CLEANSTART-2026-DP99437 Netty is a network application framework for development of protocol servers and clients

Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...

CVE-2026-101354: Stack-based Buffer Overflow

A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...

CVE-2026-100297: Server-Side Request Forgery (SSRF)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries...

FreeBSD Security Advisory - FreeBSD-SA-26:69.udp

FreeBSD Security Advisory - IPv6 UDP sendto2 bypasses jail loopback restriction. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation...

ROS-20260929-73-0064

The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260929-73-0090

The vulnerability of the fore200eopen function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

ROS-20260929-73-0098

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c module of the Linux network device driver framework is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause...

Important: bluez

Issue Overview: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the...

Behavior-Centric Malware Classification with Fine-Grained Malicious Logic Localization

Effective malware analysis requires understanding not only whether a program is malicious, but also which behaviors it exhibits and where those behaviors originate in the code. Existing machine-learning-based malware detectors largely operate as black boxes, providing limited insight into the...

PT-2026-102630

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password...

CVE-2026-95394

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-102669

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

CVE-2026-102762: Missing Release of Memory after Effective Lifetime

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

ROS-20260929-73-0184

The vulnerability of the hclgesetvlanfilter function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgemain.c file of the Ethernet network adapter driver for the Hisilicon-based Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacke...

When Cyber Scoring Systems Diverge: An Empirical Comparison

Vulnerability scoring systems underpin cyber patch prioritization and risk management, but their comparative behavior is almost always assessed in the abstract, through correlation studies in IT vulnerability databases, rather than by the operational consequences they produce when embedded in a...

CVE-2026-100289: Missing Authorization

Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to generate a network scan token and perform internal network discovery and port scanning through the gateway via a crafted API request...

CVE-2026-95394: Unchecked Input for Loop Condition

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95376: Externally Controlled Reference to a Resource in Another Sphere

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

ROS-20260929-73-0070

The vulnerability of the usbnetdisconnect function in the drivers/net/usb/usbnet.c file of the Linux network adapter driver module is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...