EUVD-2026-75877

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...

PT-2026-90150

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.5.0 through 9.5.2 Description An open redirect exists where an attacker can craft a link on the site's own domain to send users to an arbitrary external site immediately after authentication or during the registration...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107318 advisory. In the Linux kernel, the following vulnerability has been resolved: ethtool: fail closed if we can't get max channel used in indirection tables Commit 0d1b7d6c9274...

FreeBSD : immich -- open redirect and reflected XSS in maintenance endpoint (fcc6baaa-adbc-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fcc6baaa-adbc-11f1-a655-3497f65b111b advisory. The immich project reports: The /maintenance endpoint fails to validate the continue URL parameter. Whe...

PT-2026-90519

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The application implements a fail-open access control mechanism in its role-authorization lookup. When a request handler's name is missing from the role...

VulnCheck KEV: CVE-2025-25252

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP allows a attacker to compromise the integrity of the protected information.

The vulnerability of the BGP OPEN message parser in the pkg/packet/bbg module of the edge gateway protocol GoBGP is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the decoder handlers in the BGP OPEN messages parser of the GoBGP edge gateway module pkg/packet/bbg protocol allows a attacker to cause a service failure.

The vulnerability of the decoder handlers for BGP OPEN messages in the GoBGP border gateway module’s pkg/packet/bbg protocol relates to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component of the GoBGP protocol allows a attacker to increase their privileges.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2026-81913: URL Redirection to Untrusted Site

Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same...

CVE-2026-89687: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsdfiledoacquire does not use a non-opened file -atomicopen is permitted to return success without actually opening the file. It indicates this by calling finishnoopen. This means dentrycreate can return a file whic...

CVE-2026-80977: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy uarg and clears SKBFLALLZEROCOPY, and skbzcopydowngrademanaged clears SKBFLMANAGEDFRAGREFS. Both live in skbshinfo, which every clone...

CVE-2026-90450: Incorrect Authorization

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

PT-2026-89875

Name of the Vulnerable Software and Affected Versions NetBSD affected versions not specified Description An information disclosure issue exists in the mm open function within sys/dev/mm.c. Unprivileged local users can obtain real kernel virtual addresses by opening world-accessible devices, such ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107302 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f wil...

CVE-2026-89148: Cross-Site Request Forgery (CSRF)

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

PT-2026-89841

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an open redirect in objects/playlistSort.php. Because the endpoint is not a .json.php script, AVideo's automatic CSRF guard autoCSRFGuard/forbidIfIsUntrustedRequest does not run, and when the request includes the sort paramet...

PT-2026-90522

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A file-upload handler redirects the authenticated client's browser to a URL sourced directly from the Referer header of the request without validating it agains...

PT-2026-90107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in zerocopy state handling within the skb tx error function in net/skbuff allows for local privilege escalation. The issue occurs because skb tx error completes the zerocopy uarg...

PT-2026-96399

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb tx error skb tx error completes the zerocopy uarg and clears SKBFL ALL ZEROCOPY, and skb zcopy downgrade managed clears SKBFL MANAGED FRAG REFS. Both live in skb shinfo, which...