CVE-2026-111044

Sunshine , a self-hosted game stream host for Moonlight, is vulnerable to an incorrect authorization issue in versions 2026.329.165800 through 2026.906.222525 . The software accepts any client certificate chained to a stored paired-client certificate without verifying that the presented certifica...

CVE-2026-111044 Disabled Sunshine clients can bypass revocation with a derived client certificate

Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certificate to be the exact enabled paired identity. Certificate...

Linux Distros Unpatched Vulnerability : CVE-2026-63963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from a device when calling svdmconsumeidentity or...

PT-2022-15230

Name of the Vulnerable Software and Affected Versions nio uring versions prior to commit df3f3bb5059d20ef094d6b2f0256c4bf4127a859 Description The issue arises from an incomplete mapping of flags in nio uring, leading to incorrect reference counts and resulting in use-after-free errors. This occur...

PT-2021-7639

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.161 Description The issue is related to a logic error in the io uring implementation, which can trigger a use-after-free vulnerability leading to privilege escalation. In the io prep async work function, the...

CVE-2017-5635

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node identity is used rather than the "anonymous" user...