CVE-2026-21359 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have limited...

EUVD-2025-208552

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

CVE-2026-21282: Improper Input Validation

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...

PT-2026-24565

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have limited...

CVE-2026-21359: Incorrect Authorization

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have limited...

PT-2026-29653

Уязвимость функции gem get ethtool stats модуля drivers/net/ethernet/cadence/macb main.c ядра Linux связана с записью за пределы валидной области памяти. Эксплуатация уязвимости может позволить нарушителю оказать влияние на целостность, конфиденциальность и доступность защищаемой информации...

Adobe Commerce security vulnerabilities

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that could be exploited by an attacker to bypass security measures and have a limited impact on...

Linux kernel neigh_flush_dev Heap Buffer Overflow DoS

The vulnerability of the neighflushdev function in the net/core/neighbour.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Mellanox Ethernet Network Adapter Buffer Overflow

The vulnerability of the mlx5eipsecoffloadhandlerxskb function in the drivers/net/ethernet/mellanox/mlx5/core/enaccel/ipsecrxtx.c driver of the Mellanox Ethernet network adapter for the Linux operating system is related to the issue of operations going beyond the buffer boundaries in memory...

Linux qdisc_dequeue_internal Heap Buffer Overflow DoS

The vulnerability of the qdiscdequeueinternal function in the include/net/schgeneric.h module of the Linux kernel is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

Linux kernel __do_sys_open_tree_attr Heap Buffer Overflow DoS

The vulnerability of the dosysopentreeattr function in the fs/namespace.c file of the Linux kernel file system is related to initialization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath12kmachandlebeaconmissiter function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

ghostty-1.3.0-1.1 on GA media (moderate)

ghostty-1.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10316-1 Rating: moderate Cross-References: CVE-2026-26982 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the ghostty-1.3.0-1.1...

helm3-3.20.0-2.1 on GA media (moderate)

helm3-3.20.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10319-1 Rating: moderate Cross-References: CVE-2025-55199 CVSS scores: CVE-2025-55199 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-55199 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

CVE-2025-20096

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

CVE-2025-20096

CVE-2025-20096 involves improper input validation in the UEFI firmware for some Intel Reference Platforms, allowing escalation of privilege. The Red Hat, NVD, Intel advisory and EUVD records describe local access, high attack requirements, and user interaction as prerequisites, with potential imp...

EUVD-2026-10572

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

EUVD-2026-10571

CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...

EUVD-2026-10459

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

EUVD-2026-10465

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...