ROS-20261012-73-0149

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-93695: External Control of File Name or Path

In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the...

Cisco Meraki

The vulnerability of Cisco Meraki network device software relates to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

Linux drivers iio magnetometer ak8975 Heap Buffer Overflow DoS

The vulnerability of the drivers/iio/magnetometer/ak8975.c component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers mailbox mtk-adsp-mailbox Heap Buffer Overflow DoS

The vulnerability in the drivers/mailbox/mtk-adsp-mailbox.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...

Cisco Meraki Access Control

The vulnerability of Cisco Meraki network device software relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

SonicWall SMA1000 SRF Unauthorized Access

The vulnerability of the Appliance WorkPlace microprogramming-based network interface of SonicWall SMA1000 relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute an SRF attack and gain unauthorized access to protected...

Linux PCI ROM Buffer Overflow DoS

The vulnerability of the drivers/pci/rom.c component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

EPG Function Cisco NX-OS Security Restriction Bypass

The vulnerability of the EPG function in the Cisco NX-OS operating system of Cisco Nexus 9000 Series Fabric Switches in ACI mode is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

Linux kernel IMA Buffer Overflow DoS

The vulnerability of the mma8452read function in the drivers/iio/accel/mma8452.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel max3421_hub_control() function Heap Buffer Overflow

The vulnerability of the max3421hubcontrol function in the drivers/usb/host/max3421-hcd.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the compregistervideodev function in the drivers/staging/most/video/video.c file of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel nvec_rx_completed() Heap Buffer Overflow

The vulnerability of the nvecrxcompleted function in the drivers/staging/nvec/nvec.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kcm_attach() Heap Buffer Overflow

The vulnerability of the kcmattach function in the net/kcm/kcmsock.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

ROS-20261012-73-0269

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-1907: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection SQLi affects the Kong Gateway Enterprise and Open Source clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane CP, leading to potential unauthorized database access. Leveraging the...

PT-2026-110779

Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or...

CVE-2026-109362: Insufficient Session Expiration

Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or...

CVE-2026-97691: Improper Access Control

Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-10-c0cb7ae, a malicious user can, in rare cases, perform unauthorized reading of deployment information from a Convex...

Cisco NX-OS Access Control Compromise

The vulnerability of the Cisco NX-OS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...