35401 matches found
CVE-2026-68119
The CVE-2026-68119 issue concerns the Linux kernel TCP-AO implementation: when constructing standalone TCP responses with TCP-AO options, the TCP header padding is not fully initialized if the MAC length is not four-byte aligned. The function tcp_ao_hash_hdr() writes only the MAC, leaving 1–3 pad...
CVE-2026-72568
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
UBUNTU-CVE-2026-72568
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
PYSEC-2026-3650 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
Summary Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...
CVE-2026-72568
Removed by vendor...
CVE-2026-72568
Red Hat CNA-LR concluded this CVE is not valid; no patch, advisory, or technical details are present in any connected document, so this CVE ID is rejected/not used and does not represent an active vulnerability entry.
CVE-2026-21070
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...
Improper Input Validation
Apache Camel IRC component is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of IRC control headers, where attacker-controlled irc. headers from untrusted HTTP requests can override the intended message destination, allowing unauthorized message...
CVE-2026-66404
The CVE-2026-66404 issue affects DEEBOT PRO M1 and DEEBOT PRO K1VAC where the MQTT client does not validate server certificates, enabling potential unauthorized access to operation and activity logs stored on the device. The vulnerability is categorized as missing server certificate verification ...
CVE-2026-21070
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...
CVE-2026-21070
Technical details about CVE-2026-21070 are not publicly available in the provided documents. Monitor for updates and new disclosures.
EUVD-2026-55095
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...
CVE-2026-21070
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2026-68288
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dropmonitor: fix info leak in NETDMATTRPAYLOAD netdmpacketreportfill and netdmhwpacketreportfill open code the NETDMATTRPAYLOAD attribute to avoid zeroing...
PT-2026-69932
Name of the Vulnerable Software and Affected Versions Spacebar Server versions prior to commit 8d126f4 Description Authenticated users possessing the MANAGE MESSAGES permission in a channel they control can delete arbitrary messages in other channels. This occurs because the single-delete and...
CVE-2026-69114: Authorization Bypass Through User-Controlled Key
Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel. Authenticated users with MANAGEMESSAGES permission in any controlled channel can delete...
The vulnerability of the Message Handler component in the FreeBSD operating system allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the Message Handler component in FreeBSD operating systems is related to the lack of proper checking of the length of user data before it is copied to the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
PT-2026-69398
Name of the Vulnerable Software and Affected Versions Samsung Message versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to access sensitive information. Recommendations Update Samsung Message to SMR Aug-2026 Release 1...
CVE-2026-21070: Improper Input Validation
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...