MINI-4CGF-366W-F9XH

Bulletin has no description...

MINI-F2XW-PQ55-875G

Bulletin has no description...

MINI-6VQ6-GXWR-WC3H

Bulletin has no description...

MINI-7R75-J3MC-249J

Bulletin has no description...

ECHO-714C-15F5-A448

Bulletin has no description...

PT-2026-63499

IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules...

MINI-5F3J-4H2F-HV7Q

Bulletin has no description...

CVE-2026-63454

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution...

CVE-2026-63454

CVE-2026-63454 describes an authenticated path traversal in the AOS-CX platform. The vulnerability enables copying arbitrary files to a user-readable location via the device’s command line interface, with the potential for remote code execution. Affected component: AOS-CX OS; root cause: path tra...

CVE-2026-63454

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution...

MINI-VRPM-VQ8P-C7RH

Bulletin has no description...

glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

A flaw was found in glibc GNU C Library. The deprecated functions nsprintrrf, nsprintrr, and fpnquery do not properly validate the length of RDATA Resource Record Data in a DNS Domain Name System response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could...

Exploit for Heap-based Buffer Overflow in F5 Nginx_Plus

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Hand...

Improper Authorization

Snipe-IT is vulnerable to Improper Authorization. The vulnerability is due to improper enforcement of company boundary validation when creating locations, where an invalid parent-child company relationship is detected but not blocked, allowing authenticated users to create child locations under...

MINI-XRX7-CJ3R-6382

Bulletin has no description...

CVE-2026-63934

The CVE-2026-63934 entry describes a Linux kernel vulnerability in iio: gyro: itg3200 where i2c_read writes into the wrong stack location. Specifically, itg3200_read_all_channels() takes __be16 *buf and uses (char *)&buf for i2c_transfer(), which points to a local stack slot rather than the calle...

MINI-57RQ-58Q4-23R6

Bulletin has no description...

ECHO-E7E4-C26E-C325

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-50151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a...

DEBIAN-CVE-2026-50151

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...