The vulnerability in the `drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c` file of the Broadcom wireless adapter driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c file of the Broadcom wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

PT-2026-69349

Name of the Vulnerable Software and Affected Versions MotoPress Hotel Booking WordPress plugin versions prior to 6.2.3 Description An issue exists where the software fails to perform authorization or ownership checks on a REST endpoint used to create payment records. This allows unauthenticated...

PT-2026-69534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ptp s390 component of the Precision Time Protocol PTP implementation. The system fails to perform a necessary facility check, which should ensure that the physical...

CVE-2026-59112: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority RIA libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4:...

CVE-2026-72575: Improper Access Control

An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission check functions CanRead, CanPeek, CanCreate, CanUpdate, CanDelete, CanRefer in server/permission/permission.go return tr...

PT-2026-76475

Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that get verified user enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...

PT-2026-69969

Name of the Vulnerable Software and Affected Versions shim application affected versions not specified Description A NULL pointer vulnerability exists in the dp.c library of the shim application. This issue occurs due to a missing NULL pointer check, which could allow an attacker to cause a denia...

PT-2026-69978

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.112.0 ERPNext versions prior to 16.22.0 Description Authenticated users with limited privileges can modify protected data beyond their assigned roles because certain functions omit required write permission checks...

PT-2026-69849

Name of the Vulnerable Software and Affected Versions MISP cti-transmute affected versions not specified Description An incomplete authorization check exists in the 'conversion-history details' endpoint. When a history record references a deleted conversion, the system returns a null value during...

PT-2026-76485

Summary The OAuth token exchange endpoint accepts a raw provider access token and validates it by calling the provider's userinfo endpoint. A userinfo endpoint reports only that a token is valid, never which OAuth client it was issued to, and the endpoint performed no audience or client check of...

CVE-2026-68247: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block paneltype2 While the paneltype from LFP Data Block is range checked, paneltype2 is not. Add a few helpers for range checking, and use them to not only check paneltype2, but also improve...

PT-2026-69641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A loop within the intel dp check mst status function services interrupts from the sink without a defined limit. This can lead to a state where the system becomes stuck when interacting...

PT-2026-69518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tcp check req function within the SYN-RECEIVED request-socket path. The system accepts an in-window RST Reset packet without requiring the SEG.SEQ variable to...

PT-2026-69647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/i915/bios component where the panel type2 variable from the LFP Data Block is not range checked, unlike the panel type variable. This lack of validation can...

PT-2026-69677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Out-of-bounds reads occur in three sideband reply parsers when reading 16-bit fields. The issue arises because bounds are checked only after the read operation. Specifically, when the...

PT-2026-69560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pre-authentication out-of-bounds read exists in the ceph handle caps function. The issue occurs because the function reads the snap trace len variable from the ceph mds caps header and...

PT-2026-69344

Name of the Vulnerable Software and Affected Versions Autopay WordPress plugin versions prior to 5.0.1 Description An issue exists where the software fails to perform capability or nonce checks before saving a styling option from a public request. Additionally, the saved value is not escaped when...

CVE-2026-18786: Improper Authentication

The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible f...

Linux Distros Unpatched Vulnerability : CVE-2026-68148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies...

Linux Distros Unpatched Vulnerability : CVE-2026-68253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/hdcp: check streams bounds before overflow The data-streams overflow check is done after the buffer overflow has already happened. Move the overflow...