EUVD-2025-206323

EVerest is an EV charging software stack. Prior to version 2025.12.0, ismessagecrccorrect in the DZGGSH01 powermeter SLIP parser reads vecvec.size-1 and vecvec.size-2 without checking that at least two bytes are present. Malformed SLIP frames on the serial link can reach ismessagecrccorrect with...

Everest-Core buffer error vulnerability

Everest-core is a major component of the EVerest open-source electric vehicle charging software stack. Versions of everest-core prior to 2025.12.0 contained a buffer error vulnerability. This vulnerability stems from the ismessagecrccorrect function in the DZGGSH01 power meter SLIP parser, which...

DCeption: Real-World Wireless Man-In-The-Middle Attacks against CCS EV Charging

The adoption of Electric Vehicles EVs is happening at a rapid pace. To ensure fast and safe charging, complex communication is required between the vehicle and the charging station. In the globally used Combined Charging System CCS, this communication is carried over the HomePlug Green PHY HPGP...

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.164 fixes various security issues The following security issues were fixed: CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 bsc1249242. CVE-2022-50327: ACPI: processor: idle: Che...

SUSE CVE-2025-71106

In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystemsfreezecallback The freezeallptr check in filesystemsfreezecallback introduced by commit a3f8f8662771 "power: always freeze efivarfs" is reverse which quite confusingly causes all file syste...

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

EUVD-2026-3112

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-20960 PowerApps Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-20960

Technical details (affected product versions, root cause, and fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2026-20960 PowerApps Desktop Client Remote Code Execution Vulnerability

...

PowerApps Desktop Client Remote Code Execution Vulnerability

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001412)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001412 advisory. IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003987 advisory. IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000777 advisory. Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service system crash via network traffic that...

MiracleLinux 7 : glibc-2.17-106.el7.4 (AXSA:2016-096:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-096:01 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...

MiracleLinux 7 : kernel-3.10.0-693.17.1.el7 (AXSA:2018-2578:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2578:02 advisory. An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly use...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000868)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000868 advisory. Buffer overflow in the mpoverridelegacyirq function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafte...