EUVD-2026-68011

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js permits SQL injection when attacker-controlled Buffer parameters are escaped client-side under the big5, gbk, sjis,...

CVE-2026-80622

In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclkcleanup This patch improves the module cleanup process in the tlclk driver to prevent potential use-after-free and race conditions. Currently, the fileoperations structure does not specify...

EUVD-2026-67404

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

UBUNTU-CVE-2026-40018

None None None No publicly available exploits are known...

CVE-2026-40018

None None None No publicly available exploits are known...

EUVD-2026-67041

opensslencrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irreversible-removal confirmation dialog. Attackers can craft encrypted files with malicious slot identifiers containing bi...

PT-2026-82735

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098930 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.8)

The version of AHV installed on the remote host is prior to 11.0.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.8 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

The vulnerability of the `cavium_map_pf regs()` function in the `drivers/char/hw_random/cavium-rng-vf.c` driver module, which is part of the Linux kernel’s support for alphanumeric devices. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the caviummappf regs function in the drivers/char/hwrandom/cavium-rng-vf.c driver module, which is part of the Linux kernel’s character-to-digit device support mechanism, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2026-62982

A flaw was found in Glances, an open-source system monitoring tool. The sanitizemustachedict function in glances/actions.py did not properly sanitize nested list and dictionary strings, specifically process command-line values. This allowed pipe characters to bypass the sanitization process and b...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

Astra Linux – Vulnerability in Python 3.11, Python 3.7

The fix for CVE-2026-0672, which prevented control characters from being accepted in http.cookies.Morsel, was incomplete. The Morsel.update, |= operators, and methods for unpickingling data were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js.outpu...

Astra Linux – Vulnerability in Firefox, Thunderbird

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could lead to reflected file download attacks that potentially trick users into installing malware. This vulnerability affects Firefox 112, Focu...

Astra Linux – Vulnerability in protobuf

Dereferencing a null pointer when a null char is present in a prototype symbol. The symbol is parsed incorrectly, resulting in an unchecked call into the name of the prototype file during the generation of the resulting error message. Since the symbol is incorrectly parsed, the file value is...

Astra Linux – Vulnerability in PHP 7.3

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26, and 8.0.x below 8.0.13, certain XML parsing functions, such as simplexmlloadfile, decode the filename passed to them using URL encoding. If the filename contains a URL-encoded NUL character, this may cause the function to interpret this as t...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: md: Replace snprintf with scnprintf The current code produces a warning when the total number of characters in the constituent block device names, plus the slashes, exceeds 200. snprintf returns the number of characters generated...

Astra Linux – Vulnerability in PHP 8.1

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, and 8.3. before 8.3.12, when using PHP-FPM SAPI and the option catchworkersoutput is set to yes, it is possible to manipulate the log messages by removing up to 4 characters from the log messages. Additionally, if PHP-FPM is configured to us...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102023 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

The vulnerability of the fread_pascal_string() function in the plug-ins/file-psd/psd-util.c file of the Gimp image processing library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the freadpascalstring function in the plug-ins/file-psd/psd-util.c file of the Gimp image processing library is related to errors that occur when a string or array is terminated with the null character. Exploiting this vulnerability could allow an attacker to cause service...