CVE-2026-64433: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hciconnparams in adddevicecomplete adddevicecomplete runs from the hcicmdsyncwork kworker, which holds only hcireqsynclock and not hcidevlock. It calls hciconnparamslookup and then dereferences the...

CVE-2026-46987: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Application Service Level Mgmt. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to...

CVE-2026-64126 Bluetooth: MGMT: validate Add Extended Advertising Data length

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

CVE-2026-64126: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

CVE-2026-59509 Unauthenticated arbitrary MongoDB collection read in cve-search

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

ROS-20260702-73-0009

The vulnerability of the ksmbdtreeconnlookup function in the fs/ksmbd/mgmt/treeconnect.c module of the SMB-server subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

AZL-90680 CVE-2026-53255 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53255: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape-server, newrelic-infrastructure-agent-fips, helm-exporter-fips, chainctl, kubevela, datadog-agent-fips, spegel, tigera-operator-fips, consul-k8s, syft, crossplane-fips, kubescape-server-fips, tw, beats, chaos-mesh, helm-fips, kubevela-fips,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape-server, newrelic-infrastructure-agent-fips, helm-exporter-fips, chainctl, kubevela, datadog-agent-fips, spegel, tigera-operator-fips, consul-k8s, syft, crossplane-fips, kubescape-server-fips, tw, beats, chaos-mesh, helm-fips, kubevela-fips,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape-server, newrelic-infrastructure-agent-fips, helm-exporter-fips, chainctl, kubevela, datadog-agent-fips, spegel, tigera-operator-fips, consul-k8s, syft, crossplane-fips, kubescape-server-fips, tw, beats, chaos-mesh, helm-fips, kubevela-fips,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape-server, newrelic-infrastructure-agent-fips, helm-exporter-fips, chainctl, kubevela, datadog-agent-fips, spegel, tigera-operator-fips, consul-k8s, syft, crossplane-fips, kubescape-server-fips, tw, beats, chaos-mesh, helm-fips, kubevela-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype-db, kubescape-server, newrelic-infrastructure-agent-fips, helm-exporter-fips, chainctl, kubevela, datadog-agent-fips, spegel, tigera-operator-fips, consul-k8s, syft, crossplane-fips, tw, chaos-mesh, helm-fips, kubevela-fips, skaffold-fips, gitlab-rails-ce-fips,...

RockyLinux 9 : kernel (RLSA-2026:21556)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21556 advisory. kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setti...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fixed a dangling pointer in mgmtaddadvpatternsmonitorcomplete. This fix addresses the issue where, when status != -ECANCELED, mgmtpendingvalid was executed; otherwise, mgmtpendingfreecmd would free the memory, bu...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: vpvdpa: fixed the crash that occurs when the vpvdpa device is unplugged suddenly. When the vpvdpa device is unplugged, it triggers a kernel panic. The root cause is that vdpamgmtdevunregister will access modern devices, leadin...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: MGMT: Fixed possible UAFs This attempt to fix possible UAFs is due to the fact that the struct mgmtpending is freed while it is still being processed, as seen in the following trace. To address this issue,...