Exploit for CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlin...

CVE-2026-96515 Command Injection Vulnerability in Netlink ICT HG323RW Router

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

EUVD-2026-85858

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

CVE-2026-96515

The Netlink ICT HG323RW router is susceptible to a command injection vulnerability due to insufficient authorization and input validation controls within the diagnostic script import functionality . An authenticated attacker can exploit this by uploading and executing a specially crafted script v...

CVE-2026-96515 Command Injection Vulnerability in Netlink ICT HG323RW Router

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

CVE-2026-97419

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

PT-2026-98053

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the High-availability Seamless Redundancy HSR generic netlink family where notifications are incorrectly broadcast. The functions hsr nl ringerror and hsr nl nodedown...

CVE-2026-96515: Missing Authorization

This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...

PT-2026-104967

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than init net. Two async notifiers broadcast events with...

CVE-2026-93267: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-93267

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

Linux Distros Unpatched Vulnerability : CVE-2026-97419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespac...

CVE-2026-97419: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hsr: broadcast netlink notifications in the device's net namespace The HSR generic netlink family sets .netnsok = true. HSR devices can live in network namespaces other than initnet. Two async notifiers broadcast events with...

PT-2026-97789

Name of the Vulnerable Software and Affected Versions Netlink ICT HG323RW affected versions not specified Description Insufficient authorization and input validation controls in the diagnostic script import functionality allow an authenticated attacker to upload and execute a specially crafted...

PT-2026-97954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/core component. When accessing a dmah via the netlink path, the synchronization is managed by rdma restrack get. Because rdma restrack del was...

SUSE CVE-2026-92510

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

Linux Distros Unpatched Vulnerability : CVE-2026-92507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdeallocpduser When accessing a PD via the netlink path the only synchronization mechanism for the said PD is...

Linux Distros Unpatched Vulnerability : CVE-2026-92509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in counterrelease When accessing a counter via the netlink path the only synchronization mechanism for the said counter ...

Linux Distros Unpatched Vulnerability : CVE-2026-92512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix use after free in ibqueryqp When querying a QP via the netlink flow the only synchronization mechanism for the said QP is rdmarestrackget,...

Linux Distros Unpatched Vulnerability : CVE-2026-92510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is...