PT-2026-98951

Name of the Vulnerable Software and Affected Versions @payloadcms/storage-vercel-blob affected versions not specified Description Improper access control in the storage adapter allows authenticated users to bypass collection-level permissions. By directly accessing the 'client-upload' endpoint,...

CVE-2026-98113

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

PT-2026-99116

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The SOAP HTTP client contains a flaw in how it manages response buffer growth. The system uses a check based on signed integer overflow, which is considered...

CVE-2026-97555: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite When idmodetocifsacl rewrites an existing DACL, it allocates a buffer sized according to the on-disk DACL length reported by daclptr-size. However, replacesidsandcopyaces...

PT-2026-98495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overflow exists in the SMB client when rewriting a Discretionary Access Control List DACL. The issue occurs in the id mode to cifs acl function, which allocates a buffer based on...

PT-2026-98505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the CIFSSMBRead function processes READ RSP responses from a server without verifying that the full response was received. Specifically, the...

ManageEngine ADSelfService Plus < Build 7001 RCE (CVE-2026-74849)

According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 7001. It is, therefore, affected by a remote code execution vulnerability: - Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a...

openSUSE 16: httpcomponents-client / httpcomponents-client-cache / etc (openSUSE-SU-2026:21894-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21894-1 advisory. This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager...

PT-2026-98786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Server-side range operations in the SMB client modify file contents but fail to invalidate the FS-Cache cookie. While the affected page cache is discarded, the valid FS-Cache cookie may...

PT-2026-98496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...

PT-2026-98499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the SMB client when rewriting a Discretionary Access Control List DACL. The functions replace sids and copy aces and set chmod dacl use a u16 accumulator to...

PT-2026-98502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SMB client where tcon super cb stores a raw superblock pointer. Because cifs get super only takes an active reference after iterate supers type has dropped...

PT-2026-98494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs posix to fattr function ignores the return value of posix info parse. When an untrusted server provides a malformed POSIX directory entry...

PT-2026-98501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the system fails to honor forceuid and forcegid mount options when mapping Security Identifiers SIDs to user and group IDs. Certain code paths...

PT-2026-98789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb3 insert range function where the new file size is not validated. This allows the FALLOC FL INSERT RANGE operation to bypass RLIMIT FSIZE a process-level limit ...

PT-2026-98788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function may extend the End of File EOF without verifying the RLIMIT FSIZE limit when FALLOC FL ZERO RANGE is used without...

PT-2026-98497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client within the cifs queue oplock break function. The function takes a reference on the target file before queueing cifs oplock break, but the...

PT-2026-98498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the SMB client during a deferred close operation. When cifs close defers a close, it assigns the cifsFileInfo reference of the closing struct file to queued...

PT-2026-98787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 insert range and smb3 collapse range functions fail to properly invalidate the page cache when the offset off or old eof is not...

PT-2026-98838

Name of the Vulnerable Software and Affected Versions Seclore FileSecure Desktop Client versions prior to 3.25.1.0 Description An improper access control issue exists in the kernel-mode driver component. This allows an authenticated local user to elevate their privileges to NT AUTHORITYSYSTEM,...