The vulnerability of the usb_stor_Bulk_transport() function in the drivers/usb/storage/transport.c module of the Linux operating system’s USB device driver module allows a hacker to induce a service failure.

The vulnerability of the usbstorBulktransport function in the drivers/usb/storage/transport.c file of the Linux device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kho_test_init() function in the lib/test_kho.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the khotestinit function in the lib/testkho.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the pegasus_probe() function in the drivers/input/tablet/pegasus_notetaker.c module of the Linux device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

The vulnerability of the dp_retrain_link_dp_test() function in the drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c driver for AMD graphics cards’ Direct Rendering Infrastructure (DRI) in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpretrainlinkdptest function in the drivers/gpu/drm/amd/display/dc/link/accessories/linkdpcts.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to state management errors. Exploiting this vulnerability...

The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator (VCO) on the On-Prem platform for managing programmatically configured VMware SD-WAN by VeloCloud allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the locally deployed version of the orchestrator VeloCloud Orchestrator VCO on the VMware SD-WAN by VeloCloud On-Prem platform is related to the failure to implement measures to neutralize certain elements. Exploiting this vulnerability could allow a malicious actor to...

CVE-2026-50738

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

EUVD-2026-49938

A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a...

GHSA-28GM-JRMW-XX93 SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet and STUN attribute bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception in...

Moderate: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

EUVD-2026-49731

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

CVE-2026-14171

CVE-2026-14171 affects ads-tec Industrial IT web UI via an unauthenticated remote attacker abusing improper validation of the post-login redirect. This open redirect could mislead users to a malicious site, with potential impacts to confidentiality and availability as described. Root cause: impro...

CVE-2026-14171

An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...

OPENSUSE-SU-2026:11403-1 traefik2-2.11.53-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.53-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11388-1 kubernetes1.33-apiserver-1.33.13-2.1 on GA media

These are all security issues fixed in the kubernetes1.33-apiserver-1.33.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11395-1 nsd-4.14.3-1.1 on GA media

These are all security issues fixed in the nsd-4.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11389-1 kubernetes1.34-apiserver-1.34.10-1.1 on GA media

These are all security issues fixed in the kubernetes1.34-apiserver-1.34.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11393-1 logcli-3.7.4-1.1 on GA media

These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:47126 Moderate: resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: urllib3: urllib3: Information disclosure via cross-origin redirects...

OPENSUSE-SU-2026:11397-1 jupyter-bqplot-jupyterlab-0.5.46-15.1 on GA media

These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.46-15.1 package on the GA media of openSUSE Tumbleweed...

Hitachi Energy APM Edge Product

SUMMARY Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended...