PT-2026-53162

Name of the Vulnerable Software and Affected Versions JoomCCK affected versions not specified Description A front-end controller task in the JoomCCK extension for Joomla is susceptible to SQL injection. This occurs because the application constructs two SQL statements by directly concatenating a...

Linux Distros Unpatched Vulnerability : CVE-2026-53051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on When PERST is deasserted twice assert - deassert - assert - deassert, a CBB Control...

Bluetooth: fix memory leak in error path of hci_alloc_dev()

...

Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER

...

Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

...

SUSE CVE-2026-57521

Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to access arbitrary organization billing data by supplying an arbitrary organizationId to the PreviewInvoiceController endpoints without membership or authorization checks. Attackers...

CVE-2026-28701

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths...

CVE-2026-28701 Daktronics Controller Firmware Path Traversal

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths...

CVE-2026-28701

CVE-2026-28701 affects various versions of Daktronics Controller Firmware. The vulnerability is a path traversal flaw permitting authenticated or unauthenticated remote users to escape the intended directory and enumerate arbitrary filesystem paths, with potential high impact to confidentiality, ...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, kube-state-metrics, k3s, argo-cd, flux-image-automation-controller, calico-fips, gitea-fips, argocd-image-updater,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, kube-state-metrics, k3s, docker-machine-driver-harvester, argo-cd, flux-image-automation-controller, calico-fips, gitea-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, cluster-api-azure-controller-fips, argo-workflows-fips, coder-fips, tflint, external-secrets-operator, kube-conformance, crossplane-provider-azure-servicefabric, gitlab-runner-fips, slsa-verifier,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, argo-workflows-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, podman-fips, kube-state-metrics, k3s, grype-db, argo-events, argo-cd, splunk-otel-collector,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, cluster-api-azure-controller-fips, coder-fips, vault-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-azure-servicefabric, kube-conformance, helmfile, splunk-otel-collector, nfpm, step, crossplane-provider-azure-storage,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, gitlab-runner-fips, podman-fips, kube-state-metrics, k3s, docker-machine-driver-harvester,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: argo-events, istio, loki, aactl, crossplane-provider-family-azure, nfpm, chisel, cosign, sealed-secrets, glab, cloud-provider-aws, dagger, flux, guac, melange, snyk-cli, chezmoi, zot, pulumi-language-dotnet, vault-benchmark, gomplate, prometheus-operator, fulcio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-events, istio, loki, aactl, crossplane-provider-family-azure, nfpm, chisel, cosign, glab, cloud-provider-aws, dagger, flux, guac, age, melange, snyk-cli, chezmoi, zot, pulumi-language-dotnet, vault-benchmark, gomplate, prometheus-operator, fulcio, rancher-machin...

DEBIAN-CVE-2026-53295

In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers...

CVE-2026-53295

In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers...

EUVD-2026-39835

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The AI-generated review reported a potential DMA use-after-free issue 1. If netcxmitntmpcmd times out and returns an error, the pending command is not explicitly aborted, while...