MINI-CHCJ-VV63-6FCQ

Bulletin has no description...

MINI-729C-C9W4-QVX4

Bulletin has no description...

MINI-6C5Q-XQ57-8QWM

Bulletin has no description...

CVE-2026-70630

A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability in the native Screenpresso decoder allows attackers to recover sensitive memory contents. This occurs when a crafted SPV1 packet with a valid zlib stream is supplied, causing the screenpressodecodeframe function to fail i...

MINI-Q53C-2FQ2-22R3

Bulletin has no description...

MINI-WRF7-PQWQ-C989

Bulletin has no description...

MINI-76RF-C7W5-8G5V

Bulletin has no description...

MINI-GMX2-C4VW-66HM

Bulletin has no description...

MINI-22XR-PHJ3-FRW8

Bulletin has no description...

MINI-2C62-CCQ4-9RMH

Bulletin has no description...

MINI-C527-3VH2-VQGC

Bulletin has no description...

CVE-2026-73515

A flaw was found in PostGIS. This out-of-bounds read vulnerability allows a remote attacker to cause memory disclosure or a server crash. This occurs when a malformed FlatGeobuf buffer is supplied, as the FlatGeobuf property metadata decoder fails to verify that the string body is contained withi...

CVE-2026-73569

A flaw was found in fast-xml-parser. A remote attacker could exploit this by submitting a specially crafted XML document containing multiple DOCTYPE declarations. These repeated declarations can reset internal entity expansion limits during parsing. This can lead to excessive CPU usage, event-loo...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

AZL-95888 CVE-2026-58224 affecting package samba 4.18.3-2

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

CVE-2026-56860

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2026-13198 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-13198

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-13198

CVE-2026-13198 affects KUNBUS piControl (version 2.6.2) with a race condition in the event-notification path. Nozomi Networks reports CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization, enabling a local authenticated attacker to corrupt kernel heap and event-list st...

EUVD-2026-58675

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...