CVE-2026-73296 Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

EUVD-2025-210705

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code...

CVE-2025-41769

CVE-2025-41769 describes a buffer overflow in the PROFINET service of a device, exploitable by an unauthenticated remote attacker under default configuration. Consequences listed include device reboot or arbitrary code execution. Documented details indicate network-based access with low attack co...

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

DEBIAN-CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68443

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68443

The CVE-2026-68443 entry concerns the Linux kernel hwmon Gigabyte WaterForce driver. A race condition occurs because calling hid_hw_stop() does not stop device IO, allowing hid_input_report() to run concurrently with the post-io-start path in the driver probe. If probe fails after io start, this ...

CVE-2026-68443 hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68443 hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop

In the Linux kernel, the following vulnerability has been resolved: hwmon: gigabytewaterforce Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

PT-2026-71036

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The PROFINET service is affected by a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. This issue exists in t...

PT-2026-71367

Name of the Vulnerable Software and Affected Versions UpSnap versions prior to 5.4.0 Description An OS command injection flaw exists in the device management functionality. This occurs due to unsafe shell command template interpolation using the ip and mac fields. An authenticated low-privileged...

CVE-2026-64934

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:19+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...

CVE-2026-68067

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:15+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 23:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstryrwkxz2g 2026-08-12 00:01:35+00:00| seen|...

CVE-2026-67568

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:13+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:18:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2oepdilmaqi7n 2026-08-11 23:50:03+00:00| seen|...

CVE-2026-66098

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...

CVE-2026-18844

creationtimestamp| type| source ---|---|--- 2026-08-11 20:14:43+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgjkadjw26 2026-08-11 20:15:22+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02...

CVE-2026-18844

The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy BLE interface. These commands are sent without authentication or encryption, and are never issued by the companion mobile application, yet are fully processed by the device when ...