CVE-2026-3503

Protection mechanism failure in wolfCrypt post-quantum implementations ML-KEM and ML-DSA in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during...

EUVD-2026-13039

OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subproce...

CVE-2026-32000

OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: true after spawn failures. Attackers can inject shell metacharacters in command arguments to execute arbitrary commands when subproce...

SUSE CVE-2026-23258

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setupnicdevices, the netdev is allocated using allocetherdevmq. However, the pointer to this structure is stored in oct-propsi.netdev only after the calls to...

PT-2026-26310

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in the 'My Information' screen. An authenticated attacker can inject parts of an XSS payload in the first and last name fields. The payload is executed when the full name is rendered...

The vulnerability of the raid10_sync_request() function in the drivers/md/raid10.c module of the Linux kernel driver for multiple device-based systems (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raid10syncrequest function in the drivers/md/raid10.c module of the Linux kernel’s device driver for multiple devices RAID and LVM is related to display errors when reporting resource status due to inconsistent checks. Exploiting this vulnerability can allow an attacker t...

The vulnerability of the Golang programming language, related to insufficient resource control during its existence, allows attackers to trigger service failures.

The vulnerability of the Go programming language is related to the insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nfsd4_copy() function in the fs/nfsd/nfs4proc.c module, which is part of the NFS network file system support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nfsd4copy function in the fs/nfsd/nfs4proc.c module, which is part of the NFS network file system support in Linux kernels, stems from an improper handling of reference counts when resources are utilized. Exploiting this vulnerability could allow a attacker to cause servi...

The vulnerability of the gss_read_proxy_verf() function in the net/sunrpc/auth_gss/svcauth_gss.c module of the Linux kernel allows a remote attacker to cause a service failure.

The vulnerability of the gssreadproxyverf function in the net/sunrpc/authgss/svcauthgss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerabilities of the functions cifs_close_deferred_file() and cifs_close_all_deferred_files() in the fs/cifs/misc.c file of the Linux kernel’s file system allow a attacker to cause a service failure.

The vulnerabilities of the functions cifsclosedeferredfile and cifsclosealldeferredfiles in the fs/cifs/misc.c module of the Linux file system are related to improper memory release memory leaks. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

The vulnerability of the xive_get_max_prio() function in the arch/powerpc/sysdev/xive/spapr.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the xivegetmaxprio function in the arch/powerpc/sysdev/xive/spapr.c module, which is part of the PowerPC platform support for the Linux operating system, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the netlinkpolicydump_add_policy() function in the net/netlink/policy.c module exposes the ability for a hacker to cause a service failure. This vulnerability relates to the NETLINK interface support for session monitoring in Linux kernel.

The vulnerability of the netlinkpolicydumpaddpolicy function in the net/netlink/policy.c module related to the NETLINK session monitoring interface support in Linux kernel memory management is associated with improper memory release memory leak. Exploiting this vulnerability may allow an attacker...

Security Awareness in LLM Agents: The NDAI Zone Case

NDAI zones let inventor and investor agents negotiate inside a Trusted Execution Environment TEE where any disclosed information is deleted if no deal is reached. This makes full IP disclosure the rational strategy for the inventor's agent. Leveraging this infrastructure, however, requires agents...

Quantifying Memory Cells Vulnerability for DRAM Security

Dynamic Random Access Memory DRAM is pervasive in computer systems. Cell vulnerabilities caused by unintended phenomena forced retention failure, latency alteration, rowhammer and rowpress lead to unintended bit flips in memory. These phenomena have been explored as attacks to violate data...

The vulnerability of the soc_info() function in the drivers/tty/serial/ucc_uart.c file of the console TTY driver in the Linux kernel’s serial port allows a hacker to cause a service failure.

The vulnerability of the socinfo function in the drivers/tty/serial/uccuart.c file of the TTY console driver in the Linux kernel’s serial port module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __nfs42_ssc_open() function in the fs/nfs/nfs4file.c module, which is part of the NFS client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the nfs42sscopen function in the fs/nfs/nfs4file.c module, which is part of the NFS client support in Linux kernel, involves a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ice_reset VF() function in the drivers/net/ethernet/intel/ice/iceVFLib.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bio_poll() function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the biopoll function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer dereferencing due to poor synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Buffer Overflow Vulnerability (CNVD-2026-16617)

ImageMagick is ImageMagick open source set of open source image processing software. Can read, convert or write images in a variety of formats. ImageMagick suffers from a buffer overflow vulnerability that originates beyond the end of the write stack buffer when a memory allocation failure occurs...

Linux Distros Unpatched Vulnerability : CVE-2026-4426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field pzlog2bs...