PT-2026-64527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CTR DRBG component where the drbg ctr generate function may incorrectly return a success status despite failing, which results in the output buffer remaining...

PT-2026-64762

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description A missing authorization issue exists in the 'POST /mcp' kernel endpoint, which is only protected by a general authentication check model.CheckAuth without enforcing admin roles or read-only...

PT-2026-64600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the parse dacl function fails to mask the server-provided sub auth2 value from the NFS mode SID to 07777 when modefromsid is active. This value is...

Linux Distros Unpatched Vulnerability : CVE-2026-64501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix CS held asserted and state leaks In adsigmadeltasingleconversion...

Linux Distros Unpatched Vulnerability : CVE-2026-64379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mod...

openSUSE 16 Security Update : wpa_supplicant (openSUSE-SU-2026:21415-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21415-1 advisory. This update for wpasupplicant fixes the following issues - CVE-2026-58374: Fixed a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association...

Linux Distros Unpatched Vulnerability : CVE-2026-13072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can...

prismor v1.34.1

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...

CVE-2026-57530

Milkdown (versions

Imperva Customers Protected Against CVE-2026-16723: Critical FastJson 1.x Zero-Day RCE

TL;DR:A critical remote code execution vulnerability has been disclosed in FastJson, a widely used JSON processing library for Java. The vulnerability, assigned CVE-2026-16723 with a CVSS score of 9.0 Critical, affects FastJson versions 1.2.68 through 1.2.83 under specific Spring Boot deployment...

NPM: React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response

NPM: React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response vulnerability discovered by ? in WordPress Npm react-router versions = 7.12.0, 8.3.0...

GHSA-QWWW-VCR4-C8H2 React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response

This is a follow up to CVE-2026-22030 to address related CSRF flows in unstable RSC code paths. !NOTE This only affects your application if you are using the unstable RSC APIs...

CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

DEBIAN-CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-64229

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

DEBIAN-CVE-2026-64221

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...

DEBIAN-CVE-2026-64214

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

CVE-2026-64214

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

UBUNTU-CVE-2026-64245

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...

CVE-2026-64245 fbdev: modedb: fix a possible UAF in fb_find_mode()

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fbfindmode If modeoption is NULL, it is assigned from modeoptionbuf: if !modeoption fbgetoptionsNULL, &modeoptionbuf; modeoption = modeoptionbuf; Later, name is assigned from modeoption: const...