PT-2026-116933

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SVM component where control fields are updated on VMEXIT regardless of whether VMRUN succeeded. Specifically, the control.erap ctl and control.clean fields in...

PT-2026-98622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tc ctl chain function where the replay logic is incorrectly applied to RTM GETCHAIN requests. If a netlink socket sends RTM GETCHAIN requests repeatedly without...

PT-2026-94408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA control LED state layer where the system assumes all associated kcontrol elements are readable. If a write-only element is created without a get callback, it...

SUSE CVE-2026-89658

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup nfs40cleanadminrevoked takes a stateid reference under clp-cllock, drops nn-clientlock, and calls nfsd4droprevokedstid, which dereferences the stateid's...

Malicious code in easypanel-ctl (npm)

Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variable names, base64url-encodes the collected data, chunks it...

Malicious Package

Overview easypanel-ctl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in easypanel-ctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variab...

MAL-2026-15898 Malicious code in easypanel-ctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eb01006041231d7388c6aeb0c74288b35a8c72cf5b1e61c90e1e4f9d6d37c7 On npm install, the preinstall lifecycle script collects installer host identity hostname, username, cwd and enumerates CI-related environment variab...

PT-2026-79645

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc5 Description An out-of-bounds write exists in the ALSA FCP component. The function fcp ioctl set meter map allows a user-supplied Level Meter map size up to 255, which is then stored as elem-channels...

CVE-2026-64482

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndgf1pcmvolumecontrol does not check the return value before dereferencing kctl-id.index, which can lead to a NULL pointer...

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

meltano (>=2.16.0, <=3.6.0b4), nmdc-schema (>=0.0.0, <=7.4.12) +2 more potentially affected by CVE-2024-53848 via check-jsonschema (>=0.19.2, <=0.29.4)

check-jsonschema PYPI version =0.19.2, =2.16.0, =0.0.0, =0.3.0, =0.3.0, =0.4.1 Source cves: CVE-2024-53848 Source advisory: OSV:PYSEC-2026-1245...

flexrunner (1.0.9), graal (>=0.4.3rc5, <=0.4.3) +13 more potentially affected by CVE-2024-6345 via setuptools (67.0.0)

setuptools PYPI version 67.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - flexrunner 1.0.9 - graal =0.4.3rc5, =0.104.0rc8, =1.0.2, =0.1.0, =0.21.2rc5, =0.3.6rc5, =0.2.6rc5, =0.2.6rc5, =0.2.6rc5, =1.1.0, =0.6.0rc4,...

CVE-2026-12921

In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution...

CVE-2026-12921 Use after free in AzeoTech DAQFactory

In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution...

CVE-2026-12921: Use After Free

In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution...

kernel: Fix of 14 CVEs

nfnetlinkosf: validate individual option lengths in fingerprints CVE-2026-23397 - netfilter: nfnetlinkosf: avoid OOB read CVE-2026-23397 - bonding: limit BONDMODE8023AD to Ethernet devices CVE-2026-23099 - netlabel: fix out-of-bounds memory accesses CVE-2019-25160 - ext4: always check block group...

CVE-2026-12390

In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution...

CVE-2026-12390

CVE-2026-12390 affects AzeoTech DAQFactory versions 21.1 and prior. A Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files to achieve code execution. The available documents confirm the affected product and the underlying flaw mechanism, but do not provi...