CVE-2026-89472

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

UBUNTU-CVE-2026-89472

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

CVE-2026-68535

Concrete CMS versions 9.2.0 through 9.5.2 are affected by a missing authorization check in the Area REST API block-create endpoint. The endpoint failed to invoke the block type controller's validate() method, which is responsible for authorizing referenced files against the user's file-manager vi...

CVE-2026-68535 Concrete CMS 9.2.0 to 9.5.2 is vulnerable to Missing authorization in the Concrete CMS Area REST API block-create path letting an editor reference files outside their file-manager permissions

Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate method on submitted data, which, for file-referencing blocks such as heroimage and gallery, is where the referenced file is authorized against the user's file-manager...

CVE-2026-68535 Concrete CMS 9.2.0 to 9.5.2 is vulnerable to Missing authorization in the Concrete CMS Area REST API block-create path letting an editor reference files outside their file-manager permissions

Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate method on submitted data, which, for file-referencing blocks such as heroimage and gallery, is where the referenced file is authorized against the user's file-manager...

CVE-2026-89472 power: supply: charger-manager: register regulators before exposing sysfs

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

CVE-2026-89472

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

EUVD-2026-76378

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

CVE-2026-89472 power: supply: charger-manager: register regulators before exposing sysfs

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...

CVE-2026-89472

CVE-2026-89472 is a use-after-free vulnerability in the Linux kernel's power supply charger-manager driver. The root cause is a race condition in the device removal and probe-error paths: charger regulators are freed via regulator_put() before the corresponding power_supply sysfs entries are unre...

[SECURITY] Fedora 45 Update: composer-2.10.3-1.fc45

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

Vulnerability Affecting Sentio Creator Extension 'Device Manager'

The Device Manager extension shipped with Sentio Creator is affected by CVE-2026-80469. Affected versions are pre-installed in Sentio Creator releases up to and including version 2026.2. As the Device Manager extension can be updated independently of Sentio Creator, SICK recommends applying the...

CVE-2026-89243

WWBN AVideo (through commit c3edcc27) contains a stored cross-site scripting vulnerability in UserGroups::setGroup_name(), which fails to sanitize the group_name input. An administrator holding the canAdminUserGroups permission can inject malicious HTML or JavaScript that executes in the browser ...

CVE-2026-89243 WWBN AVideo Stored XSS via UserGroups setGroup_name

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroupname that fails to sanitize groupname input. Administrators with canAdminUserGroups permission can inject malicious HTML and JavaScript that executes in...

ROOT-APP-NPM-CVE-2022-46175 CVE-2022-46175 in json5 - Patched by Root

Root has patched CVE-2022-46175 in the json5 package for Root:npm. Multiple fixed versions available...

PT-2026-90188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the charger-manager component of the power supply subsystem. The problem occurs because charger manager remove and the err reg extcon probe error path...

ROS-20260911-73-0218

The vulnerability of Google Chrome’s Password Manager component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

CVE-2026-68535: Missing Authorization

Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate method on submitted data, which, for file-referencing blocks such as heroimage and gallery, is where the referenced file is authorized against the user's file-manager...

ROS-20260911-73-0219

The vulnerability of Google Chrome’s Password Manager component is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

CVE-2026-89472: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...