SUSE CVE-2026-64391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the...

SUSE CVE-2026-64399

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via vfsclonefilerange with neither the share-level KSMBDTREECONNFLAGWRITABLE che...

CVE-2026-64399

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via vfsclonefilerange with neither the share-level KSMBDTREECONNFLAGWRITABLE che...

CVE-2026-64392

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or durable handle teardown, where no request work is available. Both the base-file unlink and the ADS xattr removal consequently run...

CVE-2026-64399

Summary: CVE-2026-64399 affects the Linux kernel ksmbd path for FSCTL_DUPLICATE_EXTENTS_TO_FILE. The vulnerability allows overwriting a destination file’s data via vfs_clone_file_range() because both the share-level KSMBD_TREE_CONN_FLAG_WRITABLE check and a per-handle daccess check were absent, a...

EUVD-2026-48943

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via vfsclonefilerange with neither the share-level KSMBDTREECONNFLAGWRITABLE che...

CVE-2026-64399 ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via vfsclonefilerange with neither the share-level KSMBDTREECONNFLAGWRITABLE che...

CVE-2026-64399

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add permission checks for FSCTLDUPLICATEEXTENTSTOFILE The FSCTLDUPLICATEEXTENTSTOFILE arm of smb2ioctl overwrites the destination file's data via vfsclonefilerange with neither the share-level KSMBDTREECONNFLAGWRITABLE che...

PT-2026-64613

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or durable handle teardown, where no request work is available. Both the base-file unlink and the ADS xattr removal consequently run...

CVE-2026-17059

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...

EUVD-2026-48598

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...

CVE-2026-17059

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...

PT-2026-64299

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...

CVE-2026-63280

CVE-2026-63280 concerns a Joomla extension from Regular Labs, specifically the Conditions Manager. The issue is described as inconsistent CSRF token checks and privilege checks within the Conditions administration, meaning that tokens and mapped-item/ component permissions were not consistently e...

CVE-2026-63684

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

EUVD-2026-47804

Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items...

GO-2026-6017 Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea

Gitea has insufficient permission checks for Composer package source links in code.gitea.io/gitea...

kernel: fanotify: fix false positive on permission events

A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...

PT-2026-63304

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.26.5 Description A broken access control issue exists in the RemoveDependency function within routers/web/repo/issue dependency.go. The function processes the removeDependencyID form parameter to identify and remove a...

CVE-2026-63745

SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability where authenticated users can spoof composite record-id field values by writing to editable body fields. Attackers can bypass permission rules that gate access on id components like tenant isolation by setting same-name...