CVE-2026-72432 tpm_crb: Check ACPI_COMPANION() against NULL during probe

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Check ACPICOMPANION against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, so platform drivers that rely on the...

CVE-2026-72302

The CVE-2026-72302 entry documents a Linux kernel flaw in ASoC: SOF ipc3-control where sof_ipc3_control_update() used firmware-provided cdata->num_elems in arithmetic that could overflow on 32-bit platforms. This overflow could let cdata->rhdr.hdr.size comparisons pass with mismatched sizes...

CVE-2026-72119 can: bcm: extend bcm_tx_lock usage for data and timer updates

In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcmtxlock usage for data and timer updates Stage new CAN frame content for an existing tx op into a kmalloc'd buffer and validate it there, mirroring the approach already used in bcmrxsetup. Only copy the validat...

CVE-2026-72117

CVE-2026-72117 concerns the Linux kernel “can: bcm” code, where a data race on rx_stamp/rx_ifindex in bcm_rx_handler() could occur for an rx op subscribed to all interfaces (ifindex == 0). The same op could be registered in a shared per-netns wildcard filter list, allowing concurrent bcm_rx_handl...

EUVD-2026-59075

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rxstamp/rxifindex in bcmrxhandler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcmrxhandler can run concurrentl...

CVE-2026-72117 can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rxstamp/rxifindex in bcmrxhandler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcmrxhandler can run concurrentl...

PT-2026-72534

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLAND WMI CONTROL and an event device BITLAND WMI EVENT. During the probe phase,...

CVE-2026-73678

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...

exp-labs

exp-labs Cybersecurity Training Platform This modern web secu...

RHSA-2026:54757 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

Bulletin has no description...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, vault-fips, vault, splunk-otel-collector...

GO-2024-2697 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5378 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, helm-push, newrelic-infrastructure-agent-fips, eks-node-monitoring-agent, xeol, upwind-agent, docker-compose, datadog-agent-fips, docker-fips, zarf, spegel-fips, consul-k8s, kaniko-fips, kubevela-fips, headlamp, opa,...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: gptscript, nuclei, timoni, dataplaneapi...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19764 Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19764

CVE-2026-19764 affects Raisecom’s Command and Dispatch Management Platform up to version 7.6.5. The vulnerability is in an unknown part of /app/users/getpwd.php where manipulating the sip argument causes SQL injection. The issue is exploitable remotely and public exploit code exists. References d...

PT-2026-72088

Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...