CVE-2026-25255 Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Exposed dangerous function lead to privilege escalation via gRPC server...

ROOT-APP-NPM-AIKIDO-2026-10843 AIKIDO-2026-10843 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10843 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10689 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10729 AIKIDO-2026-10729 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10729 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10844 AIKIDO-2026-10844 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10844 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10841 AIKIDO-2026-10841 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10841 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10725 AIKIDO-2026-10725 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10725 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10840 AIKIDO-2026-10840 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10840 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10845 AIKIDO-2026-10845 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10845 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10718 AIKIDO-2026-10718 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10718 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10730 AIKIDO-2026-10730 in vm2 - Patched by Root

Root has patched AIKIDO-2026-10730 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root

Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54399 CVE-2026-54399 in org.apache.httpcomponents.core5:httpcore5 - Patched by Root

Root has patched CVE-2026-54399 in the org.apache.httpcomponents.core5:httpcore5 package for Root:Maven. Multiple fixed versions available...

PT-2026-96692

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Privilege escalation is possible due to a weak configuration during the package extraction process. Recommendations At the moment, there is no information about...

RockyLinux 10 : yggdrasil-worker-package-manager (RLSA-2026:69099)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69099 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 encoding/xml: golang: Go: Denial of...

The vulnerability of the new VM component in the vm2 library of the NPM package manager allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-25264: Uncontrolled Search Path Element

Privilege escalation due to weak configuration during package extraction process...

AlmaLinux 10 : yggdrasil-worker-package-manager (ALSA-2026:69099)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69099 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 encoding/xml: golang: Go: Denial of Servi...

CVE-2026-88738

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attacker with administrative privileges can upload a server-side executable file. The uploaded file is stored in a web-accessible executable location and can be...

CVE-2026-94425 Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was...