EUVD-2025-211003

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands...

CVE-2025-51457

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands...

CVE-2026-80430: Improper Link Resolution Before File Access

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

PT-2026-98839

Name of the Vulnerable Software and Affected Versions kitty versions 0.47.0 through 0.48.x Description Improper link resolution in the drag source staging path of the drag and drop protocol allows a program writing to the terminal to create files and directories outside the staging directory. Thi...

PT-2026-99085

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description When the "Automatic account link on initial logon" setting is enabled, the system binds an incoming third-party Single Sign-On SSO identity to an existing local account by matching the reported email...

PT-2026-98684

In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx queue len at netlink parse time rtnl create link assigns IFLA TXQLEN directly to dev-tx queue len without going through netif change tx queue len, so a device created with "ip link add ... txqueuelen...

PT-2026-98989

Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...

ROS-20260925-73-0182

The vulnerability of the drivers/gpu/host1x components of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-98360

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

openSUSE 16 Security Update : amazon-ssm-agent (openSUSE-SU-2026:21884-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21884-1 advisory. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library bsc127868...

CVE-2026-91119

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

CVE-2026-91119 Discourse: Encode action_code_who in mention URLs

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

EUVD-2026-86307

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

CVE-2026-91119 Discourse: Encode action_code_who in mention URLs

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log components interpolated the free-form actioncodewho value into mention-link href attributes without URL encoding. A quote-bearing display name could...

SUSE CVE-2026-66075

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, isauthorized/2 for the /federation-links/.../restart route uses isauthorizedmonitor accepts the monitoring tag, while allowedmethods permits DELETE and deleteresource/2 triggers...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-32282 DESCRIPTION: On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the...

CVE-2026-96891

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

CVE-2026-96891 D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

EUVD-2026-85781

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...

CVE-2026-96891

A vulnerability exists in the D-Link DIR-825 router software (version 3.00b32 ) within the rp-l2tp component. The issue resides in the tunnel_set_params function of the tunnel.c file, where improper handling of the peer_hostname argument leads to an out-of-bounds write . An attacker can initiate ...