Linux Distros Unpatched Vulnerability : CVE-2026-31471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: iptfs: only publish modedata after clone setup iptfsclonestate stores x-modedata before allocating the reorder window. If that allocation fails, the code...

Linux Distros Unpatched Vulnerability : CVE-2026-31445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: avoid use of half-online-committed context One major usage of damoncall is online DAMON parameters update. It is done by calling damoncommitctx...

CVE-2026-35902

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication parameters, an unauthenticated attacker can cause the RTSP service to enter a persistent authentication...

CVE-2026-31689

The CVE-2026-31689 issue affects the Linux kernel EDAC/mc path: edac_mc_alloc() may call put_device() during an error path before device_init completes, causing a kobject initialization/cleanup hazard and in-kernel MCE decoding symptoms. The fix reorders the initialization so the device (and its ...

CVE-2026-41467

ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName function fails to restrict HTML and HTM file uploads. Authenticated attackers can upload HTML files containing arbitrary JavaScript through the...

CVE-2026-41466

ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText function within Security.php that fails to properly sanitize user input by only detecting specific patterns while returning unsanitized strings without output encoding. Attackers ca...

CVE-2026-41081 Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failure

Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport is enabled in Apache Storm without requiring client certificate authentication the default configuration, the...

CVE-2026-35902

The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication parameters, an unauthenticated attacker can cause the RTSP service to enter a persistent authentication...

The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework lies in the uncontrolled distribution of memory resources, which allows a malicious actor to trigger a service failure.

The vulnerability of adding additional tools and integration libraries for the Go language-based OpenTelemetry framework is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the kfd_process_device_init_vm() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the kfdprocessdeviceinitvm function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mwifiex_process_mgmt_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mwifiexprocessmgmtpacket function in the Linux operating system is related to a numerical reduction in significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `of_node_put()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ofnodeput function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the percpu_init_rwsem() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the percpuinitrwsem function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s Wi-Fi kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s Wi-Fi kernel component is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the sendmsg() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the debugfs_lookup() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the debugfslookup function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the follow_automount() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the followautomount function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the acpi_get_dsd_graph() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the acpigetdsdgraph function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the run_bpf_prog() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the runbpfprog function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ioctl() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ioctl function in the Linux operating system’s kernel is related to the handling of zero pointers. Exploiting this vulnerability can allow an attacker to trigger a service failure...