No title provided

A flaw was found in SQLite. A use-after-free vulnerability in the expression evaluation logic, specifically within the sqlite3ReleaseTempReg and exprComputeOperands functions, allows a remote attacker to exploit the system. By supplying a malicious SQL statement, an attacker can cause a denial of...

SUSE CVE-2026-64372

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

CVE-2026-64372

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

CVE-2026-64372

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

EUVD-2026-48916

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

CVE-2026-64372 cpufreq: pcc: fix use-after-free and double free in _OSC evaluation

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

CVE-2026-64372

Summary: CVE-2026-64372 affects the Linux kernel cpufreq/pcc OSC evaluation path. The defect arises in pcc_cpufreq_do_osc(), which calls acpi_evaluate_object() twice for the two‑phase _OSC negotiation. Between the calls, output.pointer is freed while output.length remains, causing the second call...

Linux Distros Unpatched Vulnerability : CVE-2026-64372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the...

PT-2026-64593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and double free issue exists in the pcc cpufreq do osc function during the two-phase OSC negotiation. The function calls acpi evaluate object twice; however, after the...

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

Impact @fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate slashes in the pathname used for file resolution. Non-canonical pathnames such as //file, /./file, or /public/../private/file bypass allowedPath filtering while resolving to the intended file o...

Uncontrolled Recursion

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Uncontrolled Recursion via the query evaluation. An attacker can cause the affected node to terminate by submitting a specially...

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

OpenAI on Tuesday said a combination of its artificial intelligence AI models, including GPT-5.6 Sol and an "even more capable pre-release model," was behind the security incident that targeted Hugging Face's production infrastructure last week. The AI company said the models were operating with...

EUVD-2026-47647

The Grav Login plugin grav-plugin-login versions = 3.8.11 contain a privilege escalation flaw in the authenticated profile self-update handler processUserProfile, the updateuser task. Unlike the registration handler, this handler does not strip privilege fields 'groups','access' from user-submitt...

EUVD-2026-47591

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197. An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource...

PT-2026-70167

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.31.5 n8n versions prior to 2.32.1 Description A sandbox escape exists during expression evaluation. An authenticated user with permissions to create or modify workflows can use arrow-function bodies to bypass the...

CVE-2026-56746

Netty (versions 4.2.0.Final–4.2.15.Final and 4.1.0.Final–4.1.135.Final) contains a security control bypass in CorsHandler’s origin evaluation due to a logical operator error. An attacker can bypass the short-circuit protection by sending Origin: null, causing unauthorized requests to reach the ba...

CVE-2026-47391

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a calculateexpression tool implemented with Python eval. The example also binds to 0.0.0.0. A remote unauthenticated attacker...

CVE-2026-47391

PraisonAI’s first-party A2A example exposes an unauthenticated /a2a JSON-RPC surface and registers a calculate(expression) tool implemented via Python eval(), bound to 0.0.0.0. A remote attacker can send message/send to a2a, causing the LLM to invoke the unsafe tool and potentially execute arbitr...

EUVD-2026-46281

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a calculateexpression tool implemented with Python eval. The example also binds to 0.0.0.0. A remote unauthenticated attacker...

CVE-2026-47391 PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a calculateexpression tool implemented with Python eval. The example also binds to 0.0.0.0. A remote unauthenticated attacker...