PT-2026-105501

Summary StaticFileHandler allows an unauthenticated attacker to read arbitrary files from the server's filesystem by requesting a path that resolves to a symbolic link placed inside the static root directory. Any application that serves user-uploadable content, or whose static directory is...

The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the OpenVPN module of TP-Link Archer AX53 networking hardware is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information using a specially crafted file...

CVE-2026-81310: Improper Link Resolution Before File Access

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

PT-2026-102997

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

Linux Distros Unpatched Vulnerability : CVE-2026-15815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic...

The vulnerability of the /bin/ssi file in the DHMAPI component of D-Link R95 router software allows a hacker to execute arbitrary code and completely compromise the device.

The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...

The vulnerability of the dnsmasq module in the microprogramming-based router software from TP-Link Archer AX53 allows a hacker to execute arbitrary commands.

The vulnerability of the dnsmasq module in the microprogramming-based routing software for TP-Link Archer AX53 relates to the failure to take measures to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the command-line interface (CLI) of TP-Link Archer NX200, NX210, NX500, and NX600 Wi-Fi routers allows attackers to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the command-line interface CLI of TP-Link Wi-Fi router microprogramming systems such as Archer NX200, NX210, NX500, and NX600 is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remo...

The vulnerability of the configuration of Wi-Fi router software from TP-Link, such as the Archer NX200, NX210, NX500, and NX600 models, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the configuration of Wi-Fi router microprogramming software from TP-Link, such as the Archer NX200, NX210, NX500, and NX600 models, lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality...

The vulnerability in the HTTP server software of TP-Link Wi-Fi router models such as Archer NX200, NX210, NX500, and NX600 allows attackers to enhance their privileges and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HTTP server software in Wi-Fi routers from TP-Link, such as the Archer NX200, NX210, NX500, and NX600, is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges and impact the confidentialit...

The vulnerability of the ov5647_s_ctrl() function in the drivers/media/i2c/ov5647.c module of the Linux operating system’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the ov5647sctrl function in the drivers/media/i2c/ov5647.c module of the Linux operating system’s multimedia device driver is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software allows a hacker to execute arbitrary commands.

The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...

The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.

The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the mptcp_pm_add_timer() function in the net/mptcp/pm.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2024:1728934930)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1728934930 advisory. - In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbrev even when it specifies an unsafe function, such as...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1746188134)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1746188134 advisory. - A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host...

CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777544831)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777544831 advisory. - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the lin...

AlmaLinux 9.2 [TuxCare] Security Update: python3-rpm / rpm / rpm-apidocs / rpm-build / rpm-build-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1708417063)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1708417063 advisory. - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were...

AlmaLinux 9.2 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1752088235)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752088235 advisory. - In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. CVE-2024-302...

AlmaLinux 9.2 [TuxCare] Security Update: evince / evince-devel / evince-dvi / evince-libs / evince-nautilus / etc (ALMALINUX9.2:CLSA-2026:1782485183)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782485183 advisory. - Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single- click remote code execution...