CVE-2026-18330: Use of Hard-coded Cryptographic Key

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the idpfidcvportdevdown function in the drivers/net/ethernet/intel/idpf/idpfidc.c module of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-85080

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-80753: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global system workqueues, so module exit has no driver-owned drain point tha...

D-Link DIR-825M Firmware Code Execution

The vulnerability of the sub41802C function in the /boafrm/formLtefotaUpgradeFibocom file of the LTE Module Firmware Upgrade component of the D-Link DIR-825M router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability coul...

Linux BPF Heap Buffer Overflow DoS

The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the specified data type for input parameters. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel tracepoint_add_func Heap Buffer Overflow DoS

The vulnerability of the tracepointaddfunc function in the kernel/tracepoint.c module of the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-73812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 6.3 identifies as a...

Linux kernel VFSOCK Buffer Overflow

The vulnerability of the vsockupdatebuffersize function in the net/vmwvsock/afvsock.c module, which is part of the Linux kernel’s networking functions, is related to the incorrect order of operation of the input data validation mechanism. Exploiting this vulnerability could allow an attacker to...

HPESBHF05143 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01439, Intel Xeon processor with Alias Checking Trusted Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570 Performance - Prior to BIOS...

ttm_bo_evict Heap Buffer Overflow DoS

The vulnerability of the ttmboevict function in the drivers/gpu/drm/ttm/ttmbo.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability...

Linux Hyperv Init Buffer Overflow DoS

The vulnerability of the hypervinit function in the arch/x86/hyperv/hvinit.c module, which is part of the Linux operating system’s x86 kernel support, relates to incorrect handling of the absence of a special element. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ambadevicerelease function in the drivers/amba/bus.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

IBM RSA kernel Command File Write Disclosure

The vulnerability of the commandfilewrite function in the drivers/misc/ibmasm/ibmasmfs.c module of the IBM RSA kernel of the Linux operating system’s service processor is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker to disclose protected...

XMLDOM DOMParser parseFromString DoS

The vulnerability of the DOMParser.parseFromString method in the XML method of accessing and managing documents involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2026-84951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ovpn module queues work items whose callbacks execute module text on global system workqueues. This creates a condition where the module exit process lacks a driver-owned drain point...

Linux RISCV KVM Heap Buffer Overflow DoS

The vulnerability of the kvmriscvvcpuallocvectorcontext function in the arch/riscv/kvm/vcpuvector.c module, which is part of the Linux operating system’s RISCV processor support, involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

CVE-2023-20577

A heap overflow in the SMM (System Management Mode) module of certain AMD processors allows a local, unauthenticated attacker with a second vulnerability enabling SPI flash writes to achieve arbitrary code execution . The flaw affects multiple AMD product lines including 2nd–4th Gen EPYC , Ryzen ...

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...