Program Compatibility Assistant Service Privilege Escalation

The vulnerability of the Program Compatibility Assistant Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

RegoMender: A Multi-Agent Framework for Automated Rego Policy Repair

Policy-as-Code PaC has emerged as a foundational paradigm in cloud-native systems. However, repairing Rego policies remains challenging due to their strict syntax, declarative semantics, and specific verification requirements. Existing automated program repair APR methods are mainly designed for...

CVE-2026-77936

Letta through 0.16.8 ships a compose.yaml that does not enable LETTASERVERSECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST...

CVE-2026-77936

Letta through 0.16.8 ships a compose.yaml that does not enable LETTASERVERSECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST...

Linux Distros Unpatched Vulnerability : CVE-2026-98647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791226662)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791226662 advisory. - If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of thes...

DEBIAN-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

UBUNTU-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

CVE-2026-98647 bpf: Fix divide-by-zero in btf_struct_walk()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

CVE-2026-98647

The Linux kernel contains a divide-by-zero vulnerability in the btf_struct_walk() function. The issue occurs when a BPF program access goes past a structure where the last member is a flexible array ; the function fails to verify that the element type has a non-zero size before performing a modul...

CVE-2026-98647 bpf: Fix divide-by-zero in btf_struct_walk()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

PT-2026-116866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero issue exists in the btf struct walk function. This occurs during program load time when an access extends beyond a structure and the final member is a flexible array. Th...

PT-2026-128562

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btf struct walk When an access goes past the struct and the last member is a flexible array, btf struct walk folds the offset back into a single element with off - moff % t-size, but never checks that t...

CVE-2026-98647: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 5.10.28 to 5.11, 5.11.11 to 5.12, and 5.12 itself. These vulnerabilities stem from the BPF trampoline program failing to skip the already separated programs that are still in use during separation. As a result, task sleep may call upon...

SUSE CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...

VulnSAGE: Adjudicating SAST Reports by Connecting LLM Reasoning to Program Structure

Static Application Security Testing SAST reports flag operations whose safety depends on project-specific context, and maintainers must decide which reports describe real defects. Large language models LLMs can interpret this context, but adjudicating a report with them requires the decisive code...

eladmin authorization issue vulnerability

Eladmin versions 2.7 and earlier have an authorization issue vulnerability. This vulnerability stems from the write processing program skipping department checks, allowing unauthorized access. Attackers with the user:edit or user:del permissions can send PUT or DELETE requests to /api/users,...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Detect IP == ksym.end as part of BPF program Now that bpfthrow kfunc is the first such call instruction that has noreturn semantics within the verifier, this also triggers dead code elimination in unprecedented ways. For...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: USB: Hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usbhubtostructhub to dereference a NULL or inappropriate pointer: Oops: general protection fault,...