AlmaLinux 9.2 [TuxCare] Security Update: systemd / systemd-boot-unsigned / systemd-container / systemd-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776099155)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776099155 advisory. - systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made wit...

Linux Distros Unpatched Vulnerability : CVE-2026-47492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A...

CVE-2026-102132 Kiteworks Core Privilege Escalation through Improper Access Control

An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...

CVE-2026-102132 Kiteworks Core Privilege Escalation through Improper Access Control

An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...

CVE-2026-102132

A vulnerability in Kiteworks Core allows for privilege escalation due to improper access control within an administrative import function. The system fails to verify if a requesting administrator is authorized to create the specific privileged integration credential being imported. Consequently, ...

CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

CVE-2026-102149

The Kiteworks Email Protection Gateway is vulnerable to an improper access control issue because it fails to sufficiently restrict which account a certificate can be assigned to. An attacker could exploit this to associate a certificate with another user's account, compromising the confidentialit...

CVE-2026-47492

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-100259

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

CVE-2026-47492

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47492

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47492

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47492

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability within its kernel mode layer . This flaw allows an attacker to cause improper access control , which could result in a denial of service (DoS) if successfully exploited. No specific patch versions, workarounds, or exploi...

EUVD-2026-90168

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-100259

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

EUVD-2026-90003

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...

CVE-2026-100259

In JetBrains YouTrack versions before 2026.2.18991 , an improper access control vulnerability exists within the Gantt chart functionality. This flaw allows users with view-only access to perform unauthorized edits . No specific exploit details or in-the-wild exploitation reports are provided in t...

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX 网络靶场 隔离式教育网络靶场 ，针对 CVE-2025-57819（CWE-89、CWE-288）。 兼容 FreePBX 的原创培训应用 ——并非 Sangoma 官方 FreePBX。 快速开始 git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd cve-2025-57819-freepbx-range cp .env.example .env 可选的已修补配置源： cp -a target/app target/apache...

CVE-2026-103105

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute arbitrary code as an unprivileged user on another Pexip Infinity node...