PT-2026-115599

Name of the Vulnerable Software and Affected Versions luksmeta affected versions not specified Description Improper boundary validation of metadata slots allows an attacker who can supply or modify a disk header to redirect wipe or load operations outside the intended metadata area. By providing ...

CVE-2026-111555: Improper Validation of Specified Index, Position, or Offset in Input

A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with...

PT-2026-115432

Name of the Vulnerable Software and Affected Versions MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. versions prior to 1.2.78.7 Description An unauthenticated privilege escalation issue exists because the subscribe to email list endpoint accepts an...

CVE-2026-111713: Improper Neutralization of Input During Web Page Generation

tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-' prefixed attributes while the https-only guard validates the unprefixed attribute. Attackers who can place markup, such as CMS authors, can add data-url with a javascript: URL beside ...

Diversifying Moving Target Defense against Adaptive Attacks through Factorized Diffusion

Proactive defense offers a means to enhance power-system cybersecurity through controlled modifications of system configurations. One example is moving target defense MTD, which uses distributed flexible AC transmission system D-FACTS devices to perturb transmission-line reactances against stealt...

Linux net/sched/cls_flow.c Data Compromise

The vulnerability in the net/sched/clsflow.c component of the Linux operating system relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

Linux kernel fs/ocfs2/dlmglue.c DLP Data Compromise

The vulnerabilities of the functions ocfs2dlmseqnext and ocfs2dlmseqshow in the fs/ocfs2/dlmglue.c component of the Linux operating system are related to the failure to release resources after their useful lifespan has ended. Exploiting these vulnerabilities can allow attackers to compromise the...

Linux kernel BPF Insecure Compromise

The vulnerability in the kernel/bpf/inode.c component of the Linux operating system is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...

Linux Setup SGIO Components Heap Buffer Overflow DoS

The vulnerability in the setupsgiocomponents function within the drivers/crypto/marvell/octeontx/otxcptvfreqmgr.c file of the Linux kernel is related to the use of a name with an incorrect reference. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality,...

Nginx UI MCP Component Data Compromise

The vulnerabilities of the nginxconfigadd and nginxconfigmodify functions of the MCP component of the Nginx UI server involve bypassing authentication procedures by using an alternative path or channel. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity and...

UBUNTU-CVE-2026-111132

GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...

CVE-2026-111718: Improper Neutralization of Special Elements used in an SQL Command

AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and...

CVE-2026-109812: Missing Authorization

A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the...

Red Hat: CVE-2026-111555: luksmeta: Missing slot-range validation permits out-of-gap device I/O

A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with...

AlmaLinux 9.2 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792168002)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792168002 advisory. - Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on th...

AlmaLinux 9.6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.6:CLSA-2026:1792146840)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792146840 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131762 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report 1 showing a...

PT-2026-116157

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.121.0 ERPNext versions prior to 16.34.0 Description Certain endpoints for status modification fail to enforce proper authorization checks. A low-privileged authenticated user can invoke state-changing whitelisted...

ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to reach th...

Red Hat: CVE-2026-110759: perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fields

Text::CSVXS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. When the input to parse ends in a separator and a lone CR, the parser treats the end of the input as the next character and stores the end-of-file marker i...