kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

A use-after-free vulnerability was found in the Linux kernel's seqiv Sequence IV crypto module. After calling cryptoaeadencrypt, the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req-iv to compare against info, accessing potentially...

CVE-2026-68765: Heap-based Buffer Overflow

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-63669: Authorization Bypass Through User-Controlled Key

ApostropheCMS is an open-source Node.js content management system. Prior to 4.32.0, the page module's move operation fails to enforce the destination parent's create permission because its oldParent archive condition disables the check for ordinary moves, allowing an authenticated editor or...

CVE-2026-58560: NULL Pointer Dereference

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49307: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49305: Improper Handling of Exceptional Conditions

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49303: Undefined Security Weakness

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-73223

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-73232

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission control issue exists within the notification module. Successful exploitation of this flaw may impact the availability of the system. Recommendations...

PT-2026-76619

openssl encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted...

PT-2026-76621

openssl encrypt versions before 1.4.0 contain a logging bug in restore hidden modules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another...

CVE-2026-67926

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

EUVD-2026-60445

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099982 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where i...

PT-2026-76770

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 3.6.2 Description The import-export module in packages/import-export/lib/formats/gzip.js fails to properly validate that the resolved attachment source path remains within the extracted attachments directory. An...

Linux kernel auth_gss DoS

The authgss module vulnerability in the Linux kernel is related to a resource leak that occurs after the expiration of its valid usage period. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux net mac80211 mlme Heap Buffer Overflow DoS

The vulnerability of the function ieee80211mlreconfiguration in the net/mac80211/mlme.c module of the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of protecte...

Redpine Signals Wireless Driver Heap Buffer Overflow DoS

The vulnerability in the rsimac80211config function within the drivers/net/wireless/rsi/rsi91xmac80211.c file of the Redpine Signals wireless adapter driver for the Linux kernel is related to improper resource initialization. Exploitation of this vulnerability may allow a remote attacker to...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nvmeprreadkeys function in the drivers/nvme/host/pr.c module of the Linux kernel relates to unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

octeontx2-af module DoS

The vulnerability in the octeontx2-af module of the Linux kernel is related to insufficient locking. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...