PT-2026-85805

Name of the Vulnerable Software and Affected Versions undici versions 7.0.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The cache interceptor incorrectly handles the caching of unsafe HTTP methods. While documentation states only safe methods are cached, the logic used to skip...

Linux Distros Unpatched Vulnerability : CVE-2026-80770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails,...

Linux Distros Unpatched Vulnerability : CVE-2026-80832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into t...

The vulnerability of the futex_requeue() function in the kernel/futex/requeue.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the futexrequeue function in the kernel/futex/requeue.c module of the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drm_gem_change_handle_ioctl() function in the drivers/gpu/drm/drm_gem.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow...

The vulnerability of the cd321x_update_work() function in the drivers/usb/typec/tipd/core.c module of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the cd321xupdatework function in the drivers/usb/typec/tipd/core.c module of the USB TypeC driver in the Linux operating system is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sel_open_policy() function in the security/selinux/selinuxfs.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the selopenpolicy function in the security module security/selinux/selinuxfs.c of the Linux kernel’s security subsystem is related to synchronization errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the xe_display_init_early() function in the drivers/gpu/drm/xe/display/xe_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the xedisplayinitearly function in the drivers/gpu/drm/xe/display/xedisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the v3d_rewrite_csd_job_wg_counts_from_indirect() function in the drivers/gpu/drm/v3d/v3d_sched.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the v3drewritecsdjobwgcountsfromindirect function in the drivers/gpu/drm/v3d/v3dsched.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the btf_check_dtor_kfuncs() function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...

UBUNTU-CVE-2026-80734

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...

The vulnerability of the replace_nexthop_single() function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 kernel implementation allows a attacker to cause a service failure.

The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 protocol implementation is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sun4i_backend_atomic_check() function in the drivers/gpu/drm/sun4i/sun4i_backend.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the xdp_master_redirect() function in the net/core/filter.c module exposes network functions of the Linux kernel, allowing a hacker to cause a service failure.

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in the `internal/transport/transport.go` file of the gRPC-Go framework for remote procedure calls in the Go programming language allows a attacker to cause a service failure.

The vulnerability in the internal/transport/transport.go file of the Go-based gRPC-Go framework for remote procedure calls involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

ChatGPT, Claude, and Grok all suffered outages at nearly the exact same time for reasons that remain murky...

EUVD-2026-70533

A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate method only performed semantic validation when the supplied definition was...

CVE-2026-85239

MISP is vulnerable to a validation bypass in its event template handling. The EventTemplate::beforeValidate() method only applied semantic validation when the definition was already an array; a caller supplying a pre-encoded string (including malformed JSON ) bypassed validateDefinition() and onl...

CVE-2026-85154

WWBN AVideo contains an authentication failure vulnerability where the videoidhash credential is a non-expiring, non-revocable bearer token that grants full administrator session access to the video owner's account. Attackers who obtain a videoidhash can replay it indefinitely to authenticate as...

AZL-99059 CVE-2026-80728 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devresreleaseall unmaps the aperture before the DRM device release callback fires...