PT-2026-29708

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.8.0 Description Ella Core experiences a panic when processing a NGAP handover failure message. An attacker capable of triggering a gNodeB to send NGAP handover failure messages to Ella Core can cause a process...

The vulnerability of the __rb_map_vma() function in the kernel/trace/ring_buffer.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the rbmapvma function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qcom_qmpPhyCreate() function in the drivers/phy/qualcomm/phy-qcom-qmp.c driver module allows a hacker to cause a service failure.

The vulnerability of the qcomqmpPhyCreate function in the drivers/phy/qualcomm/phy-qcom-qmp.c file of the Linux kernel PHY support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the formwrlSSIDget() function (/goform/wifiSSIDget) in the Tenda i12 wireless access point software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

CVE-2026-33215

A flaw was found in NATS-Server. A remote attacker could exploit this vulnerability by manipulating MQTT Message Queuing Telemetry Transport Client IDs. This malfeasance allows for the hijacking of client sessions and messages. This could lead to unauthorized access to sensitive information or...

CVE-2026-33027 Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially crafted paths are supplied, the backend resolves them to the base Nginx configuration directory and executes the operati...

The vulnerability in the fs/f2fs/node.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/f2fs/node.c module of the Linux operating system is related to incorrect synchronization due to an improper check of the ISCHECKPOINTED flag. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Google Chrome’s WebGL component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s WebGL component is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created HTML page...

The vulnerability of the m920x_i2c_xfer() function in the drivers/media/usb/dvb-usb/m920x.c file of the multimedia device driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the m920xi2cxfer function in the drivers/media/usb/dvb-usb/m920x.c file of the multimedia device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the mtk_hwlro_get_fdir_all() function in the drivers/net/ethernet/mediatek/mtk_eth_soc.c module of the network adapter driver for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the exfat_allocate_bitmap() function in the fs/exfat/balloc.c module of the exFAT file system for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the exfatallocatebitmap function in the fs/exfat/balloc.c file of the exFAT file system in Linux’s operating system is related to the lack of checking for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the mdp_m2m_open() function in the drivers/media/platform/mediatek/mdp3/mtk-mdp3-m2m.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mdpm2mopen function in the drivers/media/platform/mediatek/mdp3/mtk-mdp3-m2m.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the stm32_pctrl_get_irq_domain() function in the drivers/pinctrl/stm32/pinctrl-stm32.c file of the GPIO controller driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the stm32pctrlgetirqdomain function in the drivers/pinctrl/stm32/pinctrl-stm32.c file of the GPIO controller driver in the Linux operating system kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the qcom_glink_alloc_channel() function in the drivers/rpmsg/qcom_glink_native.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qcomglinkallocchannel function in the drivers/rpmsg/qcomglinknative.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the hd44780_probe() function in the drivers/auxdisplay/hd44780.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the hd44780probe function in the drivers/auxdisplay/hd44780.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the admac_terminate_all() function in the drivers/dma/apple-admac.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the admacterminateall function in the drivers/dma/apple-admac.c file of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the hfs_write inode() function in the fs/hfs/inode.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the hfswrite inode function in the fs/hfs/inode.c module of the Linux file system is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

EUVD-2026-16715

AVideo: Missing Authorization in Playlist Schedule Creation Allows Cross-User Broadcast Hijacking...

CVE-2026-33907

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

CVE-2026-33903

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Version...