MINI-HRHR-4M77-WMJX

Bulletin has no description...

CVE-2026-64642

A flaw was found in Next.js, a React framework. A remote attacker can bypass authentication in Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales by sending crafted requests. This vulnerability allows for unauthorized access, leading to a high...

CVE-2026-64218

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix reportwork leak on backbonegw purge batadvblapurgebackbonegw removes stale backbone gateway entries, but fails to properly handle their associated reportwork: - If reportwork is running, the purge must wait...

MINI-PXMV-2RCM-X87R

Bulletin has no description...

MINI-3FG9-22VC-MXV5

Bulletin has no description...

MINI-MR2M-R3FG-883P

Bulletin has no description...

MINI-P5GM-4R66-4WQW

Bulletin has no description...

MINI-FR75-Q42M-75R2

Bulletin has no description...

CVE-2026-64642

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue h...

CVE-2026-64642

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue h...

EUVD-2026-49382

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue h...

GO-2026-5051 Out-of-bounds read and panic in ReadDir in github.com/cloudsoda/go-smb2 and github.com/hirochachacha/go-smb2

ReadDir and ReadDirPlus parse the QUERYDIRECTORY SMB response by advancing through entries using the server-supplied NextEntryOffset field. The pre-fix code does not bound next against the remaining buffer before re-slicing, and the entry decoder IsInvalid check performs length arithmetic in int...

MINI-96QC-28FW-JH5H

Bulletin has no description...

MINI-XW75-QH2F-3XGH

Bulletin has no description...

MINI-6V72-5RQ6-7PGX

Bulletin has no description...

MINI-7CHF-MH56-J2JG

Bulletin has no description...

MINI-4WM5-M533-JPVW

Bulletin has no description...

MINI-2W45-2J8F-X4G4

Bulletin has no description...

MINI-XP75-J88R-426R

Bulletin has no description...

CVE-2026-64532

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFSDE view.dataoff in UpdateRecordDataRoot,Allocation In doaction's UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 cases, the memmove destination is Add2Ptre, le16tocpue-view.dataof...