CVE-2026-4208

The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider...

CVE-2026-1323

The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploit requires write access to the directory configured at...

CVE-2026-1323 Insecure Deserialization in extension "Mailqueue" (mailqueue)

The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploit requires write access to the directory configured at...

CVE-2026-1323 Insecure Deserialization in extension "Mailqueue" (mailqueue)

The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploit requires write access to the directory configured at...

CVE-2026-1323

CVE-2026-1323 highlights an insecure deserialization flaw in the TYPO3 mailqueue extension, specifically in the TransportFailure class. An attacker could execute untrusted serialized code, but an active exploit requires write access to the directory configured by $GLOBALS['TYPO3_CONF_VARS']['MAIL...

PT-2026-25915

The GL-iNet Comet GL-RM1 KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used for this connection, allowing an attacker-in-the-middle to serve invalid client and CA certificates. The GL-RM1 will attempt to use the...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

The vulnerabilities of the functions prepare_threshold_block(), amd_threshold_interrupt(), and mce_threshold_create_device() in the arch/x86/kernel/cpu/mce/amd.c module, which are part of the Linux operating system’s x86 kernel support, allow attackers to cause system failures.

The vulnerabilities of the functions preparethresholdblock, amdthresholdinterrupt, and mcethresholdcreatedevice in the arch/x86/kernel/cpu/mce/amd.c module are related to integer overflow or cyclic shift vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to cause a...

The vulnerability of the __kasan_populate_vmalloc() function in the mm/kasan/shadow.c module, a address sanitizer for KASAN in Linux kernel, allows a malicious actor to trigger a service failure.

The vulnerability of the kasanpopulatevmalloc function in the mm/kasan/shadow.c module of the address sanitizer for Linux kernel involves mutual locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the snd_pcm_oss_sync() function in the sound/core/oss/pcm_oss.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the sndpcmosssync function in the sound/core/oss/pcmoss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-25877

Description The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploit requires write access to the directory configured at $GLOBALS'TYPO3 CONF...

The vulnerability of the smc_clc_send_confirm_accept() function in the net/smc/smc_clc.c module of the CLC-handshaking TCP socket subsystem of the SMC subsystem in the Linux operating system allows a intruder to cause a service failure.

The vulnerability of the smcclcsendconfirmaccept function in the net/smc/smcclc.c module of the CLC-handshaking TCP socket subsystem of the Linux operating system’s SMC kernel is related to the assignment of pointers due to an incorrect update of a reused resource. Exploiting this vulnerability c...

The vulnerability of the mwifiexhandle_uap_rx_forward() function in the drivers/net/wireless/marvell/mwifiex/uap_txrx.c file of the Marvell wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mwifiexhandleuaprxforward function in the drivers/net/wireless/marvell/mwifiex/uaptxrx.c file of the Marvell wireless adapter driver in the Linux operating system kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the reuseport_stop_listen_sock() function in the net/core/sock_reuseport.c module exposes support for network functions in the Linux kernel, allowing a hacker to trigger a service failure.

The vulnerability of the reuseportstoplistensock function in the net/core/sockreuseport.c module related to Linux kernel network functions is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `dw_pcie_ep_set_bar()` function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver module allows a hacker to cause a service failure.

The vulnerability of the dwpcieepsetbar function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux operating systems involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `brcmfmac/pcie.c` function in the `driver/net/wireless/broadcom/brcm80211/brcmfmac` module of the Broadcom wireless adapter driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the brcmfpcieinitRingbuffers function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c file of the Broadcom wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...

The vulnerability of the mlx5e_rq_to_ready() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5erqtoready function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect resource. Exploiting this vulnerability could allow a attacker to caus...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the WebAssembly module of Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the Tint component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the Tint component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...