PT-2026-72849

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw89 wifi driver, an issue exists in the Advanced Error Reporting AER handlers. The driver stores an ieee80211 hw pointer using pci set drvdata during probe time, but the io erro...

PT-2026-72848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the rtw88 wifi driver, an issue exists where an ieee80211 hw pointer is stored via pci set drvdata during probe time, but the io error detected and io resume functions retrieve it as ...

PT-2026-72150

Name of the Vulnerable Software and Affected Versions Cookie Banner for GDPR / CCPA – WPLP Cookie Consent versions prior to 4.3.6 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrar...

PT-2026-72880

Name of the Vulnerable Software and Affected Versions TrueBooker versions prior to 1.2.7 Description The plugin is susceptible to account takeover because the add front user update AJAX handler is accessible to unauthenticated users. The handler accepts an arbitrary truebooker wp user id value an...

PT-2026-72876

Name of the Vulnerable Software and Affected Versions Wholesale Market versions prior to 2.2.3 Description The Wholesale Market plugin for WordPress allows authenticated users with Subscriber-level access or higher to escalate their privileges to Administrator. This occurs when the site...

PT-2026-72572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The driver for the ts4800 irqchip fails to clear a chained handler for the parent interrupt during the removal process. This occurs because the driver uses irq set chained handler and da...

PT-2026-72322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the spi uniphier driver, the devm request irq function is called before the completion used by the interrupt handler is initialized. Since an interrupt can occur immediately after the...

PT-2026-72334

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dmaengine component for rz-dmac where the interrupt request is made before the system is fully configured. Because the interrupt handler can execute immediately up...

PT-2026-72642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the i3c hci addr to dev function within the MIPI I3C HCI component. The function traverses bus-devs.i3c, which is protected by bus.lock a read-write semaphore...

PT-2026-72234

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the octeontx2-af driver where the rvu mbox handler lmtst tbl setup function uses the req-base pcifunc payload field as a direct index into the LMT map table. Because...

CVE-2026-74309: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vdpa/octeonep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in octhw-irqs instead of assuming irq - irqs0. This supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs0 is not the ba...

CVE-2026-72384: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using irqsetchainedhandleranddata, but the remove function does not clear this handler. Thi...

CVE-2026-15303: Improper Authentication

The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.27.0. This is due to the sixstoragecreatewpuser AJAX handler being registered on wpajaxnoprivsixstoragecreatewpuser without any nonce, capability, credential, or ownership...

CVE-2026-74420: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Reject VMAs with VMIO or VMPFNMAP when creating SVM ranges VMAs marked with VMIO or VMPFNMAP are not backed by struct page objects, which GPUSVM requires in order to operate correctly. In particular, getpages relies o...

PT-2026-72162

Name of the Vulnerable Software and Affected Versions ECS WordPress plugin versions prior to 4.3.8 Description Insufficient capability and object-ownership checks in Dynamic Repeater AJAX handlers allow a user with Contributor privileges to inject data-source bindings into any post, including tho...

PT-2026-72144

Name of the Vulnerable Software and Affected Versions 6Storage Rentals versions prior to 2.27.1 Description An authentication bypass exists that allows unauthenticated attackers to log in as any existing WordPress user, including administrators. The issue occurs because the six storage create wp...

Linux Distros Unpatched Vulnerability : CVE-2026-72384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/ts4800: Fix missing chained handler cleanup on remove The driver installs a chained handler for the parent interrupt during probe using...

Linux Distros Unpatched Vulnerability : CVE-2026-72146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the...

PT-2026-72781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/siw component regarding endpoint and socket association handling. Disassociating a socket from an endpoint using the siw socket disassoc function may release...

PT-2026-72329

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13 Description An issue exists in the i2c imx driver where the interrupt-driven block-read state machine incorrectly handles a Block Read byte count of 0. In this scenario, the system rejects the request as...