PT-2026-93439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the rpcrdma module during notification registration. The function rpcrdma rn register inserts the rn object into the rd xa xarray using xa alloc before assigni...

PT-2026-93339

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An unauthenticated remote attacker can exploit an authentication bypass in the account log function to gain administrative access, regardless of whether accounts...

PT-2026-94109

Name of the Vulnerable Software and Affected Versions Craft CMS versions 4.8.0 through 4.18.5 Craft CMS versions 5.0.0 through 5.10.12 Description An issue exists where the software signs an authenticated user's attacker-controlled license-shun cookie using the same key and format used to validat...

PT-2026-93751

Name of the Vulnerable Software and Affected Versions RestrictedPython versions prior to 8.4 Description A sandbox escape is possible when a custom import policy or globals expose the standard library string module, the string.Formatter class, a Formatter instance, or a Formatter subclass to...

PT-2026-93228

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web core/src/v0 9/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible...

CVE-2026-76551: Improper Control of Generation of Code

The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported field values, allowing users granted its export permission to have arbitrary functions invoked on values they control, leading to remote code execution...

PT-2026-93277

The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported field values, allowing users granted its export permission to have arbitrary functions invoked on values they control, leading to remote code execution...

CVE-2026-89795: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: PCI: Allow per function PCI slots to fix slot reset on s390 On s390 systems, which use a machine level hypervisor, PCI devices are always accessed through a form of PCI pass-through which fundamentally operates on a per PCI...

CVE-2026-92779: Improperly Controlled Modification of Object Prototype Attributes

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...

PT-2026-93660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the usb put function instance function. This happens when the function attempts to dereference the fd variable within the fi structure to retrieve th...

PT-2026-93858

Name of the Vulnerable Software and Affected Versions ChangeWeDer crm affected versions not specified Description A security flaw allows remote attackers to bypass authorization. The issue resides in the index function within the UserController.java file of the...

PT-2026-93257

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 10.0.9 Description The software uses the PHP rand function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs. Because rand is not a cryptographically secure generator, remote...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38588)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to improper access control. This vulnerability stems from improper access control in the keepAlive function. Attackers can exploit this vulnerability by sending specially crafted MQTT...

PT-2026-93264

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

heap-havoc

heap-havoc The classic "house of unlink" heap exploitation te...

CVE-2026-76864

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

CVE-2026-10144

Rsbuild before 2.0.9 contains a command injection vulnerability in the openBrowser() function (packages/core/src/server/open.ts). The function passes a URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(). Because encodeURI() does not encode dolla...

CVE-2026-81238

Dell Wyse Management Suite , versions prior to 2605.0.3.683 , is vulnerable to a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this flaw to gain Unauthorized access to the system. Remediation is available through security ...

CVE-2026-55690

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, EmbedServiceFactory::newFromName in includes/EmbedService/EmbedServiceFactory.php interpolates an...

CVE-2026-55690

CVE-2026-55690 affects the EmbedVideo MediaWiki extension (StarCitizenWiki) prior to version 4.1.0 . The root cause is in EmbedServiceFactory::newFromName, which interpolates an attacker-controlled unknown service name into an exception message via sprintf, and EmbedVideo.php returns that text as...