CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function...

CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the system.run. An attacker can execute unauthorized local code by obtaining approval for a benign script-runner command, then rewriting the referenced script ...

UNIX Disk Format File System Driver Privilege Escalation

The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

GHSA-8G75-Q649-6PV6 OpenClaw's system.run approvals did not bind mutable script operands across approval and execution

OpenClaw's system.run approval flow did not bind mutable interpreter-style script operands across approval and execution. A caller could obtain approval for an execution such as sh ./script.sh, rewrite the approved script before execution, and then execute different content under the previously...

This Android vulnerability can break your lock screen in under 60 seconds

A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...

virt:rhel and virt-devel:rhel security and bug fix update

An update is available for seabios, swtpm, perl-Sys-Virt, module.supermin, module.libiscsi, module.libvirt-dbus, libvirt-dbus, module.swtpm, module.virt-v2v, module.sgabios, module.perl-Sys-Virt, libvirt-python, module.libvirt-python, netcf, module.netcf, module.seabios, module.libguestfs, hivex,...

EUVD-2026-10594

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

EUVD-2026-10595

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672

CVE-2026-23672 corresponds to a Privilege Elevation vulnerability in the Windows Universal Disk Format File System Driver (UDFS). The NVD entry confirms an Elevation of Privilege impact with a CVSS v3.1 base score of 7.8 (Local, Privileges Required: Low, No user interaction) and indicates a Windo...

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, dataplaneapi, nats, amazon-cloudwatch-agent-operator, terraform-provider-tls, kyverno, redis-operator, kubernetes, crossplane-provider-aws-ec2, git-sync, kubecolor, src-fingerprint, gitaly, rancher-security-scan, stakater-reloader,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh-serving, crossplane-provider-aws-iam, kaf, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sqs, aws-flb-kinesis, dataplaneapi, minio, cluster-autoscaler, amazon-cloudwatch-agent-operator, undock, syft, terraform-provider-tls,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: migrate, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, flagger-fips, teleport-operator-fips, knative-client, karpenter,...

CLEANSTART-2026-GJ95666 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...