CVE-2026-19382

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19382

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19382

CVE-2026-19382 affects Almico Speedfan 4.52, specifically the KiSystemCall64 function in the speedfan.sys MSR Index Handler. The weakness can cause a memory leak when a manipulation is executed locally. The exploit is publicly available, and the vendor has not responded to disclosure. The connect...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

Linux Distros Unpatched Vulnerability : CVE-2026-68182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - comedi: comediparport: deal with premature interrupt Syzbot reported a general protection fault in comedigetissubdevicerunning, which was called from the...

PT-2026-69796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCSI core when drivers use the scsi schedule eh function to run the error handler. Due to a lack of enforced memory order between setting the host into err...

Linux Distros Unpatched Vulnerability : CVE-2026-68396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: wake eh reliably when using scsischeduleeh Drivers which use the scsischeduleeh function to run the error handler currently risk the error handler...

FreeBSD IPV6_MSFILTER Privilege Escalation

The vulnerability of the socket parameter handler IPV6MSFILTER in FreeBSD operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Ninja Forms Plugin Code Execution

The vulnerability of the NFFUAJAXControllersUploads::handleUpload function in the File Uploads extension of the Ninja Forms plugin is related to the ability to upload files of a dangerous type without restrictions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

FreeBSD File Descriptor Handler RCE

The vulnerability of the File Descriptor Handler component in the FreeBSD operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

PT-2026-69901

Name of the Vulnerable Software and Affected Versions OP-TEE OS versions prior to 4.10.0 commit 0aadfc2 Description A null pointer dereference occurs in the Widevine pseudo-TA open session handler when CFG WIDEVINE PTA is enabled. Normal World clients can trigger this by opening a session directl...

PT-2026-69907

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description The WebSocket handler in apps/dokploy/server/wss/terminal.ts validates sessions but fails to authorize access to the requested server. An authenticated user can access the /terminal?serverId=local...

PT-2026-69937

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. An authenticated organization member can obtain root terminal access and read logs or statistics for restricted servers and services. This...

PT-2026-69864

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description An authenticated user can obtain private thread message content by pairing a public...

CVE-2026-19380: Improper Update of Reference Count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

PT-2026-69324

Name of the Vulnerable Software and Affected Versions Mullvad wireguard.sys version 0.10.1 Description An issue exists in the IOCTL Handler component where the AdapterState function fails to properly update the reference count. This flaw requires local access to be exploited. Recommendations At t...

CVE-2026-68396: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsischeduleeh Drivers which use the scsischeduleeh function to run the error handler currently risk the error handler thread never waking once all commands are timed out or inactive. There...

PT-2026-69582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A general protection fault occurs in the comedi get is subdevice running function, which is called by the parport interrupt interrupt handler within the comedi parport driver. This issue...