1152 matches found
UBUNTU-CVE-2026-64400
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksmbdvfspathlookup enforces LOOKUPBENEATH to restrict path resolution within the share root. When a crafted path attempts to escape the share boundary using...
PT-2026-64621
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A path traversal bypass exists in the ksmbd component. The ksmbd vfs path lookup function uses LOOKUP BENEATH to restrict path resolution to the share root. While vfs path parent lookup...
CVE-2026-63862 PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In mtkpciesetupirq, the IRQ domains are allocated before the controller's IRQ is fetched. If the latter fails, the function directly returns an error, without...
CVE-2026-63862
The CVE-2026-63862 vulnerability affects the Linux kernel’s PCI subsystem for Mediatek Gen3 hardware. In mtk_pcie_setup_irq(), IRQ domains were allocated before obtaining the controller’s IRQ; if obtaining the IRQ fails, allocated domains were not cleaned up, leading to leakage. The mitigation is...
PT-2026-61179
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mtk pcie setup irq function where IRQ domains are allocated before the controller's IRQ is fetched. If the IRQ fetch fails, the function returns an error without...
CVE-2026-15943
creationtimestamp| type| source ---|---|--- 2026-07-17 14:40:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqty7cut4t27 2026-07-18 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqw6kh5sgv2j...
NPM: n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode
NPM: n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode vulnerability discovered by ? in WordPress Npm n8n-mcp versions = 2.57.3...
EUVD-2026-42723
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service DoS. If an attempt is made to subscribe to an unsupported telemetry...
CVE-2026-57032
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service DoS. If an attempt is made to subscribe to an unsupported telemetry...
Malicious code in sol-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea6f550ff0944a5125136900111863f7ec99ea46c3f2472181c87ed2b8ce8c57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files
A flaw was found in Vert.x. The Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URIs, preventing legitimate users from accessing static files with an HTTP 404 response...
CVE-2026-53337
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bonddoioctl In bonddoioctl, slavedev is obtained via devgetbyname which can return NULL if the requested interface name does not exist. However, the subsequent slavedbg call is placed...
EUVD-2026-40971
In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL pointer dereference in bonddoioctl In bonddoioctl, slavedev is obtained via devgetbyname which can return NULL if the requested interface name does not exist. However, the subsequent slavedbg call is placed...
CGA-QCMG-F84R-GH65
Bulletin has no description...
PT-2026-54806
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add NULL check for of reserved mem lookup in airoha qdma init hfwd queues of reserved mem lookup may return NULL if the reserved memory region referenced by the "memory-region" phandle is not found in the reserved...
io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files
A flaw was found in Vert.x. The Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URIs, preventing legitimate users from accessing static files with an HTTP 404 response...
SUSE CVE-2026-53320
In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject zero bdoblocknr in nilfsioctlmarkblocksdirty nilfsioctlmarkblocksdirty uses bdoblocknr to detect dead blocks by comparing it with the current block number bdblocknr. If they differ, the block is considered dead and...
CVE-2026-53302
In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip93hmacsetkey allocates a temporary ahash transform for computing HMAC ipad/opad key material. The allocation uses the driver-specific cradrivername e.g. "sha256-eip93" but passes...
CVE-2026-53281
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Commit 60f030f7418d "iommu/vt-d: Avoid use of NULL after WARNONONCE" fixed a NULL pointer dereference in an unlikely situation partly. If devpasid is not found in...
GO-2026-5649 Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action` in github.com/hahwul/dalfox
Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via found-action in github.com/hahwul/dalfox...