CVE-2026-75466

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12 or tj3LoadImage16 using the default pixel format, the application may trigger a division-by-zero in allocsarray,...

Duplicate Advisory: Allowlisted pickle loaders still permit code execution in current source

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x99w-6fgc-pmfw. This link is maintained to preserve external references. Original Description NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust...

EUVD-2026-65293

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

The vulnerabilities of the functions symlink_data() and smb2ParseSymlinkResponse() in the fs/smb/client/smb2file.c file from the Smb file system of the Linux operating system allow a attacker to gain access to protected information or cause service failures.

The vulnerability of the functions symlinkdata and smb2ParseSymlinkResponse in the fs/smb/client/smb2file.c module of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

The vulnerabilities of the functions brcmf_ops_sdio_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c), brcmf_pcie_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c), and brcmf_usb_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c) in the Broadcom wireless adapter driver software for Linux operating systems, allowing a hacker to cause system failures.

The vulnerabilities of the functions brcmfopssdioprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c, brcmfpcieprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c, and brcmfusbprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c in Broadcom wireless adapter drivers i...

EulerOS Virtualization 2.13.0 : glibc (EulerOS-SA-2026-3212)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the...

The vulnerabilities of the functions iavf_get_sset_count() and iavf_get_ethtool_stats() in the driver/net/ethernet/intel/iavf/iavf_ethtool.c file of the Ethernet network adapter driver for Linux kernel allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions iavfgetssetcount and iavfgetethtoolstats in the driver/net/ethernet/intel/iavf/iavfethtool.c file of the Ethernet network adapter driver for Intel-based Linux operating systems are related to the occurrence of operations outside the buffer in memory. Exploitin...

The vulnerabilities in the functions tb_dp_dprx_work() and tb_dp_dprx_stop() of the drivers/thunderbolt/tunnel.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions tbdpdprxwork and tbdpdprxstop in the drivers/thunderbolt/tunnel.c module, a common support module for USB4 and Thunderbolt in Linux operating systems, stems from the reutilization of previously freed memory due to competitive access to resources during a “race...

EulerOS Virtualization 2.13.1 : glibc (EulerOS-SA-2026-3172)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the...

CVE-2026-71933 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

CVE-2026-71933 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

EUVD-2026-64992

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

CVE-2026-71933

DrayTek VigorSwitch (multiple models) is affected by unauthorized operation vulnerabilities in its syslog functions , caused by missing authorization checks . A remote unauthenticated attacker can send crafted requests to modify configuration , restart services , save startup configuration , or c...

CVE-2026-74636

A flaw was found in the Linux kernel. A race condition exists between the updateeventfields and eventdefinefields functions within the tracing subsystem. A local user, by loading specific modules, could exploit this unprotected access to kernel fields. This could lead to a kernel panic, resulting...

Improper Authorization

Keycloak is vulnerable to Improper Authorization. The vulnerability is due to missing authorization checks in name-based admin REST API endpoints for composite role management, which allows a delegated administrator with manage-realm permissions to remove essential child roles from built-in admin...

Improper Authorization

Keycloak is vulnerable to Improper Authorization. The vulnerability is due to flawed group policy evaluation using a text-based prefix check for group membership, which allows a user belonging to a similarly named but unauthorized group to bypass access controls and gain unauthorized access to...

CVE-2026-47735

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

CVE-2026-47735 Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

EUVD-2026-64191

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

CVE-2026-47735 Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...