CVE-2026-70388

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...

CVE-2026-82943 Out-of-Bounds Read via Unchecked Length Values

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An...

CVE-2026-82943 Out-of-Bounds Read via Unchecked Length Values

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An...

EUVD-2026-109659

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...

CVE-2026-70388

SOEM version 2.0.0 and earlier is vulnerable to memory corruption due to an integer underflow in message length validation. A malicious device on the network can send specially crafted messages that cause the software to perform arithmetic on length values without proper validation. This allows n...

CVE-2026-70388 Memory Corruption via Integer Underflow in Message Length Validation

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...

K000163890: Linux kernel vulnerabilities CVE-2026-46136 and CVE-2026-46138

Security Advisory Description CVE-2026-46136 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buflen is used to limit the iterations for retrieving the country power setting and may underflow under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-115825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with...

libevent: Fix of 6 CVEs

CVE-2026-63382: reject ambiguous Transfer-Encoding/Content-Length headers and require CRLF in chunked framing...

DEBIAN-CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-115825 HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-115825 HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

EUVD-2026-109562

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-115825

The HTTP::Server::PSGI component for Perl (versions before 1.0056 ) is vulnerable to a Denial of Service (DoS) condition. The root cause is a memory allocation issue where the server grows the read buffer to the size declared in the Content-Length header before data arrives. A remote attacker can...

CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-116171 SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows extended-length prefix \?\ survives filepath.Clean and matches no forbidden prefix. Authenticated API callers can prepend the prefix to localPath in /api/import/importStdMd to cop...

CVE-2026-116171 SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows extended-length prefix \?\ survives filepath.Clean and matches no forbidden prefix. Authenticated API callers can prepend the prefix to localPath in /api/import/importStdMd to cop...

CVE-2026-116171 SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix

SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows extended-length prefix \?\ survives filepath.Clean and matches no forbidden prefix. Authenticated API callers can prepend the prefix to localPath in /api/import/importStdMd to cop...