclosefd and ksmbdreopendurablefd in the fs/smb/server/vfscache.c module of the Smb file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to...
The vulnerability of the usb_stor_Bulk_transport() function in the drivers/usb/storage/transport.c module of the Linux operating system’s USB device driver allows a hacker to induce a service failure.
The vulnerability of the usbstorBulktransport function in the drivers/usb/storage/transport.c file of the Linux device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2026-49731
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
CVE-2026-14171
CVE-2026-14171 affects ads-tec Industrial IT web UI via an unauthenticated remote attacker abusing improper validation of the post-login redirect. This open redirect could mislead users to a malicious site, with potential impacts to confidentiality and availability as described. Root cause: impro...
EUVD-2026-49181
The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...
The vulnerability of the ath11k_dp_rx_process_mon_status() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the ext4_mb_use_preallocated() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4mbusepreallocated function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the mlx5_irq_alloc() function in the drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...
The vulnerability of the pl011_dma_rx_callback() function in the drivers/tty/serial/amba-pl011.c file of the console TTY driver in the Linux kernel’s serial port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pl011dmarxcallback function in the drivers/tty/serial/amba-pl011.c file of the console TTY driver in the Linux kernel’s serial port module is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an...
The vulnerability of the ets_qdisc_change() function in the net/sched/sch_ets.c module of the network/sched/sch_ets.c subsystem of the Linux operating system’s networking subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the net/sched subsystem of the Linux kernel’s network management mechanism, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise...
The vulnerability of the Docker image configuration of the Git repository management system Gitea allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Docker image configuration of the Git repository management system Gitea is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260702-73-0021
The vulnerability of the functions runlwtbpf and bpflwtxmitreroute in the net/core/lwtbpf.c module relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...
The vulnerability of the `alloc_choose_arg_map()` function in the `net/ceph/osdmap.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
CVE-2026-10521
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability...
CVE-2026-53469
A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...
