UBUNTU-CVE-2026-114615

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.importkey checks asymmetric-key markers only at byte zero while Authlib's PEM loaders accept leading whitespace, comments, or a byte-order mark. In deployments that use the documented mixed...

UBUNTU-CVE-2026-98939

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page pool. The immediate cause is an x86 commit that added an mmapreadlock to...

PT-2026-125385

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress message data in compress brotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a comple...

CVE-2026-116124

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...

UBUNTU-CVE-2026-49442

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on...

PT-2026-125108

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in PJSIP TCP/SDP handling by sending a SIP INVITE over a...

PT-2026-125111

Name of the Vulnerable Software and Affected Versions jose versions 1.3.0 through 1.11.12 Description The jose jwa pkcs1 module contains a Bleichenbacher padding oracle in its pure-Erlang RSAES-PKCS1-v1 5 decryption. The function eme pkcs1 decode/2 returns the recovered message for valid PKCS1 v1...

PT-2026-125114

Name of the Vulnerable Software and Affected Versions jose versions 1.10.0 through 1.11.12 Description The library uses a password hash with insufficient computational effort when exporting password-encrypted private keys. Specifically, the jose jwk:to der/2 JOSE.JWK.to der/2 function utilizes th...

Google Chrome Microsoft Edge DoS

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

PT-2026-125112

Name of the Vulnerable Software and Affected Versions potatosalad jose versions 1.0.0 through 1.11.12 Description An improper handling of highly compressed data, known as data amplification, allows a remote attacker to exhaust a node's memory using a small crafted JWE token. The jose jwe...

PT-2026-125116

Name of the Vulnerable Software and Affected Versions erlang-jose versions 1.7.7 through 1.11.12 Description Inefficient algorithmic complexity allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted RSA JSON Web Key JWK. When an application...

PT-2026-125110

Name of the Vulnerable Software and Affected Versions jose versions 1.2.0 through 1.11.12 Description The pure-Erlang AES-GCM fallback in jose jwa aes derives the number of verified authentication tag bits from the attacker-supplied tag. In the aes gcm, Bits clause of the block decrypt/4 function...

PT-2026-125113

Name of the Vulnerable Software and Affected Versions jose versions 1.5.0 through 1.11.12 Description The jose jwk:shared secret/2 function exposed in Elixir as JOSE.JWK.shared secret/2 is used to derive an ECDH shared secret from two JSON Web Keys JWKs. A flaw exists where the function only...

PT-2026-125109

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the LDAP realtime driver res config ldap may permit LDAP filter injection through a SIP username, allowing an unauthenticat...

FedCM Component Access Protected Information

The vulnerability in the FedCM web browser components for Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-92211

The Pixar Animation Studio OpenUSD library is vulnerable to Remote Code Execution (RCE) due to a double free condition during the parsing of USDC and USDZ files. The root cause is a failure to validate the existence of an object before performing subsequent free operations. An attacker can levera...

CVE-2026-98941

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-104594

The software libosmocore (through version 1.14.1 ) is vulnerable to out-of-bounds reads within the IPA CCM identity-tag parsers located in src/gsm/ipa.c. A remote attacker could exploit this flaw to obtain sensitive information . Remediation is indicated through multiple commits, including those ...

PT-2026-125483

Name of the Vulnerable Software and Affected Versions flatcc versions prior to 0.6.5 Description An integer overflow exists in the check header function of the FlatBuffers verifier due to an overflow guard that acts as dead code. On 32-bit builds, an attacker can provide a crafted buffer offset...

UBUNTU-CVE-2026-99080

In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clearinode For many years we've had a hard to hit leak of xarray nodes. Hugh documented it well in commit 786b31121a2c. Recently people and syzbot have found ways to force it to happen with...