CVE-2026-11812: Concurrent Execution using Shared Resource with Improper Synchronization

The UpdateHub management subsystem subsys/mgmt/updatehub/updatehub.c drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds1. Access to ctx was not serialized, and preparef...

PT-2026-69949

Name of the Vulnerable Software and Affected Versions UpdateHub OTA client affected versions not specified Description An out-of-bounds and uninitialized-memory read exists in the z impl updatehub probe function within subsys/mgmt/updatehub/updatehub.c. The issue occurs when a probe response from...

CVE-2026-68392: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev-lock for hciconn lookup and hciabortconn. Don't use RCU to ensur...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2971)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

CVE-2026-10849: Heap-based Buffer Overflow

The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in responsejsoncb subsys/mgmt/hawkbit/hawkbit.c. The buffer is sized to hold the received body bytes but reserves no space for a terminating NUL. When the...

AZL-93665 CVE-2026-64433 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hciconnparams in adddevicecomplete adddevicecomplete runs from the hcicmdsyncwork kworker, which holds only hcireqsynclock and not hcidevlock. It calls hciconnparamslookup and then dereferences the...

CVE-2026-64433: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF of hciconnparams in adddevicecomplete adddevicecomplete runs from the hcicmdsyncwork kworker, which holds only hcireqsynclock and not hcidevlock. It calls hciconnparamslookup and then dereferences the...

CVE-2026-46987: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Application Service Level Mgmt. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to...

CVE-2026-64126 Bluetooth: MGMT: validate Add Extended Advertising Data length

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

CVE-2026-64126: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMTOPADDEXTADVDATA is registered as a variable-length command, with MGMTADDEXTADVDATASIZE as the fixed header size. The handler then uses cp-advdatalen and...

CVE-2026-59509 Unauthenticated arbitrary MongoDB collection read in cve-search

An unauthenticated improper input validation vulnerability in the POST /fetchcvedata endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arbitrary application MongoDB collections...

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

ROS-20260702-73-0009

The vulnerability of the ksmbdtreeconnlookup function in the fs/ksmbd/mgmt/treeconnect.c module of the SMB-server subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

AZL-90680 CVE-2026-53255 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53255: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: falco-no-driver, docker-cli-buildx, grype-fips, scorecard, newrelic-infrastructure-agent, kgateway, upwind-agent, k9s, cloudbeat-fips, linkerd2, zot, redpanda-operator, harvester-fips, cloudbeat, datadog-agent, chartmuseum-fips, crossplane-fips, spegel, xeol-fips,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: falco-no-driver, docker-cli-buildx, grype-fips, scorecard, newrelic-infrastructure-agent, kgateway, k9s, cloudbeat-fips, linkerd2, zot, redpanda-operator, harvester-fips, cloudbeat, datadog-agent, chartmuseum-fips, crossplane-fips, spegel, xeol-fips, dagger,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: falco-no-driver, docker-cli-buildx, grype-fips, scorecard, newrelic-infrastructure-agent, kgateway, k9s, cloudbeat-fips, linkerd2, zot, redpanda-operator, harvester-fips, cloudbeat, datadog-agent, chartmuseum-fips, crossplane-fips, spegel, xeol-fips, dagger,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: falco-no-driver, docker-cli-buildx, grype-fips, scorecard, newrelic-infrastructure-agent, kgateway, upwind-agent, k9s, cloudbeat-fips, linkerd2, zot, redpanda-operator, harvester-fips, cloudbeat, datadog-agent, chartmuseum-fips, crossplane-fips, spegel, xeol-fips,...