PT-2026-102419

Name of the Vulnerable Software and Affected Versions FAST FAC1203R version 20200116 2.0.4 Description A stack-based buffer overflow occurs in the tWlanTask function of the MmtAtePrase Parser component. This issue allows an attacker with local network access to execute a manipulation that trigger...

CVE-2026-95346: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. Chromium security severity: Medium...

PT-2026-102830

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries...

Important: network-flow-monitor-agent

Issue Overview: libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a fixed-size strncmp smartpkt.c:239 against the unvalidated capability buffer of a smart-protocol pkt-line. When the bytes following...

ROS-20260929-73-0058

The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-102435

Name of the Vulnerable Software and Affected Versions Netcore NAP930 version 0.1.241010.141410 Description Remote OS command injection is possible within the Network Tools CGI component. The issue exists in the eval function of the '/www/cgi-bin/network tools' endpoint, where improper handling of...

CVE-2026-102240: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...

FreeBSD-SA-26:69.udp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:69.udp Security Advisory The FreeBSD Project Topic: IPv6 UDP sendto2 bypasses jail loopback restriction Category: core Module: udp Announced: 2026-09-29...

Linux Distros Unpatched Vulnerability : CVE-2026-54160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits...

SUSE CVE-2026-75036

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet...

SUSE CVE-2026-98025

In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedules re-enabling of ethernet mode, but then falls through to the rest of...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...

CVE-2026-98028

A flaw was found in the Linux kernel's Netronome Flow Processor NFP network driver. When replacing an existing flow steering rule fails during hardware reprogramming, the driver fails to remove the old rule from its internal list, creating an inconsistency with the active rule counter. A local us...

CVE-2026-98026

A flaw was found in the Linux kernel's network bridge subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS or system crash through a use-after-free condition. This issue occurs during multicast port group removal, where the kernel immediately frees data...

CVE-2026-98022

A flaw was found in the Linux kernel. Multiple network subsystems allocate memory buffers based on the transmit queue length without enforcing an upper bound. A local unprivileged user can exploit this vulnerability by configuring an excessively large queue length on network devices, exhausting...

CVE-2026-98017

A flaw was found in the Linux kernel's network traffic control subsystem. This flaw allows a local user with network administration privileges to cause a denial of service DoS or potentially escalate privileges. A use-after-free condition occurs when the kernel prematurely deallocates network...

CVE-2026-98016

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A race condition occurs during the concurrent teardown of traffic control TC sample rules sharing the same context, causing the system to reference memory after it has already been freed. A local user with network administrativ...

CVE-2026-98015

A flaw was found in the Linux kernel's mlx5 driver. A local attacker can cause a Denial of Service DoS via a use-after-free vulnerability in the network switch offload mechanism. This issue arises when concurrent operations race while releasing termination table handles in the mlx5eswitchtermtblp...

CVE-2026-98012

A flaw was found in the Linux kernel's Stochastic Fairness Queueing SFQ network packet scheduling subsystem. A local attacker with network administration privileges, including within an unprivileged user namespace, can supply an improperly bounded quantum parameter alongside a crafted packet size...

CVE-2026-98014

A flaw was found in the Linux kernel's Mellanox network driver mlx5. This vulnerability allows a local privileged user to cause a Denial of Service DoS through a system crash. During hardware reset or error recovery procedures, improper cleanup when disabling a virtual network port leaves stale...