SUSE CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

JLSEC-2026-1045 ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark()...

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

MINI-M78G-GRX4-C495

Bulletin has no description...

CVE-2026-22622

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...

CVE-2026-64476

A flaw was found in the Linux kernel's vfio/pci driver. The disableidled3 flag, which controls device power states, was handled as a global module parameter instead of being latched per device. This improper handling could lead to unbalanced Power Management PM operations for devices already boun...

CVE-2026-64447

A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could...

CVE-2026-44090

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

EUVD-2026-51038

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-44103

The CVE-2026-44103 entry details an unauthenticated remote code/integrity issue where the JupiCore firmware update mechanism transmits updates without integrity or verification checks, allowing an attacker to inject malicious firmware into the internal charging module. This could compromise devic...

CVE-2026-44103

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-44090

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

CVE-2026-44090

CVE-2026-44090 describes a lack of authentication exposing an MQTT broker to unauthenticated remote access. The broker is only protected by an external firewall, enabling a network attacker to potentially take full control of the device. Documented impact includes high confidentiality, integrity,...

EUVD-2026-51025

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

CVE-2026-44090 Missing authentication for MQTT Broker

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...

MZ Automation lib60870

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could crash the device being accessed. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices...

CVE-2026-64455

A flaw was found in the Linux kernel's chaoskey driver. A local user could trigger a use-after-free vulnerability by closing the device file after the associated USB device has been unplugged. This could lead to a system crash due to memory corruption when a debugging statement attempts to access...

CVE-2026-64453

A flaw was found in the Linux kernel's USB subsystem, specifically within the usbio module. This vulnerability, known as a use-after-free UAF, occurs when the system attempts to access memory that has already been released during the disconnection of a USB device. A local attacker or a specially...

CVE-2026-64307

A flaw was found in the Linux kernel's crypto:ccp module. A local attacker with access to a userspace process could exploit this vulnerability. If Secure Encrypted Virtualization SEV initialization fails while Kernel-based Virtual Machine KVM is running virtual machines, the attacker can trigger ...

CVE-2026-64473

A flaw was found in the VFIO Virtual Function I/O subsystem of the Linux kernel. During device unregistration, debugfs a diagnostic filesystem entries might remain visible with outdated or "stale" data after the associated resources have been released. This occurs because the debugfs entries are...