CVE-2026-98207

In the Linux kernel , a vulnerability exists in the mmc: spi driver where the mmc_spi_request() function fails to reset the data->bytes_xfered counter during a private recovery path for CRC failures . When a multi-block transfer encounters a CRC error and succeeds on a subsequent internal retr...

CVE-2026-105707 uptrace user_handler.go Login information exposure

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/userhandler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-105573 newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error

A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors...

CVE-2026-105573

A business logic error exists in newbee-ltd newbee-mall versions up to 2.7.5 . The vulnerability impacts an unknown function within the Shopping Cart Quantity Handler component, specifically in the file /jshERP-boot/accountHead/updateAccountHeadAndDetail. By manipulating the goodsCount argument, ...

CLEANSTART-2026-FF24840 When returning errors, functions in the net/textproto package would include its input as part of the error

Security vulnerability affects the temporal-server package. When returning errors, functions in the net/textproto package would include its input as part of the error...

Cisco ASA Trust Boundary Violation (CVE-2022-20826)

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20245)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

PT-2026-106663

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wireless driver where the ieee80211 start ap function may fail after setting the enable beacon and beacon int variables, leaving them in an inconsistent stat...

CVE-2026-104033: Off-by-one Error

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

CVE-2025-71383: Improper Input Validation

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...

CVE-2026-105783: Origin Validation Error

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

ROS-20261006-73-0003

The vulnerability of the bcmrxsetup function in the net/can/bcm.c module of the Linux kernel’s CAN subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-106584: Off-by-one Error

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...

ROS-20261006-73-0076

The vulnerability in the kernel-lt is related to a memory rerelease error. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-106122: Encoding Error

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

ROS-20261006-73-0063

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

CVE-2026-55307: Improper Privilege Management

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106321

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user handler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

PT-2026-107103

In kdn set sysregs prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-107376

Name of the Vulnerable Software and Affected Versions OWASP Coraza WAF versions 3.4.0 through 3.7.0 Description The multipart processor in internal/bodyprocessors/multipart.go incorrectly treats io.ErrUnexpectedEOF as a non-fatal condition without setting the MULTIPART STRICT ERROR flag. This...