SUSE CVE-2026-64212

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwlmldremovelink, the link-fwid is saved at the beginning of the function so we have it after we freed the link. But the link pointer can be NULL, and is...

SUSE CVE-2026-64219

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

PT-2026-64538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the isofs component when handling Rock Ridge symbolic link SL records. The functions get symlink chunk and parse rock ridge inode internal process...

Linux Distros Unpatched Vulnerability : CVE-2026-64375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace...

PT-2026-64736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component regarding Multi-Link Element MLE defragmentation. When a reconf or EPCS MLE is located in a non-transmitted profile, the defragmentation...

PT-2026-64592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the procfs component where the ptrace may access function is called without the necessary exec update lock protection. This lack of locking occurs within the following...

PT-2026-64596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the way the kernel handles process links. The functions proc pid get link and proc pid readlink perform a task lookup from the pid, execute a ptrace access...

Linux Distros Unpatched Vulnerability : CVE-2026-64219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a...

openSUSE 16 Security Update : wpa_supplicant (openSUSE-SU-2026:21415-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21415-1 advisory. This update for wpasupplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association...

CVE-2026-55971

creationtimestamp| type| source ---|---|--- 2026-07-24 23:53:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgkeq7s3y2x 2026-07-27 14:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pgxr2g2v 2026-07-28 14:07:07+00:00| seen|...

GHSA-6VCH-Q96H-7GC3

creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...

CVE-2026-48145

creationtimestamp| type| source ---|---|--- 2026-07-24 23:27:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgiw2fdhl2r 2026-07-31 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxilm2egc26...

CVE-2026-49158

creationtimestamp| type| source ---|---|--- 2026-07-24 23:13:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgi4fyong2n 2026-07-27 17:01:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnequj7z42o 2026-07-28 17:22:10+00:00| seen|...

CVE-2026-43871

creationtimestamp| type| source ---|---|--- 2026-07-24 23:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghvod3i224 2026-07-29 01:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqrz55jbh2s 2026-08-27 11:48:03+00:00| seen|...

CVE-2021-25148

creationtimestamp| type| source ---|---|--- 2026-07-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrghraizdq2l...

GHSA-M3QF-58WF-W979

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/dc8fbe1b073218955707634edeb9a32e...

CVE-2026-66039

creationtimestamp| type| source ---|---|--- 2026-07-24 22:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge3vbv4f2c...

GHSA-PVCR-8MVP-W8QR Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)

Summary The Budibase AI chat-link handoff flow GET/POST /api/chat-links/:instance/:token/handoff binds an external chat identity Slack/Discord/MS Teams/Telegram to a Budibase user account. The confirmation endpoint is on a public route no CSRF middleware, no auth-group gate and the only credentia...

CVE-2026-62379

creationtimestamp| type| source ---|---|--- 2026-07-24 21:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i 2026-07-28 18:15:20+00:00| seen| https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p 2026-07-31 13:41:33+00:00| seen|...

OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page

Description The OAuth2/OIDC consent page rendered for display=wap authorize requests reflected several request-derived values into the HTML response without escaping. An attacker who induces a user with an active OpenAM session to follow a crafted authorize link can execute arbitrary JavaScript i...