CVE-2026-76650: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

PT-2026-82930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch fq codel scheduler where qdisc tree reduce backlog is called during a peek operation before the qlen variable is restored. If qlen drops to zero while the peek...

PT-2026-82977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the driver core where the dev has sync state function reads the dev-driver variable twice without holding the device lock. This occurs during a NULL check and the...

PT-2026-82935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the wcn36xx wifi driver when processing a short trigger BA firmware response. The system only validates the response length against the size of the respon...

PT-2026-82910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero issue exists in the enetc4 default rings allocation function when distributing rings among Physical Functions PF and Virtual Functions VF. This occurs in the i.MX94 seri...

Linux Distros Unpatched Vulnerability : CVE-2026-80623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never...

PT-2026-82921

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the dwc pcie rasdes debugfs deinit function. This happens because dwc pcie rasdes debugfs init returns success even when the controller lacks RAS DES...

PT-2026-82927

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the maar res walk function. The function uses the wi-num cfg variable as an index for the fixed-size wi-cfg array but performs the capacity check only...

PT-2026-83231

Name of the Vulnerable Software and Affected Versions Vikunja versions 2.3.0 through 2.3.0-246-9852aff4 Description A user with Write but not Admin permissions on a shared child project can detach that project from its parent hierarchy. This is possible by submitting a parent project id value of ...

PT-2026-83345

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description An issue exists in the processPercentageRoyaltiesTransfer function within core/kapp/accounts/accounts.go where the royalty pool is debited from the sender using SubFromBalance only after the split...

PT-2026-83346

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description Klever-Go, a Go implementation of the Klever blockchain protocol, contains an integer overflow issue in the semi-fungible token SFT add-quantity path. In the SFTAddCirculation function within...

VulnCheck KEV: CVE-2026-16759

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up to, and including, 4.0.5 via the tutorcoursefilterajax AJAX action. This is due to missing authorization on the handler...

PT-2026-82923

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Coresight ETE Embedded Trace Extension component where system register ETMs and ETE are not preserved during CPU power down. This occurs because the ETE Device Tre...

PT-2026-82950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gc2235 probe function where error paths are handled incorrectly. If media entity pads init fails, the system calls gc2235 remove, which frees the dev variable and...

PT-2026-86690

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never documented "arm,coresight-loses-context-with-cpu" so nobody would have...

PT-2026-82967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the net/mlx5 component involving LAG and MPESW. The mlx5 mpesw work function fails to call complete when the mlx5 lag get devcom comp function returns NULL. This causes...

PT-2026-83158

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the file-iff IFF/ILBM plugin. When processing a specially crafted IFF/ILBM image file, the plugin fails to properly validate the HAM row size and incorrectly handles scenarios...

PT-2026-83018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pcpu create chunk function where the nr pages variable, representing the total contiguous backing allocation, is incorrectly used by pcpu chunk populated to set th...

PT-2026-82940

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime assertion issue exists in the cxlctl get supported features function. The system triggers a fortify panic due to a false positive buffer overflow detection where the entries...

PT-2026-82920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the iounmap function is called a second time with a NULL pointer. This occurs during the error path of the msix capability init function when msix setup interrupts...