The vulnerability of the readreply() function in the drivers/infiniband/sw/rxe/rxe_resp.c file of the InfiniBand driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the readreply function in the drivers/infiniband/sw/rxe/rxeresp.c file of the InfiniBand driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

CVE-2026-20115

A vulnerability in Cisco IOS XE Software for Cisco Meraki could allow a remote, unauthenticated attacker to view confidential device information. This vulnerability is due to a device configuration upload being performed over an insecure tunnel. An attacker could exploit this vulnerability by...

PT-2026-27798

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Cisco Meraki affected versions not specified Description A flaw exists in Cisco IOS XE Software for Cisco Meraki that may allow a remote, unauthenticated attacker to view sensitive device information. The issue stems...

The vulnerability of the goldfish_tty_remove() function in the drivers/tty/goldfish.c module of the console TTY support driver for the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the goldfishttyremove function in the drivers/tty/goldfish.c module of the console TTY support driver for the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux Distros Unpatched Vulnerability : CVE-2026-1182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowe...

The vulnerabilities of the functions hci_link_keys_clear(), hci_smp_ltks_clear(), hci_smp_irks_clear(), and hci_blocked_keys_clear() in the net/bluetooth/hci_core.c module of the Linux operating system’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions hcilinkkeysclear, hcismpltksclear, hcismpirksclear, and hciblockedkeysclear in the net/bluetooth/hcicore.c module of the Linux operating system’s Bluetooth subsystem is related to the reallocation of previously freed memory. Exploiting this vulnerability could...

The vulnerability of the `dw_pcie_ep_set_bar()` function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver module allows a hacker to cause a service failure.

The vulnerability of the dwpcieepsetbar function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux operating systems involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Kerberos Python-kdcproxy proxy server, related to insufficient validation of incoming requests, allows a perpetrator to access confidential data.

The vulnerability of the Kerberos Python-kdcproxy proxy server lies in insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

CVE-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

The vulnerability of the library for working with PNG bitmap graphics, related to reading data beyond the buffer’s acceptable limits, allows attackers to access confidential data and cause service failures.

The vulnerability of the library for working with PNG bitmap graphics involves reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service interruptions...

The vulnerability of the software for interacting with servers via cURL, which involves redirecting URLs to unreliable websites, allows attackers to compromise the confidentiality of protected information.

The vulnerability of the software for interacting with servers via cURL is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information...

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2025-68482

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8,...

CVE-2025-68482

CVE-2025-68482 describes an improper certificate validation in Fortinet FortiAnalyzer (versions 7.6.0–7.6.4, 7.4.0–7.4.8, 7.2 all, 7.0 all; and FortiManager 7.6.0–7.6.4, 7.4.0–7.4.8, 7.2 all, 7.0 all) that may allow a remote unauthenticated attacker to view confidential information via a MITM att...

CVE-2026-24310

CVE-2026-24310 affects SAP NetWeaver AS ABAP, where missing authorization checks in the ABAP runtime can allow an authenticated attacker to execute a particular ABAP function module and read sensitive information from the ABAP system’s database catalog. The vulnerability’s impact is described as ...

The vulnerability of the soup_date_time_to_string() function in the LibSoup library allows a attacker to access confidential data.

The vulnerability of the soupdatetimetostring function in the LibSoup HTTP server access library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of the sun4i_can.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sun4ican.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through t...

PT-2026-24237

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8,...

The vulnerability of the Libvirt virtualization management library, related to default access permissions settings, allows attackers to gain access to confidential data.

The vulnerability of the Libvirt virtualization management library is related to the default access permissions settings. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability in the `drivers/net/wireless/ath/ath12k/mac.c` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the drivers/net/wireless/ath/ath12k/mac.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...