PT-2026-90177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during system suspend in the fuel gauge driver. The function max17040 work requeues itself after every poll, but the use of cancel delayed work only cancels pendi...

CVE-2026-89623: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: stop device IO before hidhwstop Quiesce device IO at the start of the devm cleanup callback mcp2221hidunregister so that incoming HID reports cannot race with hardware teardown during probe failure or device removal...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107303 advisory. In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structur...

PT-2026-90262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SUNRPC component where a backchannel receive can complete a request during the teardown of the NFS callback service. When xprt complete bc request removes a reques...

PT-2026-96582

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb init registers the v86d connector callback before registering the platform driver. If platform driver register fails, the function returns the error directly a...

PT-2026-90313

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fbdev uvesafb component where the uvesafb init function registers the v86d connector callback before registering the platform driver. If the platform driver regist...

PT-2026-90069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On arm64 platforms, a kernel panic can occur during a warm reboot due to an asynchronous SError. This happens because the rtw89 PCI driver lacks a .shutdown callback, allowing rfkill...

CVE-2026-81906: Authentication Bypass Using an Alternate Path or Channel

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

CVE-2026-89260: Improper Restriction of XML External Entity Reference

MoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callback handler at POST /wechat/wechatCheck. The WechatRestApi.index method passes the raw request body to SignUtil.xmlToMap, which uses an unhardened dom4j SAXReader without DTD or external-entity...

CVE-2026-89546: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: close backchannel before destroying callback service A backchannel receive can complete a request while the NFS callback service is being torn down. xprtcompletebcrequest removes the request from bcpalist, drops...

PT-2026-90215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer page swap mechanism where the swap reader page callback may return -EBUSY if the writer moves the head before the remote reader catches it, which is...

PT-2026-90408

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the nfsd component where the nfsd break one deleg function sets the NFSD4 CALLBACK RUNNING bit to serialize recall work before calling nfsd4 run cb to queue the recall. If...

PT-2026-89839

The Persian Elementor WordPress plugin from 2.7.10 before 2.8.2 does not verify that the payment authority returned to its ZarinPal payment callback belongs to the transaction being completed, allowing unauthenticated attackers to complete a pending order using a valid payment authority obtained...

CVE-2026-81906 [UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

CVE-2026-81906 [UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

CVE-2026-81906 [UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

CVE-2026-81906

Concrete CMS prior to version 9.5.3 is affected by an OAuth callback login flaw. The vulnerable component is the OAuth callback login path , which failed to verify whether an account was active or email-validated before establishing a session. As a result, a deactivated or unvalidated user with a...

CVE-2026-71647

An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFromGlobalTraj in egoreplanfsm.cpp...

CVE-2026-87870

The Ninja Forms – Scheduled Exports plugin for WordPress (all versions up to and including 3.0.3 ) is vulnerable to Stored Cross-Site Scripting via unsanitized REST API parameters (interval , format , emailTo ). The root cause is insufficient input sanitization and output escaping, compounded by ...

CLEANSTART-2026-KR69944 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the haproxy-ingress package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references...