CVE-2026-74416

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...

The vulnerability of the gpio_virtuser_device_config_group_release() function in the drivers/gpio/gpio-virtuser.c file of the Linux operating system’s GPIO driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gpiovirtuserdeviceconfiggrouprelease function in the drivers/gpio/gpio-virtuser.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-76630

openssl encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify api token function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any...

PT-2026-73221

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

PT-2026-73191

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...

PT-2026-73189

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and ma...

PT-2026-73196

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon check session url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and...

The vulnerability of the remove() function in the driver/gpu/drm/amd/amdgpu/amdgpu_gmc.c file of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the remove function in the driver/gpu/drm/amd/amdgpu/amdgpugmc.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2026-73384

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...

CVE-2026-67965

An issue in Tneda W20E v.16.01.0.62782 allows a remote attacker to execute arbitrary code via the urlneedlogin function...

Security update for git-cliff (important)

openSUSE Security Update: Security update for git-cliff Announcement ID: openSUSE-SU-2026:0287-1 Rating: important References: 1248065 1274523 Cross-References: CVE-2025-55159 CVE-2026-25541 CVSS scores: CVE-2025-55159 SUSE: 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

Linux Distros Unpatched Vulnerability : CVE-2026-19969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-099477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099477 advisory. A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-boun...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100578 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpanxmit The aoe driver or similar generates a...

Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099528 advisory. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of th...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099990 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fsubset: Fix unbalanced refcnt in gethfree gethalloc increments the reference count,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100147 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: au1200fb: Fix a memory leak in au1200fbdrvprobe In au1200fbdrvprobe, when platformgetirq...

Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099521 advisory. A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100720)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100720 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: Only release RCU read lock after ctft When looking up a flow table in actct in...