PT-2026-98119

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the parser fails to verify the length of the PHY status Information Element IE before processing. Because hardware may report a PHY status ...

CVE-2026-97321: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...

CVE-2026-89325: Uncontrolled Search Path Element

An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM via a planted executable resolved from the machine PATH. Assessment content at or below version 0.0.261.0 included a check...

CVE-2026-97366: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...

CVE-2026-97517: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this...

CVE-2026-96892: URL Redirection to Untrusted Site

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

PT-2026-98198

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.8.0 through 4.14.6 Description The getattributes function in src/os xml/os xml.c recursively processes XML attributes without a depth limit and allocates two large local buffers in each stack frame. An enrolled agent can submi...

CVE-2026-61811: Uncontrolled Recursion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the getattributes function in src/osxml/osxml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers ...

CVE-2026-97224: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

PT-2026-97984

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where a malformed Information Element IE buffer can be stored via the SIOCSIWGENIE command in the cfg80211 wext siwgenie function without proper validation. A subsequent...

PT-2026-98257

Name of the Vulnerable Software and Affected Versions Rapid7 Insight Agent affected versions not specified Description An uncontrolled search path element in InsightVM assessment content on Windows allows a local, low-privileged user to execute arbitrary code as SYSTEM. This occurs because a chec...

PT-2026-104974

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this...

PT-2026-97782

Name of the Vulnerable Software and Affected Versions Evope Collector versions prior to 1.1.7.13 Description An unchecked search path element allows a local attacker without privileges to perform local privilege escalation. By placing a malicious wtsapi32.dll file in the C:ProgramDataEvope...

CVE-2026-97320: Server-Side Request Forgery (SSRF)

A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side...

PT-2026-97847

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpack tree parse children can overflow size t an...

EUVD-2026-86022

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

CVE-2026-88351: Integer Overflow or Wraparound

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count, the page allocation size calculation in mpacktreeparsechildren can overflow sizet and...

CVE-2026-88351

An integer overflow vulnerability exists in the MPack Node API within MPack 1.1.1 on 32-bit platforms . The issue occurs in the mpack_tree_parse_children() function when parsing a specially crafted MessagePack array32 or map32 object with an excessively large element count. This causes the page a...