CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC ステータスクロバリングによる NULL 逆参照 S2OPC Safe & Secure OPC における CVE-2026-90782 のスタンドアロン概念実証。 脆弱性 allocnotificationmessageitems S2OPC 1.7.3 以前 において: 単一の共有 status 変数が DataChange と Event の両方の割り当てに使用されている。 DataChange の割り当てが失敗し OOM / 非 OK を返す、その後の Event の割り当てが成功すると、status が SOPCSTATUSOK...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY Inspect exploited vulnerabilities and threat indicators, check their source evidence, and review retained changes. Open the live Observatory · Try the KEV walkthrough · Source coverage · Run it yourself The Observatory brings CISA KEV, ThreatFox, URLhaus, and...

ROS-20260928-73-0119

The vulnerability of the txInit function in the fs/jfs/jfstxnmgr.c file of the JFS file system in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0104

The vulnerability of the dounregisterframebuffer function in the Linux operating system’s kernel relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure or execute arbitrary code...

ROS-20260928-73-0078

The vulnerability of the tipcmonreinitself function in the Linux operating system’s kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

ROS-20260928-73-0069

The vulnerability of the besendpkttobmc function in the drivers/net/ethernet/emulex/benet/bemain.c file of the be2net network device driver in the Linux kernel is related to the swapping of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260928-73-0059

The vulnerability of the devlratenodesdestroy function in the net/devlink/rate.c module, which is part of the Linux kernel’s networking functions, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0049

The vulnerability of the fs/fuse component in Linux operating systems is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0021

The vulnerability in the sound/soc/intel/boards/bytcrrt5640.c kernel of the Linux operating system relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) – a system for controlling access to virtual environments – stems from insufficient validation of input data. This allows attackers to execute arbitrary code or trigger service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

ROS-20260928-73-0132

The vulnerability of the scangetnextrmapitem function in the mm/ksm.c component of the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0130

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0127

The vulnerability in the drivers/media/rc/imon.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0126

The vulnerability of the qmimuxrxfixup function in Linux operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260928-73-0120

The vulnerability of the fpuclearuserstates function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s x86 kernel support module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-101909: Improperly Controlled Modification of Object Prototype Attributes

Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visitor properties supplied through prototype pollution. A separate same-process prototype-pollution flaw supplies inherited...

ROS-20260928-73-0123

The vulnerability of the longhaulexit function in the drivers/cpufreq/longhaul.c module of the Linux kernel frequency scaling driver is related to the assignment of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260928-73-0052

The vulnerability of the fs/ocfs2 component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0121

The vulnerability of the ftracemoduleenable function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...