CVE-2026-12522

Zephyr RTOS's on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c uses attacker-controlled delimiter positions as strncpy() length into fixed 64/16-byte buffers, causing stack overflow in supervisor context. A rogue base station can trigger crashes or control-flow hijacking. Fix...

CVE-2026-18102 IBM i Buffer Overflow

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

CVE-2026-18102

IBM i versions 7.3 through 7.6 (feature 5770-999) contain a heap-based buffer overflow (CWE-122) caused by an integer underflow during bounds checking . A remote authenticated attacker can exploit this to overwrite adjacent memory, resulting in a partial integrity impact. NVD rates it 4.3 MEDIUM ...

EUVD-2026-62853

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...

CVE-2026-38754 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38752 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-9R55-P3JW-V652 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-FJ27-X67R-V4G5 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38755 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38753 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-5CFW-78WC-WVJQ vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-54876 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-JJ7C-H3WM-VJFW vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-JCQV-RJ94-JMX3 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38755 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-9R55-P3JW-V652 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38754 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-19508

Heap-based buffer overflow in the multipart form-data parser in jstpost.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

CVE-2026-16911

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow...

CVE-2026-16913

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...