CVE-2026-76216 Vikunja through 2.4.0 Principal-Type Confusion via LinkSharing

Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are treated as user principals with users.id == N at three permission checks lacking type guards. Attackers with a link-share JWT can remove victims from teams, enumerate and delete vict...

EUVD-2026-62454

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cook...

MINI-WVG2-F9XQ-2JP6

Bulletin has no description...

MINI-7GH2-476G-3Q2P

Bulletin has no description...

CVE-2026-51539

A flaw was found in libmodbus. This Denial of Service DoS vulnerability exists in the receive loop when the software is running on Windows. The issue is caused by improper timeout management during network read operations, which can allow a remote attacker to cause the application to become...

CVE-2026-70421

Dell OpenManage Enterprise versions prior to 4.7.0 contain an Improper Privilege Management vulnerability exploitable by a high-privileged remote attacker for privilege escalation. CVSS 3.1 base score is 7.2 (HIGH). Patch to 4.7.0; see Dell DSA-2026-359 advisory. No public exploitation evidence p...

CVE-2026-70421

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-62432

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-74353

A flaw was found in the drm/amdkfd component of the Linux kernel. This vulnerability occurs when the system fails to properly resume all queues after a suspend operation, even if some suspend operations fail. An attacker could potentially exploit this by triggering a scenario where queue removal...

CVE-2026-74402

A flaw was found in the Linux kernel's atmel-sha204a cryptographic hardware random number generator HWRNG driver. Improper buffer management in both blocking and non-blocking paths causes the driver to fail in providing valid entropy. This occurs because the buffer is read starting from byte 1, a...

ROOT-APP-NPM-CVE-2026-13697 CVE-2026-13697 in undici - Patched by Root

Root has patched CVE-2026-13697 in the undici package for Root:npm. Multiple fixed versions available...

CVE-2026-74380

A flaw was found in the Linux kernel's host1x GPU driver. An incorrect return value check in the iommumapsgtable function, coupled with an improper integer assignment in pinjob, could lead to negative value overflows. This vulnerability may result in data integrity issues or system instability...

BIT-KIBANA-2026-72655 Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification

Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...

BIT-ELK-2026-72655 Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification

Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...

CVE-2026-72372

A flaw was found in the AFS Andrew File System component of the Linux kernel. This vulnerability arises from insufficient locking mechanisms when modifying internal data structures related to dynamic inode management. An attacker could potentially exploit this weakness, leading to system...

CVE-2026-19416 KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR

The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level users to cancel and reschedule other patients' appointments...

EUVD-2026-62261

The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contributor-level access and above to alter or delete schedule entries created by other users...

CVE-2026-72224

A flaw was found in the Linux kernel's nvdimm/btt module. During the initialization of the Block Translation Table BTT via bttinit, memory allocated for arenas is not properly released if an error occurs. This oversight can lead to a memory leak, potentially impacting system stability or...

CVE-2026-72143

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST power management component for x86 platforms. When a system resumes from suspend, the SST-PP control settings for all power domains are not fully restored, affecting only power domain 0. This occurs due to an incorrect base...

CVE-2026-72009

A flaw was found in the Linux kernel. The MIPI DSI Display Serial Interface and CSI Camera Serial Interface power domains share control bits for clock and reset. This improper resource management allows one domain to disable shared resources while the other is still active, leading to incorrect...