CVE-2026-16232 - Authentication bypass with SmartConsole login process using application token

Symptoms - Impact: An unauthenticated attacker can obtain an application login token and use it to login via SmartConsole with full admin privileges and apply changes to the security policy and security configuration. Check Point is aware that this vulnerability is being exploited, impacting a ve...

PT-2026-61367

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: don't mix devm and drmm functions Mixing devm and drmm functions will result in a use-after-free on msm driver teardown if userspace keeps a reference on the drm device: The WB connector data will be destroyed becaus...

PT-2026-61424

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x overclock xxx put In the pcm512x chipset driver, pcm512x overclock xxx put is defined as a general mixer kcontrol instead of a DAPM kcontrol, so struct snd soc dapm conte...

PT-2026-61469

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu debug is enabled Sashiko noticed a latent bug where the map error flow called iommu unmap which calls iommu debug unmap begin/iommu debug unmap end however since this is an error path the map...

PT-2026-61488

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm runtime leak on mutex lock failure If tegra i2c mutex lock fails, the function returns without calling pm runtime put, leaking the runtime PM reference acquired by the preceding pm runtime get sync. This preven...

PT-2026-61246

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix DMA fence leak in iio buffer enqueue dmabuf iio buffer enqueue dmabuf allocates a struct iio dma fence 104 bytes, kmalloc-128 via kmalloc obj+dma fence init, which sets the initial kref to 1. It then calls dma re...

PT-2026-61268

In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zram writeback endio A crash was observed in zram writeback endio due to a NULL pointer dereference in wake up. The root cause is a race condition between the bio completion handler zram writeback endi...

PT-2026-61267

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr pages to 1 at loop start in try to unmap one Initialize nr pages to 1 at the start of each loop iteration, like folio referenced one does. Without this, nr pages computed by a previous folio unmap pte batch...

PT-2026-61374

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afs get link The afs filesystem in the kernel doesn't do locking correctly for symbolic links. There are a number of problems: 1 It doesn't do any locking around afs read single to prevent races betwe...

PT-2026-61436

In the Linux kernel, the following vulnerability has been resolved: l2tp: use list del rcu in l2tp session unhash An unprivileged local user can pin a host CPU indefinitely in l2tp session get by ifname by issuing L2TP CMD SESSION GET on L2TP ATTR IFNAME concurrently with L2TP CMD SESSION CREATE...

PT-2026-61443

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT OP ADD EXT ADV DATA is registered as a variable-length command, with MGMT ADD EXT ADV DATA SIZE as the fixed header size. The handler then uses cp-adv data len a...

PT-2026-61472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ath11k wifi driver where memory leaks occur during certain WMI WOW calls. The problem arises because the return value of the ath11k wmi cmd send function is return...

CVE-2026-16131

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

CVE-2026-16131

CVE-2026-16131 affects itsourcecode Hospital Management System 1.0. The vulnerability is a SQL injection in the /prescriptionrecord.php file, triggered by the delid parameter. Exploitation is possible remotely, and public exploit access is indicated. The entry provides CVSS metrics (e.g., CVSS 3....

EUVD-2026-45392

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

CVE-2026-16131 itsourcecode Hospital Management System prescriptionrecord.php sql injection

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

PT-2026-60980

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to...

Oracle Linux 10 : pcs (ELSA-2026-19008)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19008 advisory. - Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.24.3 Resolves: RHEL-164079 Tenable has extracted the preceding description block directl...

CVE-2026-52203

An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter...

CVE-2026-14979 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...