CVE-2026-90177 bpf: Check pointer type for all atomic RMW paths

In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTRTOARENA. A second path can therefore reach the same instruction with an ordinary...

EUVD-2026-81769

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...

CVE-2026-90176

This vulnerability affects the Linux kernel's ksmbd (in-kernel SMB/CIFS server) component. The function check_lock_range() uses inclusive ranges , so start == end represents a valid single-byte range. However, a shortcut incorrectly treats this case as an empty range, skipping mandatory byte-rang...

EUVD-2026-81753

In the Linux kernel, the following vulnerability has been resolved: lwtbpf: Restore reserved headroom after xmit program ipfinishoutput2 expands an skb to LLRESERVEDSPACEdev before LWT xmit. An LWTXMIT BPF program can then modify the skb head and still return BPFOK, so bpfxmit rechecks the...

CVE-2026-90146 bpf, xdp: move offload check into dev_xdp_install()

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. A user can make an XDP link with a normal program and then swap in an...

EUVD-2026-81739

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. A user can make an XDP link with a normal program and then swap in an...

CVE-2026-90146

CVE-2026-90146 is a Linux kernel vulnerability in the BPF/XDP subsystem. The root cause is that bpf_xdp_link_update() calls dev_xdp_install() directly, bypassing the validation checks in dev_xdp_attach(). This allows a local user with low privileges to create an XDP link with a normal program and...

CVE-2026-90146 bpf, xdp: move offload check into dev_xdp_install()

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. A user can make an XDP link with a normal program and then swap in an...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 unti...

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin (versions before 5.1.1 ) contains a vulnerability where the message deletion AJAX action fails to verify user capabilities. Instead of validating the nonce parameter, the plugin only checks for its presence. ...

CVE-2026-91010 Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

CVE-2026-91010 Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

CVE-2026-86446

The LearnPress WordPress plugin (versions 4.4.3-4.4.6 ) is vulnerable to an unauthenticated quiz answer disclosure via the check-answer REST endpoint . The software fails to restrict the correctness flags returned when a quiz answer is checked. This allows unauthenticated attackers to obtain the ...

CVE-2026-86446 LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...

CVE-2026-86446 LearnPress 4.4.3 - 4.4.6 - Unauthenticated Quiz Answer Disclosure via check-answer REST Endpoint

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...

PT-2026-94940

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the check ptr to btf access function allows btf struct access callbacks to validate write operations before the default...

PT-2026-94501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the smb check perm dacl function incorrectly bounds its Access Control Entry ACE walks by the remaining NT security descriptor NTSD length acl...

EulerOS 2.0 SP15 : samba (EulerOS-SA-2026-3797)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto- enrollment is enabled, Samba may retrieve a C...

PT-2026-94180

Name of the Vulnerable Software and Affected Versions Master Addons for Elementor versions prior to 3.1.9 Description The plugin fails to perform an authorization check on the AJAX action used to deactivate Popup Builder popups. It relies solely on a nonce a number used once to prevent replay...

PT-2026-94299

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.3.8 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An authentication bypass allows unconfirmed users to obtain a session, bypassing mandatory email confirmation requirements...