CVE-2026-47688

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the clearAES and clearPMTasks methods in FOGPage can be invoked by an unauthenticated attacker via a single HTTP GET request through the public client node...

CVE-2026-47688 FOGProject has unauthenticated clearAES and clearPMTasks that allow remote destruction of host encryption keys and power schedules

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the clearAES and clearPMTasks methods in FOGPage can be invoked by an unauthenticated attacker via a single HTTP GET request through the public client node...

CVE-2026-47688 FOGProject has unauthenticated clearAES and clearPMTasks that allow remote destruction of host encryption keys and power schedules

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the clearAES and clearPMTasks methods in FOGPage can be invoked by an unauthenticated attacker via a single HTTP GET request through the public client node...

SUSE CVE-2026-64064

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsinvalidatefolio to clear dirty bit if all changes gone If a streaming write is made, this will leave the relevant modified folio in a not-uptodate, but dirty state with a netfsfolio struct hung off of folio-privat...

ANT-2026-G1XC2M5V · CGIF · other

other high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-G1XC2M5V: cgif/cgiffuzzer/20251218020844unknown/ cgif's LZW encoder computes a conservative upper bound for the...

PT-2026-66528

Name of the Vulnerable Software and Affected Versions MessagePack for Ruby versions prior to 1.8.2 Description A use-after-free issue exists in the MessagePack::Bufferclear function within ext/msgpack/buffer.c. When this function is called, it returns memory pages to a shared pool but fails to...

Oracle Linux 10 : freerdp (ELSA-2026-36203)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36203 advisory. - Backport several CVE fixes CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700 Resolves: RHEL-186978, RHEL-186967,...

blockies (0.0.2), cdt-test (>=0.1.0, <=0.1.7) +33 more potentially affected by CVE-2026-55380 via pillow (6.1.0)

pillow PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.2 - cdt-test =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.3, =0.1.2, =0.0.2, =1.1.0, =0.9.939.507, =0.9.939.518 - happy-tree-gallery 0.8.0 and...

blockies (0.0.2), cdt-test (>=0.1.0, <=0.1.7) +33 more potentially affected by CVE-2026-54060 via pillow (6.1.0)

pillow PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - blockies 0.0.2 - cdt-test =0.1.0, =1.1.0, =0.3.0, =0.1.0, =0.1.3, =0.1.2, =0.0.2, =1.1.0, =0.9.939.507, =0.9.939.518 - happy-tree-gallery 0.8.0 and...

SUSE-SU-2026:22763-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094. - CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of...

CVE-2026-64163

In the Linux kernel, the following vulnerability has been resolved: testkprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel. root@martin-riscv-1 echo 1 /sys/kernel/debug/kunit/kprobestest/run ... Totals: pass:5...

CVE-2026-64130

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: fix initialization of tags of the huge zero folio with initonfree GFPZEROTAGS semantics are currently a bit weird, but effectively this flag is only ever set alongside GFPZERO and GFPSKIPKASAN. If we run with...

CVE-2026-63866

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing the sta link in mt7996macstadeinitlink routine...

CVE-2026-63866

CVE-2026-63866 relates to a Linux kernel issue in the mt76/mt7996 Wi‑Fi stack. The vulnerability arises from the mt7996_mac_sta_deinit_link() routine where the WCID pointer is cleared, removing the STA link. The issue is addressed by kernel fixes documented in the linked patches (stable kernel up...

EUVD-2026-45492

In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in storemodes storemodes replaces a framebuffer's modelist with modes from userspace. On success it frees the old modelist with fbdestroymodelist. Two fields still point into that freed list. One pointer...

EUVD-2026-45465

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clearbit when CID is MMCIDUNSET in fixup path In mmcidfixupcpustotasks, when rq-curr has the target mm and mmcid.active is set, the CID is checked with cidintransit before setting the transition bit. In per-C...

CVE-2026-63799

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clearbit when CID is MMCIDUNSET in fixup path In mmcidfixupcpustotasks, when rq-curr has the target mm and mmcid.active is set, the CID is checked with cidintransit before setting the transition bit. In per-C...

CVE-2026-63799

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clearbit when CID is MMCIDUNSET in fixup path In mmcidfixupcpustotasks, when rq-curr has the target mm and mmcid.active is set, the CID is checked with cidintransit before setting the transition bit. In per-C...

PT-2026-61293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap ecred reconf rsp function fails to clear the chan-ident variable upon a successful ECRED reconfiguration. This diffe...

CVE-2026-63866: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing the sta link in mt7996macstadeinitlink routine...