PT-2026-94513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid pointer dereference occurs in the ksmbd stop durable scavenger function. This happens when ksmbd launch ksmbd durable scavenger fails to run the kernel thread, resulting in th...

PT-2026-94740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists when reading bpf link information. In the functions bpf link show fdinfo and bpf link get info by fd, the link-prog variable is accessed without proper...

PT-2026-94942

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the proc timens set offset function where the tv nsec field is not validated to be within the required range of 0, NSEC PER SEC-1 before being used in timespec64 add...

PT-2026-95018

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.26 through 2.44 Description Initializing the DNS stub resolver using a LOCALDOMAIN environment variable or an /etc/resolv.conf file containing a search list with a domain of approximately 200 characters or more causes ...

CVE-2026-90198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

PT-2026-95153

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.7.5 Description An issue exists where the file 'admin/sources/products.index.inc.php' reads rich-text fields from the $GLOBALS'RAW''POST' variable and only removes script elements before storing and rendering them...

PT-2026-94364

Name of the Vulnerable Software and Affected Versions nuxt-og-image versions 6.0.2 through 6.6.x Description An unauthenticated Server-Side Request Forgery SSRF exists when the software is used with default security settings security.strict = false and security.secret = "". The application expose...

PT-2026-94347

Name of the Vulnerable Software and Affected Versions @cyclonedx/cyclonedx-npm versions prior to 6.0.0 Description A command injection issue exists on Windows systems when the CLI is used with the --workspace option. In the fallback path within src/npmRunner.ts triggered when npm execpath does no...

PT-2026-94983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC SOF ipc4-topology component where the system fails to report errors when the number of input or output formats is zero. Specifically, the functions sof ipc4...

PT-2026-94487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the FUSE filesystem when the root inode allocation fails, typically under memory pressure. The function fuse fill super submount fails to check if th...

PT-2026-94547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mi enum attr function within the ntfs3 file system. The validation for start and end Virtual Cluster Numbers VCN for non-resident attributes is insufficient. When...

PT-2026-94532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the null blk driver where attribute store methods generated with NULLB DEVICE ATTR do not use locks when updating device configurations. Because the NULLB DEV ...

PT-2026-95144

Name of the Vulnerable Software and Affected Versions Vvveb versions 1.0.0 through 1.0.8.4 Description An authenticated user with the Editor role and editor/ permission can perform a path traversal attack. The saveGlobalElements function in admin/controller/editor/global-trait.php improperly...

PT-2026-94237

Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description An authentication bypass exists in the PGP second factor verification of the LoginControl component. The issue occurs because challenge responses are compared using loose equality against an...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-99752

A context safety grant was inherited by a template binding that never earned it, so rebinding a name the view had marked safe left the mark attached to the new, attacker-controlled value. djust's context safety channel is keyed by name, not by value. Every bind copied the value and left the grant...

PT-2026-94977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel regarding the ordering of reference and unreference operations within the perf/x86/intel/uncore component. In the uncore event cpu online function,...

Experimental Demonstration of Finite-Size General Security Via Discrete-Modulated CVQKD with Real Time Postprocessing

Continuous-variable quantum key distribution CVQKD is compatible with telecommunication infrastructure, but implementing composable security with experimentally practical resources has remained challenging, particularly for discrete-modulated DM protocols. We report the first experimental...

PT-2026-95149

Name of the Vulnerable Software and Affected Versions AI Agent Automation versions prior to 0.9.1 Description An authenticated user capable of creating or modifying workflow file steps can exploit a path traversal flaw in the executeStep file-step implementation located in...

PT-2026-99751

Five independent defects in djust's template auto-escaping cause attacker-controlled input to be rendered as live markup where Django escapes it. All four are present in shipped 1.1.0 and are fixed in 1.1.1. They share one shape: a filter or grant that escapes nothing itself and relies on the...