CVE-2026-90546

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the like.json.php endpoint, allowing logged-in users to record likes on password-protected and group-restricted videos. Attackers can submit like requests for videos they cannot watch...

CVE-2026-89547

A flaw was found in the Linux kernel's SUNRPC component. A local administrator, under specific conditions of memory pressure or fault injection during RPC server startup, can trigger a failure in per-CPU counter allocation. This failure leads to uninitialized counters, which, when subsequently...

CVE-2026-85589 phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard API

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks. Any authenticated user can access these endpoints to read site-wide search statistics and...

EUVD-2026-71012

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks. Any authenticated user can access these endpoints to read site-wide search statistics and...

CVE-2026-85589: Missing Authorization

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks. Any authenticated user can access these endpoints to read site-wide search statistics and...

Linux Kernel DoS

The vulnerability in the batadvblaaddclaim function within the net/batman-adv/bridgeloopavoidance.c module, which implements network functions of the Linux kernel, is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to cause a denia...

wave5_vpu_remove Heap Buffer Overflow DoS

The vulnerability of the wave5vpuremove function in the drivers/media/platform/chips-media/wave5/wave5-vpu.c driver for multimedia devices in the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-58089

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

Linux kernel DoS

The vulnerability in the drivers/dpll/dpllcore.c component of the Linux kernel is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel verifier DoS

The vulnerability in the verifier.c component of the Linux kernel is related to errors occurring during link count updates. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel mcast DoS

The mcast module vulnerability in the Linux kernel is related to errors during link counter updates. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux p2pdma.c DoS

The vulnerability of the p2pdma.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72060

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: icssg: guard PA stat lookups icssgndogetstats64 unconditionally calls emacgetstatbyname with FW PA stat names regardless of whether the PA stats block is present on the hardware. emacgetstatbyname already guard...

CVE-2026-74260: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfdupnetdev: add nfdevxmitrecursion helpers and use them Update nftdup and nftfwd to use the nfdevxmitrecursion helpers. This patch also disables BH when transmitting the skb to address a possible migration to differen...

Characterizing the Variance Envelope: A Multi-Dimensional Analysis of Spectre Telemetry across Architectures and Workloads

Hardware attacks like Spectre exploit built-in processor vulnerabilities, leaving anomalous footprints in Hardware Performance Counter HPC metrics. While machine learning can detect these footprints in controlled settings, static models fail in the real world when confronted with background syste...

CVE-2026-72780: Authentication Bypass by Capture-replay

Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...

Craft CMS: Passkey login accepts replayed WebAuthn assertions

Craft CMS passkey login accepts WebAuthn requestOptions from the unauthenticated login request body and does not persist the updated credential counter returned by the WebAuthn assertion validator. A captured passkey login request body can therefore be replayed because the old challenge is accept...

K000162796: Linux Kernel vulnerability CVE-2026-63825

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch counters with loop induction variables as an optimization. In inflatefast, the inn...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client connection. This may be used to crash the server, or for...