JetBrains YouTrack < 2026.2.18634 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18634. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation. CVE-2026-86482 - In JetBrains YouTrack befo...

ALSA-2026:66355 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

PT-2026-89408

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharing group id. The instantiation path passed that value into event creation without verifying that the user...

PT-2026-89361

A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read wit...

JetBrains YouTrack < 2026.1.14047 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.1.14047. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

CVE-2026-71645

The Robotics-STAR-Lab (SYSU STAR Group) RACER software is vulnerable to a denial of service (DoS) attack. The issue specifically resides in the exploration state machine of the affected system. This vulnerability impacts the version identified by commit abcdef1234567890 . The provided documents d...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

CVE-2026-84828: Incorrect Permission Assignment for Critical Resource

A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read wit...

RHEL 10 : kernel (RHSA-2026:66355)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66355 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after...

CVE-2026-87931

A buffer overflow vulnerability exists in the Apple Notification Center Service Event Handler component of the Behavioral Technology Group Pavlok Behavioral Conditioning Wearable , affecting versions up to 20260707. The attack requires the attacker to be within the local network (adjacent network...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

CVE-2026-85484

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...

EUVD-2026-74167

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...

CVE-2026-85484 HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping

HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...

CVE-2026-69717

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69717

CVE-2026-69717 is a privilege elevation vulnerability in Windows Group Policy caused by an untrusted pointer dereference . An authorized attacker with low privileges can exploit this over the network, with user interaction required, to gain high impact on confidentiality, integrity, and availabil...

EUVD-2026-73041

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

Windows Group Policy Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

WordPress B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More plugin < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass vulnerability

Unauthenticated B2B Group Assignment and Approval Bypass vulnerability discovered by Farid Narimanov in WordPress Plugin B2BKing versions 5.2.40...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...