PT-2026-85646

In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs attr3 leaf verify entry accesses lentry/rentry fields namelen, valuelen before checking if the entry pointer itself is within bounds. If nameidx is crafted to point near th...

PT-2026-85487

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public...

PT-2026-86195

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tls sw splice read after a failed async decrypt When an async decrypt fails, tls decrypt done records the error in ctx-async wait.err and calls tls err abort, which stores it in sk err. tls sw recvmsg and tls sw rea...

Linux Distros Unpatched Vulnerability : CVE-2026-80772

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses...

The vulnerability of the match_policy_in() function in the net/netfilter/xt_policy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...

PT-2026-85618

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec race The check for private futexes whether the waiter's mm, which is stored in the futex key and copied into the pi state, is the same as the owner's mm is not sufficient for exec. exec has a gap...

PT-2026-86264

ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...

PT-2026-85455

MISP contains a cross-site request forgery CSRF vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the initialiseSGQuickEdit helper, where the HTTP method validation intended to restrict these operations to POST requests w...

CVE-2026-80814: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rndishost: add overflow check in rndisrxfixup Add an overflow check to ensure that dataoffset + datalen + 8 does not wrap, which would enable an OOB read of the USB data buffer...

PT-2026-85786

In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security locked down check to pci mmap resource Currently, Alpha's pci mmap resource does not check security locked downLOCKDOWN PCI ACCESS before allowing userspace to mmap PCI BARs. The generic version has had th...

CVE-2026-85616: Authorization Bypass Through User-Controlled Key

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

CVE-2026-80900: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message size check more robust If message offset was larger than the buffer length the size check will pass incorrectly. Refactor the check such that it is more robust to invalid sizes...

PT-2026-85614

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid is usb check to usb interface can only be used on a hid device whose parent is really USB; uhid can create devices that identify as being on BUS USB, but don't actually have a USB parent. Fix the use ...

The vulnerability of the `ivpu_ms_get_info_ioctl()` function in the `drivers/accel/ivpu/ivpu_ms.c` kernel module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-80904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tls: Fail tlsswspliceread after a failed async decrypt When an async decrypt fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls...

The vulnerability of the sun4i_backend_atomic_check() function in the drivers/gpu/drm/sun4i/sun4i_backend.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the arena_alloc_pages() function in the kernel/bpf/arena.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...

PT-2026-85442

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description A heap-based buffer overflow exists in the Totem Process Group totempg message reassembly of Corosync. The issue occurs during the processing of fragmented multicast messages because the...

GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments kwargs to functions such as Repo.clonefrom, Remote.fetch, Remote.pull, or Remote.push. This...

SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents

CVE: This vulnerability corresponds to CVE-2026-72803. Summary POST /api/attr/getBlockAttrs and POST /api/attr/batchGetBlockAttrs return a block's full attribute set IAL with no publish-access check. Both are CheckAuth-only, so they are reachable by the publish RoleReader token and by the anonymo...