EUVD-2026-71643

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork copyhugetlbpagerange clears the uffd-wp bit of migration and hwpoison entries with hugepteclearuffdwp, which operates on the present-PTE bit position. Swap entri...

CVE-2026-80893

CVE-2026-80893 is a Linux kernel vulnerability in the mm/hugetlb subsystem. The root cause lies in copy_hugetlb_page_range(), which clears the userfaultfd write-protect (uffd-wp) bit on swap entries using huge_pte_clear_uffd_wp(). This function operates on the present-PTE bit position, but swap e...

DEBIAN-CVE-2026-85522

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522

A remote out-of-bounds read vulnerability in valkey-io valkey (up to 9.5.4/9.1.0) affects the createSlotImportJob function in src/cluster_migrateslots.c, part of the Slot Migration component. Manipulating the job_name argument triggers the read, requiring no authentication and yielding a low avai...

EUVD-2026-71102

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

WordPress WPvivid — Backup, Migration & Staging plugin < 0.9.134 - Admin+ Arbitrary File Deletion vulnerability

Admin+ Arbitrary File Deletion vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin WPvivid Backup and Migration versions 0.9.134...

CVE-2026-82194: External Control of File Name or Path

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server, including files outside the web root...

CVE-2026-82193: Improper Limitation of a Pathname to a Restricted Directory

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to arbitrary locations on the server and to overwrite existing files...

PT-2026-85529

Name of the Vulnerable Software and Affected Versions valkey-io valkey versions prior to 9.0.5 valkey-io valkey versions prior to 9.1.1 Description A remote out-of-bounds read exists in the Slot Migration component within the createSlotImportJob function of the src/cluster migrateslots.c file. Th...

PT-2026-86184

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork copy hugetlb page range clears the uffd-wp bit of migration and hwpoison entries with huge pte clear uffd wp, which operates on the present-PTE bit position. Swa...

CVE-2026-85522: Out-of-bounds Read

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522: Out-of-bounds Read

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-84778

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84778

An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions

CVE-2026-84778 WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...