CVE-2026-90707

Open5GS up to 2.7.x is affected by a use after free vulnerability in the Old AMF Discovery Fallback component, specifically in the function amf_nnrf_try_old_amf_discovery_fallback (file src/amf/nnrf-handler.c). Manipulation of the discovery_option argument triggers the flaw. The attack is remote ...

CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

PT-2026-91158

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf nnrf try old amf discovery fallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discovery option results in use after free. The attack may ...

PT-2026-91264

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway affected versions not specified Cisco Secure Email and Web Manager affected versions not specified Description Cisco Secure Email Gateway and Cisco Secure Email and Web Manager contain multiple issues related to...

Important: bluez

Issue Overview: A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth...

PT-2026-91266

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions 15.5 and earlier Cisco Secure Email and Web Manager versions 15.5 and earlier Description Multiple path traversal issues exist within the software. Path traversal is a flaw that allows an attacker to access...

Linux Kernel MCTP Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

The vulnerability of Microsoft Discovery Studio’s research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.

The vulnerability of the Microsoft Discovery Studio research environment is related to the improper elimination of special elements in data queries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

PT-2026-91392

net if ipv6 calc reachable time in subsys/net/ip/net if.c derives a randomized ND reachable time from ipv6-base reachable time as min reachable + sys rand32 get % max reachable - min reachable, where min reachable = base/2 and max reachable = 3base/2 using integer division. When base reachable ti...

PT-2026-91269

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions 15.5 and earlier Cisco Secure Email and Web Manager versions 15.5 and earlier Description Multiple issues related to improper neutralization were identified during an internal security review. These issues...

Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

CVE-2026-90707: Use After Free

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in protobuf-5.29.5-cp38-abi3-manylinux2014_x86_64.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in protobuf-5.29.5-cp38-abi3-manylinux2014x8664.whl Vulnerability Details CVEID:CVE-2026-0994 DESCRIPTION: A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth...

CVE-2026-43937

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:06+00:00| seen| https://t.me/shimiscyberworld/1424 2026-09-13 00:00:54+00:00| seen| https://t.me/shimiscyberworld/1424...

CVE-2026-79395

creationtimestamp| type| source ---|---|--- 2026-09-11 20:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbftl3fce2f 2026-09-11 22:02:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkypda632v 2026-09-11 22:07:47+00:00| seen|...

SnowCrash

Snow Crash A Linux security project focused on privilege esca...

CVE-2024-11222

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:45:57+00:00| seen|...

CVE-2026-89146

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...

CVE-2026-89146 libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...

CVE-2026-89146 libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when...