PT-2026-79233

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

PT-2026-79176

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-8619 Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

CVE-2026-76928

Wireshark's X.509IF protocol dissector crashes via a NULL pointer dereference in versions 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 7.5 HIGH; network-based DoS requiring no authentication. Affected users should upgrade to a patched release; see wnpa-sec-2026-87 for details.

CVE-2026-76928 NULL Pointer Dereference in Wireshark

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927 NULL Pointer Dereference in Wireshark

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927

Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain a null pointer dereference in the H.245 protocol dissector, causing an application crash and denial of service (CVSS 4.7, MEDIUM) when a crafted packet is processed. No patch version or exploitation details are provided in the documents.

CVE-2026-76922

Wireshark's Bluetooth BR/EDR FHS protocol dissector has a null pointer dereference causing a crash (DoS). Affected versions: 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 5.5 (medium). No exploitation details provided. Upgrade to a patched version. See wnpa-sec-2026-80 for details.

CVE-2026-76922 NULL Pointer Dereference in Wireshark

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76881

Wireshark's CMS protocol dissector crashes via a null pointer dereference in versions 4.6.0–4.6.7 and 4.4.0–4.4.18, enabling denial of service. CVSS 4.7 (MEDIUM) requires local access and user interaction. Fix: upgrade to 4.6.8 or 4.4.19 per wnpa-sec-2026-76. No exploitation details provided.

CVE-2026-16846

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-74263

A flaw was found in the Linux kernel's Wireless Wide Area Network WWAN t7xx driver. The t7xxportctrltx function, which handles control transmissions, fails to validate the return value of skbclone. An attacker with local access could exploit this by triggering a scenario where skbclone returns a...

CVE-2026-16846

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a null pointer dereference, enabling a remote, low-complexity denial of service (CVSS 6.5 MEDIUM, adjacent network vector). No patch or workaround details are provided in the documents; monitor IBM support for remediation guidance.

CVE-2026-16846 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

EUVD-2026-62736

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-16829 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16829

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a NULL pointer dereference exploitable by an adjacent-network attacker with no privileges, causing denial of service (CVSS 5.3, medium). No exploitation or patch details are provided in the documents.

EUVD-2026-62717

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-68901 WeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Service

Wekan is open source kanban built with Meteor. Prior to 10.38, the /api/boards/:boardId/export, /api/boards/:boardId/attachments/:attachmentId/export, /api/boards/:boardId/export/csv, and /api/boards/:boardId/exportExcel handlers in models/export.js and models/exportExcel.js looked up a user from...

CVE-2026-68901 WeKan Board Export REST Endpoints: NULL Pointer Dereference on Invalid authToken Leads to Uncaught Exception / Remote Denial of Service

Wekan is open source kanban built with Meteor. Prior to 10.38, the /api/boards/:boardId/export, /api/boards/:boardId/attachments/:attachmentId/export, /api/boards/:boardId/export/csv, and /api/boards/:boardId/exportExcel handlers in models/export.js and models/exportExcel.js looked up a user from...