CVE-2026-17539

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...

CVE-2026-17539

RTU500 (Hitachi Energy) is affected by a NULL pointer dereference in the last entry of the enhanced message queue, triggered under high-load scenarios such as sending GI (General Interrogation) requests at short intervals . This leads to a BCI_IEC104 fatal write error , causing connection interru...

SUSE-SU-2026:3929-1 Security update for nodejs20

This update for nodejs20 fixes the following issues: - CVE-2025-22150: undici: predictable random values used when defining the boundary for a multipart/form-data request bsc1236258. - CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response...

SUSE CVE-2026-74353

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

SUSE CVE-2026-74742

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-2026-17539: NULL Pointer Dereference

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...

PT-2026-90881

In the Linux kernel, the following vulnerability has been resolved: af packet: Don't send zero-byte data in tpacket snd. syzbot reported a WARNING in dev queue xmit triggered via tpacket snd: skb assert len WARNING: at include/linux/skbuff.h:2753 skb assert len WARNING: at dev queue...

PT-2026-84915

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCI IEC104 fatal write error, resulting in connection interruption and restart, and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105461 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule...

Allocation of Resources Without Limits or Throttling

Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the connection multiplexer's channel handling the mux chanList, reached through Dial, NewClientConn, NewControlClientConn, and...

Missing permission check allows canceling builds

The build command of the Jenkins CLI can be invoked with the -s flag to wait for a triggered build to complete, canceling the build when the CLI client is interrupted. Jenkins merges multiple requests to build the same job with the same parameters into a single queue item. In Jenkins 2.579 and...

Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [CVE-2026-17470, CVE-2026-17469]

Summary IBM i is vulnerable to denial of service due to a buffer overflow and off-by-one write CVE-2026-17470, CVE-2026-17469 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17470 DESCRIPTION: IBM i could allow a remote attacker t...

CVE-2026-80647

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA HNS driver. When the driver undergoes a reset, a completion queue handler is unexpectedly called, even though it is not intended to be active in its current operating mode. This incorrect invocation leads to the system issuin...

CVE-2026-80628

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer OSS Open Sound System emulation. A local user could exploit a data race condition when the sndseqossreadqclear function resets the read queue state without proper locking. This can lead to stale records, dropp...

The vulnerability of the pqm_update_queue_properties() function in the drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD kernel-based Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the pqmupdatequeueproperties function in the drivers/gpu/drm/amd/amdkfd/kfdprocessqueuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems leads to unmanageable resource consumption. Exploiting this vulnerability...

CVE-2026-82554

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-82554

SourceCodester Queue Management System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /api/add_customer.php . Manipulating the Name parameter allows a remote, unauthenticated attacker to inject script, requiring user interaction to trigger. The impact is rated MEDIUM (C...

EUVD-2026-68276

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-82554 SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...

CVE-2026-82554 SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/addcustomer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used...