SUSE CVE-2026-22986

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev-srcu If two drivers were calling gpiochipadddatawithkey, one may be traversing the srcu-protected list in gpionametodesc, meanwhile other has just added its gdev in gpiodevaddtolistunlocked...

PT-2026-5008

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.0.0 through 7.0.15 FortiAnalyzer versions 7.2.0 through 7.2.11 FortiAnalyzer versions 7.4.0 through 7.4.9 FortiAnalyzer versions 7.6.0 through 7.6.5 FortiManager versions 7.0.0 through 7.0.15 FortiManager versions 7.2....

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005010 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...

CVE-2026-1448

A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wizpolicy3machine.php of the component Web Management Interface. Performing a manipulation of the argument ipaddr results in os command injection. It is possible to initiate the attack remotel...

CVE-2026-1448

The CVE-2026-1448 entry concerns D-Link DIR-615 Web Management Interface up to version 4.10. The vulnerability lies in the /wiz_policy_3_machine.php file where manipulating the ipaddr argument enables operating system command injection. This allows remote initiation of an exploit, and multiple so...

Exploit for CVE-2025-36911

ZWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...

Exploit for CVE-2025-36911

zWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...

⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Security failures rarely arrive loudly. They slip in through trusted tools, half-fixed problems, and habits people stop questioning. This week's recap shows that pattern clearly. Attackers are moving faster than defenses, mixing old tricks with new paths. "Patched" no longer means safe, and every...

SUSE CVE-2026-23011

In the Linux kernel, the following vulnerability has been resolved: ipv4: ipgre: make ipgreheader robust Analog to commit db5b4e39c4e6 "ip6gre: make ip6greheader robust" Over the years, syzbot found many ways to crash the kernel in ipgreheader 1. This involves team or bonding drivers ability to...

PT-2026-4835

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 versions up to 4.10 Description A flaw exists in the Web Management Interface component of D-Link DIR-615. Specifically, a manipulation of the ipaddr argument in the /wiz policy 3 machine.php file can lead to os command injectio...

Apple Security Update: iOS 26.2.1 and iPadOS 26.2.1

Apple recommends to install security update iOS 26.2.1 and iPadOS 26.2.1 on devices iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later...

Apple Security Update: iOS 12.5.8 and iPadOS 12.5.8

Apple recommends to install security update iOS 12.5.8 and iPadOS 12.5.8 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation...

ROS-20260126-73-0049

A vulnerability in the drm/amd/pm/smu11 component of the Linux operating system kernel is related to the lack of division by zero check. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by a session reference count leak, which may prevent network devices from being released...

CVE-2025-9290

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication...

CVE-2026-1201

An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulation...

CVE-2026-0781

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

PT-2026-4631

📱Critical Bluetooth vulnerability CVE-2025-13834 disclosed! This RFCOMM flaw is a "Bluetooth Heartbleed" allowing unauthenticated memory read on 2.8B devices via a single malformed packet. https://t.co/7tYyP9ixpK cybersecurity infosec CVE Bluetooth vulnerability...

CVE-2026-22986

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev-srcu If two drivers were calling gpiochipadddatawithkey, one may be traversing the srcu-protected list in gpionametodesc, meanwhile other has just added its gdev in gpiodevaddtolistunlocked...