CVE-2026-16219 Croogo CMS Admin File Manager FileManager.php isEditable path traversal

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...

CVE-2026-16219 Croogo CMS Admin File Manager FileManager.php isEditable path traversal

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...

CVE-2026-16219

A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Admin File Manager. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been published...

CVE-2026-16219

CVE-2026-16219 affects Croogo CMS versions up to 4.0.7. The vulnerability lies in the Admin File Manager component, specifically FileManager::isEditable in FileManager/src/Utility/FileManager.php, leading to path traversal. Exploitation can be performed remotely; a working exploit has been publis...

CVE-2026-16218

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

PT-2026-61202

In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change handle and handle delete drm gem change handle ioctl leaves the old handle live in the IDR during the window between spin unlocktable lock and the final spin locktable lock. A concurrent drm gem...

PT-2026-61387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A preempt count leak exists in the powerpc/hv-gpci component. Four sysfs show callbacks—processor bus topology show, processor config show, affinity domain via virtual processor show, an...

PT-2026-61352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the igc fpe init smd frame function where it fails to set the buffer type when initializing igc tx buffer fields for an SMD skb. Because igc tx buffer entries are...

PT-2026-61270

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the migrate vma insert huge pmd page function. When a PMD Page Middle Directory check fails and the process jumps to unlock abort, the pag...

PT-2026-61370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bio integrity copy user function where the bip vcnt variable is incorrectly overwritten. Because bio integrity add page already sets bip vcnt to 1 for the bounce...

PT-2026-61209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt property handling where the tb property parse dir function fails to properly validate the dir len value derived from entry-length. When dir len is less...

PT-2026-61110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel KVM SVM implementation within the sev dbg crypt function. In the encryption path handled by sev dbg encrypt user, the per-iteration transfer length is...

PT-2026-61219

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cypress read int callback function where the system fails to validate interrupt packet headers before reading them. The function parses the interrupt-in buffer bas...

PT-2026-61147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the mac802154 llsec module, the functions llsec do encrypt unauth, llsec do encrypt auth, llsec do decrypt unauth, and llsec do decrypt auth perform in-place cryptographic...

PT-2026-61339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the gpio aggregator when using configfs. The dynamic software node created for the aggregator platform device is not properly removed during device deactivation...

MiracleLinux 9 : flatpak-1.12.9-4.el9_8.1 (AXSA:2026-1286:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1286:03 advisory. flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options CVE-2026-34078 flatpak: Flatpak: Arbitrary file deletion o...

PT-2026-61291

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where hci dev close sync can be called during the reset path. Failure to set HCI CMD DRAIN WORKQUEUE during device close can lead to the queuin...

PT-2026-61229

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm ESP out-of-place fast path where the esp output head function appends the trailer before esp output tail allocates the destination page frag. The head-side ga...

PT-2026-61224

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the uio pci generic sva component. The uio pci sva structure is allocated using devm kzalloc within the probe function. However, the code explicitly calls...

PT-2026-61223

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the omap2430 probe function. The of node putnp function is called prematurely before the final access to the np variable, which can lead to a...