Linux Distros Unpatched Vulnerability : CVE-2026-72152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE...

PT-2026-72194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rt2x00lib probe dev function where the full rt2x00lib remove dev teardown process is triggered for all probe failures. This occurs even if drv data allocation or...

PT-2026-72279

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/amdxdna component where the amdxdna drm sync bo ioctl function incorrectly passes abo-client to amdxdna hwctx sync debug bo during a SYNC DIRECT FROM DEVICE...

PT-2026-72563

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AFS component where the afs vnode::lock work variable is not sufficiently initialized. Initializing it only once within the slab's init function is inadequate for...

Malicious code in debug-proxy-chrome-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a0986932a47f49b162ea0438acfd0b6293e027e8ac2da46eb1221c5d52646c [email protected] declares a postinstall hook "postinstall": "node install.js" that automatically executes on npm install. install.js...

SUSE CVE-2026-68403

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmfsdioprobe stores the newly allocated bus in sdiodev-bus before allocating the ordered workqueue. If that allocation fails, the function jumps to fail and calls...

CVE-2026-66432: Exposure of Sensitive System Information Due to Uncleared Debug Information

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-68438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d smp: Improve...

Security Bulletin: IBM i is Affected By A Prvilege Escalation Vulnerability [CVE-2026-18509]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18509 in Navigator and Debug Service as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18509 DESCRIPTION: IBM i could allow a local authenticated attacker to gain privilege escalation via the...

CVE-2026-17082

IBM i 7.3–7.6 (5770-SS1) contains CVE-2026-17082 in the Debug Server: remote authenticated attackers can gain elevated privileges due to improper validation of a client-supplied profile name. CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low attack complexity, and privileges require...

CVE-2026-17082 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name...

CVE-2026-17082 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name...

CVE-2026-17083 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17083 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17083

CVE-2026-17083 affects IBM i 7.3–7.6 and is related to the Debug Server. It enables remote code execution via a stack-based buffer overflow in the Debug Server component. The IBM bulletin lists affected releases and provides fixes: 7.6 SJ10899, 7.5 SJ10903, 7.4 SJ10915, and 7.3 SJ10916, with upgr...

CVE-2026-16907

IBM i bulletin CVE-2026-16907 affects IBM i 7.3–7.6 (5770-SS1) and describes a remote authenticated code execution vulnerability in the Debug Server caused by improper bounds checking. Affected releases: 7.6, 7.5, 7.4, and 7.3. Impact per the CVSS: Confidentiality Low, Integrity High, Availabilit...

CVE-2026-16907 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking...

CVE-2026-16907 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking...

CVE-2026-17248

CVE-2026-17248 affects IBM i 7.6/7.5/7.4/7.3 (5770-SS1) and is described in IBM’s Debug Server bulletin as allowing a remote authenticated attacker to cause a denial of service via improper neutralization of special elements in an OS command. The base CVSS v3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C...

CVE-2026-17248 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command...