PT-2026-94373

Name of the Vulnerable Software and Affected Versions ash authentication versions 5.0.0-rc.10 through 5.0.0-rc.13 Description An authentication bypass by spoofing exists in the dynamic oidc strategy. This allows an attacker using one identity-provider connection to be signed in as a local user...

PT-2026-94555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer MIDI component where the snd midi input event function can run while a rawmidi substream is closing. This creates a race condition in snd rawmidi...

PT-2026-94513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid pointer dereference occurs in the ksmbd stop durable scavenger function. This happens when ksmbd launch ksmbd durable scavenger fails to run the kernel thread, resulting in th...

PT-2026-94775

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra241 cmdqv probe function where devm krealloc is used to expand the smmu variable into a larger tegra241 cmdqv structure. This process frees the original smmu...

PT-2026-94871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dax holder notify failure function. The function reads the holder ops variable twice without using READ ONCE, once for a NULL check and once for the indire...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

PT-2026-94695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture during syscall entry tracing. A tracer can manipulate the first syscall argument, which may allow it to bypass seccomp or audit checking. This...

Experimental Demonstration of Finite-Size General Security Via Discrete-Modulated CVQKD with Real Time Postprocessing

Continuous-variable quantum key distribution CVQKD is compatible with telecommunication infrastructure, but implementing composable security with experimentally practical resources has remained challenging, particularly for discrete-modulated DM protocols. We report the first experimental...

CVE-2026-86862: Improper Neutralization of Argument Delimiters in a Command

pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pgrestore and psql. libpq expands a database name containing an equals sign into a full connection string, and connection keywords embedded in that value tak...

PT-2026-95025

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0 Description A remote SQL injection exists in the /partner preference.php file. The issue occurs within the writepartnerprefs function when the education variable is manipulated, allowing an attacker...

PT-2026-94444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fuse direct write iter function where the pos variable is captured before the generic write checks function is called. For writes using the O APPEND flag, generic...

CVE-2026-15815: Improper Link Resolution Before File Access

Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, writing arbitrary files and an executable backend binary outside that directory...

CVE-2026-90248: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix teardown of an adopted proto on insert-race loss In tcnewtfilter the create branch sets tpcreated = 1 before calling tcfchaintpinsertunique. When the caller loses the race another request inserted a proto a...

PT-2026-94300

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.2.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An unauthenticated attacker can forge application log entries by submitting a password reset identity containing newlines o...

PT-2026-94462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge network component where descending VLAN and tunnel IDs can bypass the tunnel range span check. This occurs because the VLAN subtraction results in a negativ...

PT-2026-94670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OCFS2 cluster component where the o2nm node local store function fails to clear the cl has local variable when handling local=0. This creates a stale state that...

CVE-2026-90120: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

PT-2026-94734

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-200.fc44.x86 64 Description A shift-out-of-bounds issue exists in the i3c dw driver. When the ENTDAA process assigns no devices on an empty bus, the cmd-rx len variable equals master-maxdevs. This causes t...

PT-2026-94700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the mt7915 wifi driver when a probe IRQ failure happens. The hif2 reference obtained by the mt7915 pci init hif2 function is only released on error paths that...

PT-2026-94436

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth RFCOMM component where the rfcomm apply pn function accepts a Maximum Transmission Unit MTU value from a remote Parameter Negotiation PN frame without...