GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

CVE-2026-98082

A flaw was found in the Linux kernel's Btrfs file system. Under specific error handling conditions, such as storage input/output I/O errors or failures during RAID extent operations, the kernel fails to release allocated block I/O tracking memory. A local user capable of triggering these file...

CVE-2026-90361

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. During the ath11kservicereadyextevent processing, a memory allocation for svcrdyext.macphycaps is not released if an error occurs during TLV Type-Length-Value parsing. This can lead to a memory leak, potentially causing resource exhausti...

CVE-2026-90125

A flaw was found in the SMB client of the Linux kernel. In the smb2newreadreq function, a request buffer is allocated but not properly released when certain error conditions occur during an asynchronous read operation. A remote attacker could repeatedly trigger these error conditions, leading to ...

Security Bulletin: Multiple Vulnerabilities in IBM DevOps Build.

Summary Multiple vulnerabilities were addressed in IBM DevOps Build 7.2.0.0 Vulnerability Details CVEID:CVE-2026-49432 DESCRIPTION: Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP...

Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.

Summary IBM Rational Build Forge 8.1.0.0 addresses multiple vulnerabilites Vulnerability Details CVEID:CVE-2026-2391 DESCRIPTION: Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing attackers to cause denial-of-service via...

Exploit for Improper Authorization in Vercel Next.Js

React2Shell Scanner CVE-2025-29927 — Next.js Server Ac...

CVE-2026-47568

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can cause a Denial of Service DoS by repeatedly calling an interface in the kernel mode layer that emits un-rate-limited error messages. This uncontrolled message generation can flood system logs and exhaust storage or...

CVE-2026-47534

A flaw was found in the NVIDIA GPU display driver. A local user with basic privileges can trigger a divide-by-zero error within the driver's kernel mode layer. A successful exploit can crash the system, resulting in a Denial of Service DoS...

CVE-2026-47533

A flaw was found in nvidia-driver. A local attacker with administrative privileges can trigger an array indexing error within the kernel-mode driver layer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, access sensitive data, or cause a...

CVE-2026-47600

A flaw was found in the NVIDIA GPU Display Driver. The driver's kernel mode layer improperly handles resources during error processing by operating on uninitialized data. A local user with low privileges could exploit this flaw to achieve arbitrary code execution, escalate privileges, access...

CVE-2026-47558

A flaw was found in the NVIDIA GPU display driver. An unprivileged local user can exploit this vulnerability by triggering a double-free memory management error—releasing the same memory block twice—within the kernel-mode layer while handling imported memory states. A successful exploit could all...

CVE-2026-19553

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

Security Bulletin: Vulnerabilities in Netty,Apache Log4j Core,Spring Boot,Spring Framework,PostCSS,tmp,Spring Data,Apache Commons Lang,React Router,Bootstrap,d3-color might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Apache Log4j Core, Spring Boot, Spring Framework, PostCSS, tmp, Spring Data, Apache Commons Lang, React Router, Bootstrap,d3-color. Vulnerabilities include The attacker can present a server certificate...

Security Bulletin: Vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config,Underscore might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config. Vulnerabilities include an escalation attack exchanging a known session ID for that of an authenticated user, Denial of...

CVE-2026-55177

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI helper family api/routes/esri.ts takes a fully attacker-controlled URL from the request POST /api/esri body url, and the portal / server / lay...

Security Bulletin: Vulnerabilities in Netty, Spring Boot, ACE, jackson-core might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, Spring Boot, ACE, jackson-core. Vulnerabilities include A single TCP connection can create hundreds of thousands of long-lived stream objects, A remote peer could send frames that would result in the...

Security Bulletin: Vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer. Vulnerabilities include a crafted Host header that is only a superstring match for a configured host+path key can still route a...

CVE-2026-100071

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking subsystem. When device initialization fails after network receive handlers have already been registered, frames received during this setup window can create dynamic node entries that are not properly...

Security Bulletin: Vulnerabilities in Netty,node.js,spring-cloud-gateway-server,Angular,Picomatch,nanoid,spring-security,form-data,Apache Log4j Core,brace-expansion might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty,node.js,spring-cloud-gateway server,Angular,Picomatch,nanoid,spring-security,form-data,Apache Log4j Core,brace-expansion. Vulnerabilities include the tmp npm package contains a path traversal vulnerabili...