EUVD-2026-70790

MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory. Attackers can supply crafted alog files with backslash sequences in variable names to escape the output directory and...

EUVD-2026-70787

MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts. Any MOOS publisher can set variable values containing script payloads that execute in the browser of operators viewing the web interface...

EUVD-2026-70781

MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCASTREQ subscriptions without validating duration or variable list limits. Attackers can register long-lived pipeways with many variables to cause pRealm to generate excessive output indefinitely, exhausting system resources...

EUVD-2026-70812

MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables. Attackers can send HTTP requests with variable names and values to the MOOSDB HTTP server port to modify MOOS variables includin...

EUVD-2026-70815

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

EUVD-2026-70811

MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...

PT-2026-85646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs attr3 leaf verify entry function accesses lentry/rentry fields, specifically namelen and valuelen, before verifying if the entry...

PT-2026-85741

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An out-of-bounds write issue exists in the RDMA/rxe component of the Linux kernel. The free rd atomic resources function iterates using the qp-attr.max dest rd atomic variable. If max dest r...

PT-2026-85630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvmet-tcp module where the nvmet tcp map data function fails to properly validate the length of Scatter Gather List SGL descriptors for non-inline transport data...

PT-2026-85640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The nfc llcp parse gb tlv and nfc llcp parse connection tlv functions contain three related bugs in their TLV Type-Length-Value parsing loops. First, the offset variable is declared as u...

PT-2026-85654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the nvmet execute identify nslist function. This occurs when a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I...

PT-2026-91320

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers nci rf discover ntf packet and nci rf intf activated ntf packet each parse a notification into an on-stack struct nci rf discover ntf / nci rf intf activated nt...

CVE-2026-80768: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the dat...

CVE-2026-80794: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an on-stack struct ncirfdiscoverntf / ncirfintfactivatedntf that is not...

CVE-2026-80813: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/O Command Set, nvmetexecuteidentifynslist is called with matchcss set...

Linux Distros Unpatched Vulnerability : CVE-2026-80731

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for...

CVE-2026-85649: Not Failing Securely

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

PT-2026-85524

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

PT-2026-85785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A busy-wait loop exists in the tipc exit net function used to wait for pending UDP bearer cleanup works to complete. This loop relies on cond resched, which may act as a NOP no operation...

PT-2026-86194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the xe oa emit oa config function fails during fence allocation, config buffer allocation, or batch submission. In these failure scenarios,...