CVE-2026-80830 usb: core: Add lock to usb_wakeup_notification()

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usbwakeupnotification Add a spin lock to usbwakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and...

EUVD-2026-71411

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

CVE-2026-80768 HID: ft260: fix stack-use-after-return write in I2C read race

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

Exploit for Improper Access Control in Jishenghua Jsherp

jshERP /user/info IDOR — VulDB submission package This repo...

CVE-2026-52691

The Apache Griffin Hive Metastore Module is vulnerable to an SQL Injection vulnerability across all versions . The root cause involves the improper neutralization of special elements used in SQL commands. Because the project is retired, the maintainers do not plan to release a fix. Impacted users...

CLSA-2026-1788527318 TuxCare security update for com.mchange:c3p0 (1 CVE)

TuxCare rebuilt com.mchange:c3p0 to address 1 CVE. Fixed in 0.9.5.4-tuxcare.3...

CLSA-2026-1788524250 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.0.11-tuxcare.3...

CLSA-2026-1788522007 TuxCare security update for nuxt (1 CVE)

TuxCare rebuilt nuxt to address 1 CVE. Fixed in 3.12.3-tuxcare.8...

RHSA-2026:63165 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:63164 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:63137 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:63151 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:63129 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

CLSA-2026-1788513712 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 26 org.springframework packages to address 2 CVEs. Fixed in 6.1.4-tuxcare.4...

CLSA-2026-1788512070 TuxCare security update for transformers (1 CVE)

TuxCare rebuilt transformers to address 1 CVE. Fixed in 4.57.6.post4+tuxcare...

selinux: do not cancel a policy conversion that never started

...

ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

...

CVE-2025-15691

The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...

CVE-2026-85229

Apache SkyWalking UI versions 10.2.0 through 10.4.0 are vulnerable to a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) in the Booster UI dashboard widgets . This issue is characterized as an incomplete fix of CVE-2025-54057, involving the improper neutralization of input during web page...

CVE-2026-85229 Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...