EUVD-2026-65329

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-63587

IE-SR-2TX-WL-4G devices contain a logic flaw in their SMS password authorization mechanism. When the 'Enable Password Authorization' setting is active, the device increments a retry counter on each failed password attempt. After 5 consecutive failures , SMS password authorization is automatically...

EUVD-2026-65191

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

The vulnerability of the amdgpupciSlotReset() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c source code of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allo...

The vulnerability of the attr_collapse_range() function in the fs/ntfs3/attrib.c module of the NTFS file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the attr-collapse-range function in the fs/ntfs3/attrib.c module of the NTFS file system in the Linux operating system is related to insufficient handling of exception conditions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerabilities of the functions etm_event_start() (drivers/hwtracing/coresight/coresight-etm-perf.c) and tmc_etr_get_buffer() (drivers/hwtracing/coresight/coresight-tmc-etr.c) in the Linux operating system’s hardware tracing driver software allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions etmeventstart drivers/hwtracing/coresight/coresight-etm-perf.c and tmcetrgetbuffer drivers/hwtracing/coresight/coresight-tmc-etr.c in the Linux kernel’s hardware tracing driver are related to improper compliance with the specifications of the calling side...

The vulnerability of the ufshcd_uic_cmd_compl() function in the drivers/ufs/core/ufshcd.c module exposes the security of UFS-host controllers in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ufshcduiccmdcompl function in the drivers/ufs/core/ufshcd.c module relates to the support for UFS Universal Flash Storage host controllers in the Linux operating system. This vulnerability is an unmanaged, exploitable flaw. Exploitation of this vulnerability could allow a...

CVE-2026-77680: Inefficient Algorithmic Complexity

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

hauler-2.0.3-1.1 on GA media (moderate)

hauler-2.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11574-1 Rating: moderate Cross-References: CVE-2026-41888 CVE-2026-72817 CVSS scores: CVE-2026-41888 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2026-41888 SUSE : 6.3...

The vulnerability in the kernel/trace/traceeventshist.c module, which supports Linux operating system kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the kernel/trace/traceeventshist.c module, which supports kernel tracing in Linux operating systems, is related to errors in calculating buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the functions nubus_proc_add_rsrc_mem() and nubus_proc_add_rsrc() in the drivers/nubus/proc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions nubusprocaddrsrcmem and nubusprocaddrsrc in the drivers/nubus/proc.c module of the Linux kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the iptunnel_xmit_stats() function in the include/net/ip_tunnels.h header file of the Linux kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the iptunnelxmitstats function in the include/net/iptunnels.h module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the rt_mt6_check() function in the net/ipv6/netfilter/ip6t_rt.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the rtmt6check function in the net/ipv6/netfilter/ip6trt.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the mshv_partition_create_region() function in the drivers/hv/mshv_root_main.c file of the Linux operating system’s Microsoft HyperV guest mode driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mshvpartitioncreateregion function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV kernel driver for Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-66766: Inefficient Regular Expression Complexity

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

dotnet: .NET: Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

dotnet: .NET: Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

Fedora 45 : openvkl / rkcommon (2026-ca74beef5f)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ca74beef5f advisory. Update to the latest version to fix CVE-2026-21399 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...