CVE-2026-102508

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-97494

A flaw was found in the Linux kernel's AMD GPU driver. The driver fails to validate the size of firmware images before copying them into the Platform Security Processor PSP private buffer. A local user could exploit this vulnerability by loading an oversized or malformed firmware image, triggerin...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +13 more potentially affected by CVE-2026-102511 via org.apache.plc4x:plc4j-driver-ads (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-ads MAVEN version =0.10.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.95.0, =0.98.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=4.2.0, <=4.23.0) +12 more potentially affected by CVE-2026-102511 via org.apache.plc4x:plc4j-driver-eip (>=0.11.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-eip MAVEN version =0.11.0, =4.7.0, =4.2.0, =4.2.0, =0.12.0, =0.12.0, =0.12.0, =0.13.0, =0.12.0, =0.11.0, =0.95.0, =0.98.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

nl.basjes.modbus:modbus-api-plc4j (>=0.1.0, <=0.15.0), org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4) +14 more potentially affected by CVE-2026-102511 via org.apache.plc4x:plc4j-driver-modbus (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-modbus MAVEN version =0.10.0, =0.1.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.93.0, =0.98.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 and more Source cves: CVE-2026-102511...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +12 more potentially affected by CVE-2026-102509 via org.apache.plc4x:plc4j-driver-opcua (>=0.10.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-opcua MAVEN version =0.10.0, =4.7.0, =3.20.0, =3.20.0, =0.10.0, =0.10.0, =0.12.0, =0.13.0, =0.10.0, =0.10.0, =0.12.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509 Apache PLC4X, Apache PLC4X: Pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

CVE-2026-102509

The Apache PLC4X (PLC4J) Java implementation is vulnerable to pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser . The root causes include memory allocation with excessive size values, allocation of resources without limits, and uncontrolled recursion. Specificall...

org.apache.camel.karaf:camel-plc4x (>=4.7.0, <=4.18.4), org.apache.camel.springboot:camel-plc4x-starter (>=3.20.0, <=4.23.0) +13 more potentially affected by CVE-2026-102508 via org.apache.plc4x:plc4j-driver-opcua (>=0.9.0, <=0.13.1)

org.apache.plc4x:plc4j-driver-opcua MAVEN version =0.9.0, =4.7.0, =3.20.0, =3.20.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.12.0, =0.13.0, =0.9.0, =0.9.0, =0.12.0 - org.connectorio.plc4x.extras.features:org.connectorio.plc4x.extras.feature.decorator 0.12.0 -...

CVE-2026-102508 Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

EUVD-2026-89674

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

CVE-2026-97982

A flaw was found in the Cortina Ethernet driver in the Linux kernel. The driver incorrectly returns the remaining packet budget instead of the number of packets processed during receive polling. This miscalculation causes idle network polling routines to remain continuously scheduled, which can...

CVE-2026-97981

A flaw was found in the Cortina Gemini Ethernet driver within the Linux kernel. The network packet receive handler fails to count dropped or malformed packets against its processing budget. An attacker could exploit this vulnerability by sending a stream of invalid network frames, causing the...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-97977

A flaw was found in the Linux kernel's Bluetooth USB driver. A race condition during device closure or disconnection allows background receive tasks to continue running after the associated device data has been released, leading to a use-after-free UAF condition. A local attacker could exploit th...

CVE-2026-97976

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate the packet length received from the hardware buffer before copying data. A compromised or malicious Bluetooth device providing an oversized packet length can trigger an out-of-bounds memory read,...

CVE-2026-97973

A flaw was found in the Linux kernel's Cadence MACB Ethernet driver. When device initialization fails during the probing process, the error-handling path fails to properly release an allocated physical link phylink structure. A local user capable of triggering repeated probe failures could exploi...

CVE-2026-97972

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. During network interface initialization, the driver fails to properly release a device tree node reference upon successful registration. Repeated device probe or bind cycles can result in a reference count leak and progressive...

CVE-2026-97970

A flaw was found in the Linux kernel's MSC313e watchdog driver. A local user or an unconfigured clock condition during device initialization can cause the driver to encounter a zero clock rate. Because the driver fails to validate this value before using it in a division operation, a...