EUVD-2026-3102

Malicious code in flag-v21 npm...

EUVD-2026-3103

Malicious code in @wbgo/shared npm...

EUVD-2026-3071

Malicious code in idel2-content npm...

EUVD-2026-3088

Malicious code in alf-ui-js npm...

EUVD-2026-3086

Malicious code in auc-2-lib npm...

EUVD-2026-3110

Malicious code in @riag-libs/pattern-library-react-hooks npm...

EUVD-2026-3049

Malicious code in textual-sorter-lib npm...

EUVD-2026-3075

Malicious code in dws-dx npm...

EUVD-2026-2994

The vulnerability, if exploited, could allow an authenticated miscreant OS standard user to tamper with TCL Macro scripts and escalate privileges to OS system, potentially resulting in complete compromise of the model application server...

EUVD-2026-2931

In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator...

EUVD-2026-2928

SteelSeries Nahimic 3 1.10.7 allows Directory traversal...

EUVD-2026-2811

An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting XSS attacks, leading to the extraction of sensitive data...

EUVD-2026-2828

Not used...

EUVD-2026-2836

Not used...

EUVD-2026-2831

Not used...

EUVD-2026-2839

EUVD-2026-2839...

EUVD-2026-2454

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary...

EUVD-2026-2476

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context list protection lock Previously a mutex was added to protect the encoder and decoder context lists from unexpected changes originating from the SCP IP block, causing the context...

EUVD-2026-2473

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size rxpending is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring size...

EUVD-2026-2467

In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5storegroupthreadcnt The variable mddev-private is first assigned to conf and then checked: conf = mddev-private; if !conf ... If conf is NULL, then mddev-private is also...