EUVD-2026-76162

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value in the tarfile when extracting an archive containing a link on systems that do not support links. An attacker can create or modify arbitrary files on the system by bypassing intended security restrictions during t...

PT-2026-96491

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntb transport tx enqueue drop packets submitted while the QP link is down, but it only return...

CVE-2026-80988: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

ROS-20260911-73-0202

The vulnerability of the Link Preview function in browsers such as Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

PT-2026-89805

Name of the Vulnerable Software and Affected Versions Sogou Input Method versions prior to 16.3.0.3498 Description A critical issue in the Windows version of Sogou Input Method allows a remote attacker to execute arbitrary code via a one-click attack. The flaw is exploited by the UNC3569 threat...

PT-2026-90005

Name of the Vulnerable Software and Affected Versions Python tarfile affected versions not specified Description When extracting a link on a system that does not support links, the software falls back to extracting a member from the archive. During this process, the filter function is executed...

PT-2026-96612

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-54165: Improper Neutralization of Input During Web Page Generation

Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting XSS vulnerability in the public, unauthenticated shared-folder image gallery. A file's name is fully attacker-controlled and is never...

Oracle Linux 9 : ELSA-2026-66203-0: / python3.12-lxml (ELSA-2026-662030)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-662030 advisory. 4.9.3-2.1 - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488 Tenable has extracted the preceding description block...

PT-2026-90118

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the ntb transport tx enqueue function where packets submitted while the QP link is down are not properly handled. The function returns 0, which indicates success, without...

PT-2026-90116

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An out-of-bounds access issue exists in the net/smc component during the handling of SMC-Rv2 LLC messages. On links where the device has max recv sge set to 1, there is no shared v2 receive...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107311 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error...

CVE-2026-3096

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowing interaction between the two browser contexts when navigating to external destinations. This vulnerability could all...

CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

EUVD-2026-75751

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

CVE-2026-19136

A potential command injection vulnerability affects the Tianxi AI Agent PC Application , distributed exclusively in the Chinese market. If a local user opens a specially crafted link handled by the application, it could allow execution of operating system commands, resulting in high impact to con...

CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...