CVE-2026-64846

Nix versions prior to 2.35.0 contain a TOCTOU race in the LocalStore restore path: writeFile opens a path with O_TRUNC instead of enforcing FinalSymlink::DontFollow, allowing a malicious derivation (with recursive-nix enabled) to create or truncate an empty file outside the build sandbox with dae...

EUVD-2026-63424

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-63042

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or...

CVE-2026-63015

Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

CVE-2026-18273 Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

CVE-2026-18273

CVE-2026-18273 is a local privilege escalation vulnerability in the Kenwood DNR1007XR car audio/navigation unit. The root cause is incorrect default permissions on a directory used as the USB filesystem mount point , allowing a physically present attacker with low-privileged code execution to esc...

EUVD-2026-63420

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

EUVD-2026-63417

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2026-18270

Kenwood DNR1007XR devices are affected by a local privilege escalation vulnerability in the udhcpd service. The root cause is an incorrect permission assignment on a resource used by the service, allowing an attacker with low-privileged code execution to escalate to root . The CVSS 3.0 score is 7...

EUVD-2026-63415

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the targe...

CVE-2026-18268

Kenwood DNR1007XR is affected by a local privilege escalation vulnerability in the JKGenService component. The root cause is insufficient validation of a user-supplied string before it is passed to a system call, allowing an attacker with low-privileged local code execution to escalate to root an...

EUVD-2026-63413

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-54449

In LangBot 4.10.7 and earlier, StdioServerParameters in src/langbot/pkg/provider/tools/loaders/mcp.py runs attacker-supplied commands as a server-side subprocess without authorization checks (CWE-78). Any authenticated user can add an arbitrary command via the Extensions MCP tab, achieving full R...

EUVD-2026-63480

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

EUVD-2026-63403

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or...

CVE-2026-63040

In Apache InLong 2.0.0 through 2.3.x, the StreamSource component's forceDelete operation performs no authorization check, allowing any authenticated user to logically delete all stream sources. Upgrade to InLong 2.4.0 or cherry-pick PR #12145 (https://github.com/apache/inlong/pull/12145) to resol...

CVE-2026-63040 Apache InLong: Missing authorization in StreamSource forceDelete

Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no authorization check, any authenticated user can logically delete ALL stream sources. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache...

CVE-2026-74295

A flaw was found in the Linux kernel, specifically within the ASoC hdachdmi audio codec driver. This vulnerability occurs because the driver does not properly validate an input value used to access an internal data structure. A local attacker could provide a specially crafted input, causing the...

CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...

CVE-2026-63016 Apache InLong: Ordinary users can create new packages

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...