OESA-2026-3177 wpa_supplicant security update

wpasupplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key...

The vulnerability of the avidmx_process() function in the filters/dmx_avi.c file of the MP4Box packaging tool for the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the avidmxprocess function in the filters/dmxavi.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260724-73-0021

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260724-73-0026

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the ngx_http_slice_module in NGINX Plus and NGINX Open Source servers, allowing attackers to expose protected information or cause service failures.

The vulnerability of the ngxhttpslicemodule in NGINX Plus and NGINX Open Source is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

ROS-20260724-73-0031

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the net/core/flow_dissector.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/core/flowdissector.c module of the Linux operating system is related to data type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-29007

A flaw was found in U-Boot. A remote attacker can exploit an out-of-bounds read vulnerability in the tcprxstatemachine function when the Transmission Control Protocol TCP is enabled. By crafting a malicious packet with a mismatched IP total length and TCP data offset, an attacker can read beyond...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

The vulnerability of the Local Mail Transfer Protocol (LMTP) used by Dovecot and OX Dovecot Pro mail servers, which is related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Local Mail Transfer Protocol LMTP used by Dovecot and OX Dovecot Pro mail servers involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the kmalloc_reserve() function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the kmallocreserve function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `vfio_ap_queue_devremove()` function in the `drivers/s390/crypto/vfio_ap_drv.c` driver file of the S390 Linux operating system’s cryptography driver, which allows a hacker to cause a service failure.

The vulnerability of the vfioapqueuedevremove function in the drivers/s390/crypto/vfioapdrv.c file of the Linux S390 platform’s cryptography driver lies in the pointer manipulation involved. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the io_wq_create() function in the io_uring module of the io-wq.c interface, a synchronous input/output interface for the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the iowqcreate function in the iouring module of the Linux kernel’s asynchronous input/output interface relates to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the opap_hsmmc_probe() function in the drivers/mmc/host/omap_hsmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the opaphsmmcprobe function in the driver/mmc/host/omaphsmmc.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Impact The DELETE /$restEndpoint/test-webhook/:id route is registered before the authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The impact is limited to disrupting in-progress te...

UBUNTU-CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

GHSA-H9FM-XCV2-QFW3 Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...