Rank Math SEO PRO processing logic error vulnerability

Rank Math SEO PRO version 3.0.123 has a processing logic vulnerability. This vulnerability stems from an attack on the supply chain. Some plugin packages downloaded or updated between 20:02 UTC on October 15, 2026, and 07:12 UTC on October 16, 2026, were infected with malware. This malware may...

Apache Camel log information leakage vulnerability

Apache Camel MLLP components versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a vulnerability related to log information leakage. This vulnerability arises due to the default activation of the logPhi option, with some paths not following this setting. As a result, patient data contained in H...

MISP information leakage vulnerability

Versions of MISP 2.5.48 and earlier contain security vulnerabilities. These vulnerabilities stem from the setting search function in the server’s setup mechanism, which returns the entire configuration subtree when providing branch names instead of specific leaf settings. This bypasses masking...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM version 2.2.7 and earlier have a security vulnerability. This vulnerability stems from improper object-level authorization in the EmailController’s write operations. It allows authorized users with limited permissions to manipulate other users’ emails by providing digital...

Netskope Client session mechanism vulnerability

Versions of the Netskope Client prior to R142 contained a vulnerability related to the session mechanism. This vulnerability arises when the NSClient agent switches to a network with internet connectivity after connecting to a Captive Portal access point, without closing the Captive Portal. This...

Pillow buffer error vulnerability

Pillow versions from 8.2.0 to 13.0.0 contain a buffer error vulnerability. This vulnerability stems from the tiled-TIFF decoder, which reads beyond the bounds of the tile buffer when copying four-byte pixels. In decodeTile, the tile allocation returned by libtiff is less than the required row...

MISP Project: misp-modules input validation error vulnerability

The MISP Project’s misp-modules 3.0.12 and earlier versions have security vulnerabilities. These vulnerabilities stem from an incomplete BLOCKEDRANGES list in the issafeurl URL validation function of the htmltomarkdown extension. This oversight resulted in key IP address ranges being omitted,...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

MISP Resource Management Error Vulnerability

MISP 2.5.48 and earlier versions have a resource management vulnerability. This vulnerability stems from a data integrity flaw in the event deletion logic. When events are deleted, related records such as event report labels, event graph entries, proposal associations, ssdeep-associated blocks, a...

openGauss-server Authorization Issue Vulnerability

Versions 3.0.0 to 3.0.5, 3.1.0 to 3.1.1, 5.0.0-RC1, 5.0.0 to 5.0.3, 5.1.0, 6.0.0-RC1, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 of openGauss-server contain authorization vulnerabilities. These vulnerabilities stem from an access control bypass in the connection authentication process in...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...

CCC Attestation Hardware-Backed Attestation in TLS: Input Verification Error Vulnerability

CCC Attestation Hardware-Backed Attestation in TLS versions committed from 731ca82 and earlier has a vulnerability in input validation. This vulnerability arises from the failure to bind early authentication evidence to TLS connections. Attackers who possess the extracted private key for...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the Thrift component deserializes incoming data into the shared defaultInstance rather than into a new copy, resulting in data leakag...

EUVD-2026-103800

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98860 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98860 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98860

The Linux kernel contains a vulnerability in the HID BPF subsystem related to how hid_bpf_hw_request handles hardware errors. When a transport driver returns a negative error code (e.g., -EPIPE ), the return value is implicitly promoted to size_t, causing a comparison against size to evaluate as ...

CVE-2026-98844 netfs: clear post-EOF pagecache when extending a file via write

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region...

CVE-2026-98844 netfs: clear post-EOF pagecache when extending a file via write

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region...

CVE-2026-98844

The Linux kernel contains a vulnerability in the netfs component where the pagecache is not properly cleared when a file is extended via a write operation. Specifically, dirty data left by writes through an mmapped region in a hole created after the End-of-File (EOF) could persist. The fix involv...