CVE-2026-98148

A flaw was found in the Linux kernel's Generic USB Display GUD driver. This vulnerability can lead to a Denial of Service DoS if an attacker connects a malicious USB display device to the system. The driver fails to verify that the default display rotation capability is present in the device's...

CVE-2026-96795

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.exportdata in horillaviews/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes fieldtuple1, interpolates it into dynamicfnstr as Python source, and passes the generated function definition to exec. A...

CVE-2026-96795 Horilla: Authenticated RCE in Horilla List-View Export

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.exportdata in horillaviews/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes fieldtuple1, interpolates it into dynamicfnstr as Python source, and passes the generated function definition to exec. A...

CVE-2026-96795 Horilla: Authenticated RCE in Horilla List-View Export

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.exportdata in horillaviews/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes fieldtuple1, interpolates it into dynamicfnstr as Python source, and passes the generated function definition to exec. A...

BIT-GITLAB-2026-7514 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

CVE-2026-97901

The Linux kernel contains a vulnerability in the generic netlink controller where the policy dump keeps pointers to a target family's operation and policy tables in its callback state. Because Netlink only pins the module owning the dump callback (the controller's owner) rather than the target fa...

CVE-2026-97901: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables in its callback state. A dump may be split across multiple skbs and...

PT-2026-98981

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper...

CVE-2026-97177

A flaw in the Keycloak Admin REST API user update mechanism allows for a permission bypass when Fine-Grained Admin Permissions are enabled. The system fails to validate specific password reset authorizations during general user profile updates. This allows a delegated administrator —who should be...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

CVE-2026-55473 HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egress

HomeBox is a home inventory and organization system. Prior to 0.26.0, the default-on BlockBogonNets and BlockCloudMetadata notifier SSRF protections in backend/internal/sys/validate/notifierurl.go do not inspect IPv4 destinations embedded in the NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48. An...

CVE-2026-55473 HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egress

HomeBox is a home inventory and organization system. Prior to 0.26.0, the default-on BlockBogonNets and BlockCloudMetadata notifier SSRF protections in backend/internal/sys/validate/notifierurl.go do not inspect IPv4 destinations embedded in the NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48. An...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

PT-2026-96187

Name of the Vulnerable Software and Affected Versions HomeBox versions prior to 0.26.0 Description An authenticated user can trigger a Server-Side Request Forgery SSRF by submitting a generic:// notifier. The SSRF protections BlockBogonNets and BlockCloudMetadata in the file...

azure-devops-artifacts-helpers (1.0.10), deepof (>=0.1.8, <=0.1.85) +7 more potentially affected by CVE-2026-102925 via virtualenv (20.14.1)

virtualenv PYPI version 20.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.10 - deepof =0.1.8, =0.1.5, =0.30.0, =0.0.3, =1.0.1, =0.0.4, =0.3.0, =0.4.6 Source cves: CVE-2026-10292...

CVE-2026-93072

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove The driver allocates domain generic chips probe. However, on driver removal, the generic chips are not automatically freed when the interrupt domain is removed becau...

azure-devops-artifacts-helpers (1.0.10), deepof (>=0.1.8, <=0.1.85) +7 more potentially affected by CVE-2026-102938 via virtualenv (20.14.1)

virtualenv PYPI version 20.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.10 - deepof =0.1.8, =0.1.5, =0.30.0, =0.0.3, =1.0.1, =0.0.4, =0.3.0, =0.4.6 Source cves: CVE-2026-10293...

CVE-2026-90340 pinctrl: generic: free maps on pinctrl_generic_to_map() failure

In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrlgenerictomap failure pinctrlgenerictomap parses DT configuration and allocates pinctrl maps via pinctrlutilsreservemap. If subsequent steps such as pinctrlutilsaddmapmux,...

CVE-2026-90340

CVE-2026-90340 affects the Linux kernel pinctrl generic subsystem. The root cause is a memory leak in the error path of pinctrl_generic_to_map(): when subsequent operations (such as pinctrl_utils_add_map_mux(), pinctrl_generic_add_group(), or pinconf_generic_parse_dt_config()) fail after partial ...