EUVD-2026-55408

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectiter replays firmware state for links tracked in mvif-validlinks. After MLO link changes or MCU timeout recovery, the driver bitmap can...

CVE-2026-68275

The CVE-2026-68275 entry concerns the Linux kernel DRM/AMDGPU driver. In the AMDGPU GEM GET_MAPPING_INFO path, amdgpu_gem_op_ioctl() looks up the BO in the caller’s VM via amdgpu_vm_bo_find() but does not verify the returned pointer before using it. If no bo_va exists for the BO in that VM (the n...

EUVD-2026-55308

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

CVE-2026-68207 media: ti: vpe: unwind v4l2 device registration on probe error

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

CVE-2026-68157

CVE-2026-68157 affects the Linux kernel’s libceph CRUSH processing. When a malformed CRUSH map contains a parent bucket with a name but without a matching type, get_immediate_parent() dereferences a NULL type_cn and passes a NULL into strcmp(), causing a null-ptr-deref and potential system crash ...

CVE-2026-72692 OpenSignLabs opensignserver - Missing Authorization

A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the declinedoc Parse cloud function. The function writes...

CVE-2026-72692

OpenSignLabs opensignserver up to version 2.37.0 contains a missing authorization flaw in the declinedoc Parse cloud function. An unauthenticated remote attacker can irreversibly decline any in‑flight document and forge the decline attribution to an arbitrary user by writing IsDeclined, DeclineRe...

CVE-2026-72690

An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/eventid/question/create endpoint. The postCreateEventQuestion method loads the...

CVE-2026-72688 OpenSignLabs opensignserver - Missing Authentication for Critical Function

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

CVE-2026-68134 ptp: ptp_s390: Add missing facility check

In the Linux kernel, the following vulnerability has been resolved: ptp: ptps390: Add missing facility check Only register the physical clock when facility 28 is installed and PTFF QAF returns that PTFF QPT is available...

CVE-2026-72585

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...

CVE-2026-55814

Missing Authentication in Apache Ranger Download APIs on versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-72593

The CVE-2026-72593 entry concerns dulldusk/phpfm up to version 1.8.0, where a missing authentication flaw permits an unauthenticated remote attacker to access the full file management capabilities (read, write, delete, upload) on the server filesystem. The root cause is an authentication check in...

CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

CVE-2026-72593

A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...

EUVD-2026-55220

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQQUERY Socket.IO event. When secureEnabled=true, all other sensitive Socket.IO events DEVICEBROWSE, HOSTINTERFACES, DEVICETAGSREQUEST, et...

CVE-2026-72586

The CVE-2026-72586 entry describes a missing authentication vulnerability in frangoteam/FUXA up to version 1.3.3. The DAQ_QUERY Socket.IO handler in server/runtime/index.js does not perform isSocketAdminAuthorized token checks, enabling unauthenticated remote access to all historical sensor data....

CVE-2026-72586 frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQQUERY Socket.IO event. When secureEnabled=true, all other sensitive Socket.IO events DEVICEBROWSE, HOSTINTERFACES, DEVICETAGSREQUEST, et...

CVE-2026-72586 frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler

A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQQUERY Socket.IO event. When secureEnabled=true, all other sensitive Socket.IO events DEVICEBROWSE, HOSTINTERFACES, DEVICETAGSREQUEST, et...