CVE-2026-54890

CVE-2026-54890 describes an Integer Underflow in the BEAM VM’s ETF decoder: the BIT_BINARY_EXT (tag 77) handler accepts an encoding with length and trailing-bits both zero, causing the bitstring size calculation to underflow and produce a ~2^64 value, which is then used as a memory allocation siz...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

PT-2026-64993

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BIT BINARY...

EUVD-2026-48898

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

PT-2026-64300

Stack-based Buffer Overflow CWE-121 in /usr/bin/ltsudo cmd ipaddr conflict in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly...

CVE-2026-13072

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

CVE-2026-13066

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-sid...

Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-sid...

CVE-2026-13072

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

EUVD-2026-47789

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

CVE-2026-13077

CVE-2026-13077 involves a missing bounds check in BSON CodeWScope element accessors, enabling an authenticated attacker to trigger an out-of-bounds heap read through a crafted aggregation pipeline. By generating malformed BSONColumn data containing a CodeWScope element, wire-level BSON validation...

Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data

A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can be exploited by an authenticated user by generating a malformed BSONColumn data containing a CodeWScope element,...

CVE-2026-14551

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-14551

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-14551

CVE-2026-14551 affects the servereye client (sensorhub), version 20.15 and earlier. A local privilege escalation occurs via the SE3Recovery service (EmergencyRecoveryService.exe), which runs as SYSTEM and periodically watches %ProgramData%\ServerEye3\update\ for a trigger file named update_availa...

CVE-2026-14551 Local Privilege Escalation in servereye client (sensorhub)

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

PT-2026-63334

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

PT-2026-63486

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description During query planning when reading the sort pattern in raw BSONObj form, the system fails to explicitly handle the meta expression case. This oversight can resul...

PT-2026-63476

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description Insufficient validation of externally sourced BSON Binary JSON data during aggregation pipeline processing on a standalone mongod instance can lead to memory corruption. This may result in...