PT-2026-99085

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description When the "Automatic account link on initial logon" setting is enabled, the system binds an incoming third-party Single Sign-On SSO identity to an existing local account by matching the reported email...

PT-2026-98684

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx queue len at netlink parse time rtnl create link assigns IFLA TXQLEN directly to dev-tx queue len without going through netif change tx queue len, so a device created with "ip link add ... txqueuelen...

PT-2026-98989

Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...

ROS-20260925-73-0182

The vulnerability of the drivers/gpu/host1x components of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0090

The vulnerability of the qrtrportremove function in the net/qrtr/afqrtr.c module, which supports Qualcomm IPC cores in the Linux operating system, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

PT-2026-98360

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

CVE-2026-91119

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

CVE-2026-91119 Discourse: Encode action_code_who in mention URLs

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

EUVD-2026-86307

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

CVE-2026-91119 Discourse: Encode action_code_who in mention URLs

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

SUSE CVE-2026-66075

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, isauthorized/2 for the /federation-links/.../restart route uses isauthorizedmonitor accepts the monitoring tag, while allowedmethods permits DELETE and deleteresource/2 triggers...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-32282 DESCRIPTION: On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the...

CVE-2026-96891

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

CVE-2026-96891

A vulnerability exists in the D-Link DIR-825 router software (version 3.00b32 ) within the rp-l2tp component. The issue resides in the tunnel_set_params function of the tunnel.c file, where improper handling of the peer_hostname argument leads to an out-of-bounds write . An attacker can initiate ...

CVE-2026-96891 D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

EUVD-2026-85781

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

CVE-2026-96891 D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

Malicious Package

Overview ubiquiti-agents-link-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2026-85713

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mificonfig.bin of the component Configuration Backup Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been releas...

The vulnerability in the web interface of D-Link DAP-1360 wireless access points allows a intruder to execute arbitrary code.

The vulnerability of the web interface for managing microprogrammed wireless access points from D-Link DAP-1360 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...