CVE-2026-112004

The Teable application, in versions prior to 2026-10-12T12-45-53Z.3331 , is vulnerable to an authorization bypass via the folder rename endpoint. The root cause is that the PATCH /api/base/:baseId/node/folder/:folderId endpoint only validates the base|update permission against the :baseId provide...

CVE-2026-112004 Teable before 2026-10-12T12-45-53Z.3331 Authorization Bypass via Folder Rename Endpoint

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...

CVE-2026-112004 Teable before 2026-10-12T12-45-53Z.3331 Authorization Bypass via Folder Rename Endpoint

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...

EUVD-2026-103457

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...

CVE-2026-98741: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detectusbformat cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and playback interfaces, but never relates the two endpoints' wMaxPacketSize...

CVE-2026-112004: Authorization Bypass Through User-Controlled Key

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...

PT-2026-116754

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in read dts node of clk get returns a clock with its reference count incremented, but read dts node only uses it to read the rate and never calls clk put. The clock is not stored anywhere, so the...

PT-2026-116608

Name of the Vulnerable Software and Affected Versions Teable versions prior to 2026-10-12T12-45-53Z.3331 Description An authorization bypass allows authenticated users to rename folders in bases to which they do not belong. This occurs because the PATCH '/api/base/:baseId/node/folder/:folderId'...

PT-2026-116960

In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detect usb format cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and playback interfaces, but never relates the two endpoints' wMaxPacketSi...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.1 contains security vulnerabilities. These vulnerabilities stem from the fact that the bpfctsetnatinfo function does not verify the type of NAT operation. An incorrect value can be passed to the nfnatsetupinfo function, triggering a WARN message. This may lead to access...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from nfcgenlllcsdreq, which fails to release the constructed TLV node list when parsing, allocating, or sending it. This may lead to a memory leak...

Teable authorization issue vulnerability

The teable component has an authorization vulnerability. This vulnerability stems from the PATCH endpoint /api/base/:baseId/node/folder/:folderId, which only checks the base|update permission based on the baseId in the URL. Certified users can rename folders in a base with no membership by...

CLSA-2026-1792219253 TuxCare security update for @storybook/node-logger (1 CVE)

TuxCare rebuilt @storybook/node-logger to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-126272

TuxCare rebuilt @storybook/node-logger to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

Linux Distros Unpatched Vulnerability : CVE-2026-98415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The setupcpuhpandcpuidle parses the device tree node for the interrupt generation block...

@adobe/helix-onedrive-cli (1.11.441), @adobe/helix-onedrive-support (12.4.13) +2 more potentially affected by CVE-2026-109461 via @azure/msal-node (7.0.1)

@azure/msal-node NPM version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @azure/msal-node and may be impacted: - @adobe/helix-onedrive-cli 1.11.441 - @adobe/helix-onedrive-support 12.4.13 - @mcp-sidekick/msx 1.0.0 - @tsg-ailab/dynamics-crm-mc...

CVE-2026-97032 affecting package prometheus-node-exporter for versions less than 1.7.0-6

CVE-2026-97032 affecting package prometheus-node-exporter for versions less than 1.7.0-6. A patched version of the package is available...

CVE-2026-78660 affecting package prometheus-node-exporter for versions less than 1.7.0-6

CVE-2026-78660 affecting package prometheus-node-exporter for versions less than 1.7.0-6. A patched version of the package is available...

CVE-2026-78659 affecting package prometheus-node-exporter for versions less than 1.7.0-6

CVE-2026-78659 affecting package prometheus-node-exporter for versions less than 1.7.0-6. A patched version of the package is available...

CVE-2026-78669 affecting package prometheus-node-exporter for versions less than 1.7.0-6

CVE-2026-78669 affecting package prometheus-node-exporter for versions less than 1.7.0-6. A patched version of the package is available...