The vulnerability of the clk_branch_wait() function in the drivers/clk/qcom/clk-branch.c file of the Linux operating system’s Samsung Exynos CPU controller driver allows a hacker to cause a system failure.

The vulnerability of the clkbranchwait function in the drivers/clk/qcom/clk-branch.c file of the Samsung Exynos Linux operating system’s clock controller driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the emulation_proc_handler() function in the arch/arm64/kernel/armv8_deprecated.c module, which is part of the ARM 64-bit kernel support for the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the emulationprochandler function in the arch/arm64/kernel/armv8deprecated.c module of the ARM 64-bit kernel support for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f2fs_fill_super() function in the fs/f2fs/super.c module of the File System Support library in Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the f2fsfillsuper function in the fs/f2fs/super.c module of the File System Support library in Linux kernel allows for a system to be exploited by exploiting a resource initialization flaw. Exploiting this vulnerability can enable an attacker to cause a service failure...

Vulnerability of the functions blk_iocost_init() (block/blk-iocost.c) and wbt_init() (block/blk-wbt.c) in the Linux operating system’s kernel, allowing a hacker to trigger a service failure

The vulnerability of the functions blkiocostinit block/blk-iocost.c and wbtinit block/blk-wbt.c in the Linux kernel is related to improper code validation for return operations. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the dasd_eckd_init() function in the drivers/s390/block/dasd_eckd.c file of the S390 block device driver on the Linux operating system’s kernel platform allows a attacker to cause a service failure.

The vulnerability of the dasdeckdinit function in the drivers/s390/block/dasdeckd.c file of the S390 block device driver on the Linux operating system’s kernel platform is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a...

The vulnerability of the netlink_ack() function in the net/netlink/af_netlink.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the netlinkack function in the net/netlink/afnetlink.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

FreeRDP Denial of Service Vulnerability (CNVD-2026-16035)

FreeRDP is an open source Remote Desktop Protocol RDP implementation library and client . A denial of service vulnerability exists in FreeRDP. The vulnerability arises because the IMA ADPCM audio decoding process does not validate the step index parameter, resulting in out-of-bounds access to the...

The vulnerability of the ep_io() function in the drivers/usb/gadget/legacy/inode.c module of the Linux USB device driver allows a hacker to cause a service failure.

The vulnerability of the epio function in the drivers/usb/gadget/legacy/inode.c module of the Linux USB device driver framework is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `snapshot_write()` and `snapshot_ioctl()` functions in the kernel/power/user.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the snapshotwrite and snapshotioctl functions in the kernel/power/user.c module of the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-6GM8-3G4H-W82M Ella Core Panics Upon NGAP handover failure

Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the NGAP handover failure message processing. An attacker can cause the service to crash and disrupt connectivity for all users by forcing a gNodeB to send NGAP handover failure messages. Remediation Upgrade...

Ella Core Panics Upon NGAP handover failure

Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers...

CVE-2026-34567

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when creating or editing blog posts within the Categories...

CVE-2026-20097

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. A...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CVE-2026-23898

Joomla! Core (com_joomlaupdate) is affected by an arbitrary file deletion vulnerability due to lack of input validation in the autoupdate server mechanism. The issue is documented across multiple sources (e.g., CVE-2026-23898, JOOMLA-1031, BIT-JOOMLA-2026-23898) and is tied to Joomla core updates...

CVE-2026-23898 Joomla! Core - [20260305] - Arbitrary file deletion in com_joomlaupdate

Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism...

CVE-2026-4370

A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform proper TLS client and server authentication. Specifically, the Juju controller's database endpoint does not validate client...

CVE-2026-33987

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A memory corruption vulnerability exists in the persistent cache handling. If a memory reallocation fails, an internal size variable is incorrectly updated, while the data pointer still refers to the original,...

CVE-2026-30312

DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on string-based parsing to validate commands; while it intercepts dangerous operators such as ;, &&, ||, |, and...