kernel: selinux: fix overlayfs mmap() and mprotect() access checks

A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...

PT-2026-69971

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description A symlink-following flaw exists in the virFileChownFiles function. A local attacker operating as the confined swtpm user can place a symbolic link in the swtpm state directory to trick the...

PT-2026-69394

Name of the Vulnerable Software and Affected Versions libcodec2 sec flacdec.so versions prior to SMR Aug-2026 Release 1 Description Improper input validation in the libcodec2 sec flacdec.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds write occurs when...

CVE-2026-19372

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...

CVE-2026-19368 PV-Bhat gemsuite-mcp gemini_search unified-gemini.ts path traversal

A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the file src/handlers/unified-gemini.ts of the component geminisearch/geminireason/geminiprocess/geminianalyze. The manipulation of the argument filepath/filepaths results in path...

CVE-2026-19368

PV-Bhat gemsuite-mcp 1.0.0 contains a path traversal vulnerability in src/handlers/unified-gemini.ts (component chain gemini_search/gemini_reason/gemini_process/gemini_analyze). The issue arises from manipulation of the argument file_path/file_paths, which can be exploited from a local position. ...

CVE-2026-19326

CVE-2026-19326 affects Jevon-Zhong Ai-doctor 0.0.1. The vulnerability is in the deleteImage function of ai-doctor-server/src/filemanagement/filemanagement.service.ts, where manipulating the imagePath argument enables path traversal. Local access is required. The project was informed via an issue ...

EUVD-2026-54853

A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated...

CVE-2026-19326 Jevon-Zhong Ai-doctor filemanagement.service.ts deleteImage path traversal

A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated...

PT-2026-69315

Name of the Vulnerable Software and Affected Versions Nikolaibibo claude-comfyui-mcp version 1.0.0 Description A path traversal issue exists in the comfy upload image component within the src/tools/utils.ts file. The copyFileSync function does not properly validate the image path argument, allowi...

PT-2026-69255

Name of the Vulnerable Software and Affected Versions bazylhorsey obsidian-mcp-server version 1.0.0 Description A path traversal issue exists in the readCanvas and writeCanvas functions within the src/services/CanvasService.ts file. This flaw allows a local attacker to access or modify files...

PT-2026-69200

Name of the Vulnerable Software and Affected Versions astralisone rive-mcp-server-core versions up to db1d0cc4cd52589116360428b7504fd0ca748b3e Description A path traversal issue exists in the importRiveFile Flow component within the file packages/mcp-server/src/tools/importRiveFile.ts. A local...

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

EUVD-2026-54645

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-66151

SonicWall Global VPN Client versions 4.10.8.1108 and earlier are vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver. This vulnerability could allow a local attacker to trigger a system crash . To remediate this flaw, it is recommended to update the SonicWall Global VPN Cl...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...