CVE-2026-109679 FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in armhandlerequestok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...

CVE-2026-109679

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in armhandlerequestok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...

CVE-2026-109679 FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in armhandlerequestok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...

CVE-2026-109679

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in armhandlerequestok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...

CVE-2026-90139

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE subsystem. When the fuseiget function fails to allocate an inode, such as under memory pressure, the subsequent fusefillsupersubmount function does not properly handle the returned null value. This oversight can lead to a null...

CVE-2026-90080

A flaw was found in the Linux kernel's octeontx2-pf driver. When switching to devlink eswitch mode, a null pointer dereference can occur in the afxdpzcqidx handling. This issue arises because the afxdpzcqidx pointer, which tracks receive queues, is not properly initialized in certain non-AFXDP...

CVE-2026-90066

A flaw was found in the Linux kernel's ftrace module. This vulnerability occurs because the ftracedirectmultiinit function does not properly check the return value of kthreadrun. If kthreadrun fails, an error pointer is assigned, which is later passed to kthreadstop during module unload. This...

CVE-2026-90060

A flaw was found in the Linux kernel's ALSA control module. A local user could create a write-only kcontrol element without a get callback. This could lead to a null pointer dereference in the LED layer, causing a system crash and resulting in a denial of service...

CVE-2026-90115

A flaw was found in the Linux kernel's AFXDP xsk socket multi-buffer receive path. This vulnerability allows for a NULL pointer dereference in the xskrcv function due to improper handling of buffer allocation failures. An attacker could exploit this flaw to cause a system crash, leading to a Deni...

CVE-2026-90102

A flaw was found in the Linux kernel's NFSv4/pnfs component. The data server cache is incorrectly keyed only on the multipath address set, without considering the NFS version. This oversight allows different NFS versions to share the same internal data structure when two device IDs on one address...

CVE-2026-90091

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A race condition, a situation where multiple operations occur at the same time and interfere with each other, exists between internal functions. This can lead to a null pointer...

CVE-2026-77206

A null pointer dereference flaw was found in Libreswan's IKEv2 state-machine handling. A remote, unauthenticated attacker can trigger the flaw by sending a malicious IKEv2 IKEAUTH packet, causing the pluto daemon to crash and restart. Repeated exploitation may result in a denial of service. The...

CVE-2026-109241

A flaw was found in FreeRDP. A malicious server can cause a Denial of Service DoS by triggering a NULL pointer dereference in the client video redirection channel. By sending messages out of sequence, specifically clearing geometry data before transmitting video data, the server causes the client...

CVE-2026-77207

A null pointer dereference flaw was found in Libreswan's PKCS7 certificate payload handling. When processing a crafted IKEv2 IKEAUTH packet containing a PKCS7 bundle with a certificate revocation list but no certificates, Libreswan may dereference a null pointer, causing the pluto daemon to crash...

CVE-2026-109107

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CLSA-2026-1791876624 httpd: Fix of CVE-2026-63686

CVE-2026-63686: modxml2enc: NULL pointer dereference on charset conversion failure...

CLSA-2026-1791876326 Fix of 274 CVEs

CVE-2026-53091 - xfrm: Don't clobber inner headers when already set CVE-2026-53091 - net: account for encap headers in qdisc pkt len CVE-2026-53091 CVE-2026-93803 - wifi: libipw: fix key index receive bound checks CVE-2026-93803 CVE-2026-93286 - net: appletalk: fix NULL pointer dereference in...

CVE-2026-109107 Wavlink WL-WN592AX6 upload.cgi main null pointer dereference

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CVE-2026-109107

A null pointer dereference vulnerability exists in the Wavlink WL-WN592AX6 (version 250422) device. The flaw is located within the main function of the /cgi-bin/upload.cgi file and is triggered by the manipulation of the Cookie argument. This issue can be exploited remotely to impact the system. ...

CVE-2026-109107 Wavlink WL-WN592AX6 upload.cgi main null pointer dereference

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...