3357 matches found
EUVD-2026-109658
A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection. The attack can be launched remotely. The exploit is now public and...
CVE-2026-116234 Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection
A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection. The attack can be launched remotely. The exploit is now public and...
PT-2026-123205
A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection. The attack can be launched remotely. The exploit is now public and...
Important: docker
Issue Overview: The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. A crafted archive can create or overwrite files outside the intended destination. CVE-2026-171...
SUSE CVE-2026-98497
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the corresponding masks independently, but setupfteaddr6 installs each mask in...
CVE-2026-98497
A flaw was found in the Linux kernel's mlx5 network driver. When configuring IPv6 IPsec Internet Protocol Security rules with differing source and destination prefix lengths, the driver inadvertently swaps the source and destination address masks installed into hardware flow tables. This incorrec...
CVE-2026-113397
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequestcertificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launche...
CVE-2026-113397
The DrayTek Vigor2960 (version 1.5.1.6 Revision 8218) is vulnerable to a remote command injection vulnerability in the IPsec Handler component. The flaw exists within the ruequest_certificate function of the /cgi-bin/mainfunction.cgi file, where manipulation of the argument option allows for unau...
CVE-2026-113397 DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequestcertificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launche...
EUVD-2026-105016
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequestcertificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launche...
CVE-2026-113397 DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequestcertificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launche...
CVE-2026-98561
A flaw was found in the Linux kernel's Netronome Flow Processor nfp network driver. A race condition occurs when incoming Internet Protocol Security IPsec network packets are processed concurrently with the removal of security associations. Because the driver releases internal locks before securi...
PT-2026-118386
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest certificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launch...
Linux Distros Unpatched Vulnerability : CVE-2026-98497
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the...
DrayTek Vigor2960: Input validation error vulnerability
DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from the incorrect handling of parameters in the option field of the ruequestcertificate function in the /cgi-bin/mainfunction.cgi file within the IPsec Handler component. This could lead to remote...
Exploit for Write-what-where Condition in Linux Linux_Kernel
GalaxyCrash Root on a locked bootloader. No custom kernel, no O...
UBUNTU-CVE-2026-98561
In the Linux kernel, the following vulnerability has been resolved: nfp: hold IPsec RX state under the XArray lock nfpnetipsecrx drops the XArray lock before taking a reference to the xfrmstate it found. The delete path can erase the entry and drop the last state reference in that interval. RX ca...
UBUNTU-CVE-2026-98497
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the corresponding masks independently, but setupfteaddr6 installs each mask in...
EUVD-2025-26311
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote...
AZL-108786 CVE-2026-98561 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: nfp: hold IPsec RX state under the XArray lock nfpnetipsecrx drops the XArray lock before taking a reference to the xfrmstate it found. The delete path can erase the entry and drop the last state reference in that interval. RX ca...