CVE-2026-46674

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, an out-of-bounds read vulnerability exists in bacnet-stack's AtomicWriteFile record-access path. The bug is caused by a mismatch between an externally controlled...

CVE-2026-46677

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, there is a client-side out-of-bounds read in the AtomicReadFile-ACK record-access handling path. The issue is caused by a mismatch between a remote returnedRecordCount value and...

CVE-2026-45265

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, there is a stack-based out-of-bounds write / stack-buffer-overflow in bacnet-stack when the server processes a malicious Atomic-Read-File request in record access mode. The bug i...

CVE-2026-0455

The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit XPPU for the inter-processor interrupt IPI buffers does not block unauthorized access as expected. This allows processors in the SoC with any IPI channel access the ability to both read and write to the entire IPI buffer register space a...

CVE-2024-21963

An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor HV pages and potentially cause a host crash leading to loss of availability...

Important: Red Hat Security Advisory: libXtst security update

An update for libXtst is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser

A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...

CVE-2026-107152 Rubygem-smart_proxy_dynflow: dynflow console authorizes any client certificate the capsule ca signed

An improper authentication vulnerability has been found in the task console in the smartproxydynflow package. The console accepts any client certificate signed by the capsule's certificate authority. It does not check the list of servers the capsule trusts. A low-privileged network attacker or us...

CVE-2026-107152

The smart_proxy_dynflow package contains an improper authentication vulnerability in its task console. The console incorrectly accepts any client certificate signed by the capsule's certificate authority without verifying if the certificate belongs to a trusted server. A low-privileged network at...

EUVD-2026-124668

An improper authentication vulnerability has been found in the task console in the smartproxydynflow package. The console accepts any client certificate signed by the capsule's certificate authority. It does not check the list of servers the capsule trusts. A low-privileged network attacker or us...

CVE-2026-107152

An improper authentication vulnerability has been found in the task console in the smartproxydynflow package. The console accepts any client certificate signed by the capsule's certificate authority. It does not check the list of servers the capsule trusts. A low-privileged network attacker or us...

CVE-2026-46677

The BACnet Stack , an open-source BACnet protocol stack C library for embedded systems, contains a client-side out-of-bounds read vulnerability in the AtomicReadFile-ACK record-access handling path. This flaw exists in versions prior to 1.4.4 and 1.5.1 due to a mismatch between a remote returnedR...

CVE-2026-46674

The BACnet Stack open source protocol stack C library for embedded systems is vulnerable to an out-of-bounds read vulnerability in the AtomicWriteFile record-access path. This flaw is caused by a mismatch between an externally controlled returnedRecordCount field and the fixed-size internal fileD...

EUVD-2026-124658

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, an out-of-bounds read vulnerability exists in bacnet-stack's AtomicWriteFile record-access path. The bug is caused by a mismatch between an externally controlled...

CVE-2026-46674 BACnet Stack: Out-of-Bounds Read in AtomicWriteFile Record Decoder via Unbounded returnedRecordCount

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.4 and 1.5.1, an out-of-bounds read vulnerability exists in bacnet-stack's AtomicWriteFile record-access path. The bug is caused by a mismatch between an externally controlled...

CVE-2026-45265

The BACnet Stack , an open-source C library for embedded systems, contains a stack-based out-of-bounds write (stack-buffer-overflow) in versions prior to 1.4.4 and 1.5.1 . The vulnerability occurs when the server processes a malicious Atomic-Read-File request in record access mode. An attacker ca...

EUVD-2026-124638

Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authorization gate matches its protected prefixes /admin, /repo, /data with case-sensitive strings.HasPrefix, while the exact same raw req.URL.Path is later resolved against the filesystem. On...

CVE-2026-68548

The Algernon pure-Go web server is vulnerable to an unauthenticated authorization bypass in versions prior to 1.17.10 . The flaw exists because the software uses case-sensitive string matching for protected prefixes (e.g., /admin, /repo, /data) while resolving the raw request path against a case-...

CVE-2026-68548 Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefix gate

Algernon is a small self-contained pure-Go web server. Prior to version 1.17.10, Algernon's URL-prefix authorization gate matches its protected prefixes /admin, /repo, /data with case-sensitive strings.HasPrefix, while the exact same raw req.URL.Path is later resolved against the filesystem. On...

EUVD-2026-124636

The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit XPPU for the inter-processor interrupt IPI buffers does not block unauthorized access as expected. This allows processors in the SoC with any IPI channel access the ability to both read and write to the entire IPI buffer register space a...