CVE-2026-90950: Protection Mechanism Failure

The Paid Membership Subscriptions WordPress plugin before 3.1.0 does not verify the reCAPTCHA on its registration handler when a form field is absent from the request, allowing unauthenticated users to create accounts without solving the reCAPTCHA the site has enabled...

CVE-2026-94251: Protection Mechanism Failure

A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue...

CVE-2026-91796: Protection Mechanism Failure

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

ROS-20260923-73-0072

The vulnerability in the drivers/media/usb/uvc/uvcdriver.c and drivers/media/usb/uvc/uvcvideo.h files of the UVC driver for the Linux operating system is related to the improper assignment of identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0091

The vulnerability of the pciepftestcleandmachan function in the driver/pci/endpoint/functions/pci-epf-test.c module of the Linux operating system’s PCI device drivers is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0013

The vulnerability of the osdmapdecode function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected...

ROS-20260923-73-0060

The vulnerability of the qla2x00probeone function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260923-73-0014

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, stems from an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow a remote attacker to...

Cisco Secure Firewall Threat Defense DTLS DoS

The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...

ROS-20260923-73-0029

The vulnerability of the drivers/net/ethernet/intel/ixgbevf component in Linux operating systems is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260923-73-0073

The vulnerability of the niwrite inode function in the fs/ntfs3/frecord.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0088

The vulnerability of the newlockspace function in the fs/dlm/lockspace.c module, which is part of the Linux kernel’s distributed locking manager support, relates to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260923-73-0027

The vulnerability of the comedibufmunge function in the drivers/comedi/comedibuf.c module of the Linux kernel is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260923-73-0031

The vulnerability of the populatefreespacetree function in the fs/btrfs/free-space-tree.c file of the Linux kernel operating system is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0035

The vulnerability of the copytoiter function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260923-73-0036

The vulnerability of the etmsetupaux function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0037

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0039

The vulnerability of the ppsregistercdev function in the Linux operating system is related to the disclosure of information in error messages. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0041

The vulnerability of the nbd component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0049

The vulnerability of the ecmbind function in the drivers/usb/gadget/function/fecm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...