PT-2026-28168

Name of the Vulnerable Software and Affected Versions Rails versions prior to 8.1.2.1 Rails versions prior to 8.0.4.1 Rails versions prior to 7.2.3.1 Description Active Storage, used for attaching cloud and local files in Rails applications, is susceptible to a denial-of-service condition. The...

CVE-2026-23360: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvmeallocadmintagset is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queu...

PT-2026-36439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the hci cmd sync queue once function fails to indicate whether a queue item was added. This prevents the caller from knowing if callbacks...

PT-2026-34405

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Bluetooth component where the btintel hw error function issues synchronous HCI commands without holding the hci req sync lock lock. This allows it to race...

Cisco IOS XE Software Wireless Controller for the Catalyst CW9800 Family CAPWAP DoS (cisco-sa-wlc-dos-hnX5KGOm)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the processing of Control and Provisioning of Wireless Access Points CAPWAP packets of Cisco IOS XE Wireless Controller Software for the Catalyst CW9800 Family could allow an...

Ingress-NGINX Controller < 1.13.9 / 1.14.x < 1.14.5 / 1.15.x < 1.15.1 Configuration Injection

The version of Ingress-NGINX controller installed on the remote host is prior to 1.13.9, 1.14.5, or 1.15.1. It is, therefore, affected by a configuration injection vulnerability. A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject...

The vulnerability of the rpcif_probe() function in the drivers/memory/renesas-rpc-if.c driver for the Linux operating system’s kernel memory controller allows a hacker to cause a service failure.

The vulnerability of the rpcifprobe function in the drivers/memory/renesas-rpc-if.c driver for the Linux operating system’s kernel memory controller is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the davinci_vc_probe() function in the drivers/mfd/davinci_voicecodec.c file of the driver for the multifunctional devices (MFD) controller in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the davincivcprobe function in the drivers/mfd/davincivoicecodec.c file of the MFD controller driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gs_can_open() function in the drivers/net/can/usb/gs_usb.c module of the Linux kernel’s CAN network device driver allows a hacker to cause a service failure.

The vulnerability of the gscanopen function in the drivers/net/can/usb/gsusb.c module of the Linux kernel-based network device driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dwc3_probe() function in the drivers/usb/dwc3/core.c file of the DesignWare USB3 controller driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dwc3probe function in the drivers/usb/dwc3/core.c file of the DesignWare USB3 driver for the Controler-based Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient input data validation, allows a attacker to cause a service failure.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-23360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix admin queue leak on controller reset When nvmeallocadmintagset is called during a controller reset, a previous admin queue may still exist. Release it...

Linux Distros Unpatched Vulnerability : CVE-2026-23287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting PLIC ignores interrupt completion message for disabled interrupt, explained by the...

Linux Distros Unpatched Vulnerability : CVE-2026-23362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix locking for bcmop runtime updates Commit c2aba69d0c36 can: bcm: add locking for bcmop runtime updates added a locking for some variables that can ...

EUVD-2026-14960

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

CVE-2026-2417

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

CVE-2026-2417

The CVE-2026-2417 entry concerns Pharos Controls Mosaic Show Controller firmware 2.15.3, describing a Missing Authentication for Critical Function that could let an unauthenticated attacker bypass authentication and run arbitrary commands with root privileges. The vulnerability is rated CRITICAL ...

CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

CVE-2026-2417

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...