EUVD-2026-57066

The Intel ALH digital-audio-interface driver function daialhgetproperties in drivers/dai/intel/alh/alh.c used a caller-supplied int streamid with no range validation. The value indexes the fixed-size static const uint8t alhhandshakemap64 array and scales a FIFO register address, so an out-of-rang...

CVE-2026-66878

A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Namespace field, the user can cause the system to cop...

ECHO-C0E9-A477-5A84

Bulletin has no description...

PT-2026-71110

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A bundle writer may create misleading release promotion information under specific conditions. Recommendations At the moment, there is no information about a newer version that...

PT-2026-71232

CVE: This vulnerability corresponds to CVE-2026-72790. Relationship to GHSA-8x84-r2ff-h8pq please read first getNotebookInfo is named in the earlier advisory GHSA-8x84-r2ff-h8pq, in its remediation section, which asked for reader filtering on both getNotebookConf and getNotebookInfo. Commit...

PT-2026-71128

A low-privileged authenticated user may access restricted support information under specific conditions...

PT-2026-70980

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The Intel ALH digital-audio-interface driver contains an issue where the dai alh get properties function in drivers/dai/intel/alh/alh.c fails to validate the range of the caller-supplied strea...

Linux Distros Unpatched Vulnerability : CVE-2026-73433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length...

CVE-2026-62899

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

MINI-P3RR-X9V8-424X

Bulletin has no description...

Malicious code in telebot-pro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e8fd9df00738115f53aef8944ede8d1f3d2daf360c2d227b54204ee62e8f89 On instantiation of TeleBot, the package spawns a background thread that copies the Telegram Desktop tdata directory from %APPDATA%\Telegram...

CVE-2026-73224

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...

CVE-2026-73224

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...

CVE-2026-73224

Electerm prior to 3.15.120 is affected. A crafted FTP/SFTP server can cause arbitrary command execution when a user downloads a folder and uses Properties/Calculate Size because calcLocal in src/client/components/sftp/file-info-modal.jsx inserts the server-controlled folder name into a du -sh she...

CVE-2026-48381

creationtimestamp| type| source ---|---|--- 2026-08-11 18:25:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ldzcdyflfkli 2026-08-11 20:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstfpfx23o2o...

CVE-2026-70318

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-62720

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-59131

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The LDAPStoreHelper implementation fails to properly neutralize special elements in user-supplied input before incorporating them into LDAP queries. This allows a remote attacker to execute an LDAP injection attack by supplying...