CVE-2026-80699 KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

CVE-2026-80699

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

CVE-2026-77838

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

PT-2026-82883

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

Breaking Darknet CAPTCHAs with General Purpose LLM

Our work evaluates the effectiveness of automated methods for solving CAPTCHA challenges commonly encountered in darknet environments. These CAPTCHAs are typically designed to operate without JavaScript, resulting in distinct characteristics compared to mainstream CAPTCHA systems. Our study...

LongPIBench: A Long-Context Benchmark for Prompt Injection

Prompt injection attacks pose a serious security risk to large language models in real-world applications. However, existing prompt injection benchmarks primarily focus on short-context inputs, leaving the attacks and defenses in long-context settings largely unexplored. This gap leads to a...

CVE-2026-55784: Concurrent Execution using Shared Resource with Improper Synchronization

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

Linux kernel xfrm_policy_fini Heap Buffer Overflow DoS

The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to situations where there is a competition for context switching. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

PT-2026-83013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring subsystem where per-task restrictions are not preserved across an exec operation. When a task that has used io uring undergoes the exec cancellation path,...

PT-2026-82999

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context In the nested state, the physical interrupt has already been deactivated through the HW bit in the LR. The extra deactivation would be harmless but can hit a...

PT-2026-83004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the Linux kernel within the drm/amd/display component. The function get ss info from atombios attempts to use calc pll cs-ctx-logger for logging via ...

Linux Distros Unpatched Vulnerability : CVE-2026-80704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-030642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030642 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

CVE-2026-81523

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

SUSE CVE-2026-72424

In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313rtcprobe calls devmrequestirq with IRQFSHARED and &pdev-dev as the cookie, but platformsetdrvdata is only called later after the clock setup. With a shared IRQ line...

SUSE CVE-2026-74338

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.6), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.6) +2073 more potentially affected by CVE-2026-59280 via org.springframework:spring-context-support (>=7.0.0, <=7.0.8)

org.springframework:spring-context-support MAVEN version =7.0.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0-alpha-springboot4, =22.0.0-alpha-springboot4, =1.5.0, =1.5.0, =1.7.0 and more Source cves: CVE-2026-59280 Source advisory:...

From Concept to Context Engine: How Wiz Built AI-Powered Data Discovery

Inside the multi-agent pipeline and feedback loops that turned a bucket scanner into a context engine...

BIT-NEO4J-ENTERPRISE-2026-1471 Caching of authentication context

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.1.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO UserInfo endpoint. We recomme...

EUVD-2026-66463

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Selectively expand iomutex The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves because of the close relationship they share. With the handful of race...