CVE-2026-64576

The CVE-2026-64576 issue affects the Linux kernel’s nexthop resolution path (nh_res_bucket_migrate in net/ipv4/nexthop.c), where an uninitialized netlink_ext_ack could be used when allocation fails, leading to a kernel panic. The root cause is the use of an uninitialized extack, which may derefer...

CVE-2026-7693

CVE-2026-7693 affects the WordPress Backup Migration plugin up to version 2.1.5.1. The vulnerability is OS Command Injection via the restoreBackup() AJAX handler, where the file POST parameter is sanitized with esc_attr() (HTML-context) and then concatenated unquoted into a php-cli -f … bmi_resto...

CVE-2026-7693 Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

CVE-2026-7693

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

CVE-2026-7693 Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

EUVD-2026-53182

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

CVE-2026-7693: Improper Neutralization of Special Elements used in a Command

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

CVE-2026-34966: Server-Side Request Forgery (SSRF)

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get without a custom DialContext. Attackers can supply...

WordPress Backup Migration plugin <= 2.1.1 - Authenticated (Administrator+) OS Command Injection vulnerability

Authenticated Administrator+ OS Command Injection vulnerability discovered by at1as in WordPress Plugin Backup Migration versions = 2.1.1...

Important: Red Hat Security Advisory: Migration Toolkit for Applications

A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...

K000162766: Linux Kernel PowerPC64s PMD Migration Race Condition vulnerability CVE-2026-53108

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entries The following race is possible with migration swap entries or device-private THP entries. e.g. when movepages is called on a PMD THP page, then...

CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

UBUNTU-CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

CVE-2026-64562

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

CVE-2026-64562 KVM: nVMX: Hide shadow VMCS right after VMCLEAR

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

EUVD-2026-52603

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 still points to it. But because it is asynchronous with respect to loadedvmcsclear, the vCPU might migrate before the pointer is cleare...

CVE-2026-64562

CVE-2026-64562 : In the Linux kernel KVM nVMX, a shadow VMCS could be freed prematurely by free_nested() while vmcs01 still referenced it. Since this occurs asynchronously with respect to loaded_vmcs_clear(), a vCPU could migrate and __loaded_vmcs_clear() may then execute VMCLEAR. The vulnerabili...

PT-2026-78385

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description An authentication bypass exists in the SetupController when maintenance mode is enabled. This allows unauthenticated remote attackers to execute database migrations and create configuration backups...

PT-2026-67669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nVMX component where the free nested function frees the shadow VMCS while vmcs01 still points to it. Due to the asynchronous nature of loaded vmcs clear, a vCP...

PT-2026-68056

Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions prior to 2.1.5.2 Description OS Command Injection occurs due to insufficient sanitization of the file POST parameter within the restoreBackup AJAX handler. The handler uses esc attr, which is an...