Lucene search
+L

543 matches found

EUVD
EUVD
•added 2026/10/16 5:39 p.m.•8 views

EUVD-2026-103072

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

8.8CVSS5.8AI score0.00324EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/14 6:17 a.m.•10 views

CVE-2026-50218

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

8.5CVSS0.00328EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•13 views

PT-2026-113652

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

8.5CVSS5.9AI score0.00328EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•5 views

CVE-2026-50218: Improper Control of Resource Identifiers

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

8.5CVSS5.9AI score0.00328EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/14 12:00 a.m.•28 views

CVE-2026-50218

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

8.5CVSS0.00328EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/14 12:00 a.m.•10 views

EUVD-2026-100834

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

8.5CVSS5.9AI score0.00328EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/14 12:00 a.m.•24 views

CVE-2026-50218

The Akamai GPA (Guardicore Platform Agent) client on all platforms before version 7.4 is vulnerable to an issue where it improperly validates JWT tokens used for seeding. An attacker can exploit this by tricking a user into interacting with a malicious link to provide a spoofed JWT token . This a...

8.5CVSS5.9AI score0.00328EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/10/13 3:11 p.m.•12 views

CVE-2026-90258

A flaw was found in the pinctrl: airoha component of the Linux kernel. Without properly handling IRQ Interrupt Request resource helpers, the gpiolib General Purpose Input/Output library fails to set a flag indicating an IRQ pin is in use. This oversight can allow an unprivileged user or another...

5.5CVSS5.6AI score0.00206EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•14 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: i2c: acpi: fixed a resource leak in device addition during reconfiguration. The acpii2cfindadapterbyhandle function calls busfinddevice, which takes a reference to the adapter. This reference is never released, resulting in a...

5.5CVSS6.1AI score0.00234EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•15 views

Rocky Linux 8 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / etc (crlsa-2021_4361)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214361 advisory. systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured CVE-2020-13529 Tenable has...

6.1CVSS6.8AI score0.01431EPSS
SaveExploits1References87
SUSE CVE
SUSE CVE
•added 2026/09/24 11:45 p.m.•20 views

SUSE CVE-2026-97492

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

6AI score0.00173EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/09/24 5:17 p.m.•13 views

AZL-103718 CVE-2026-97492 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

6AI score0.00173EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/09/24 5:17 p.m.•16 views

DEBIAN-CVE-2026-97492

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

6.2AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 5:17 p.m.•16 views

CVE-2026-97492

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

0.00173EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2026/09/24 5:17 p.m.•20 views

UBUNTU-CVE-2026-97492

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

6.2AI score0.00173EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 4:04 p.m.•19 views

EUVD-2026-86090

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

6AI score0.00173EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 4:04 p.m.•26 views

CVE-2026-97492

A vulnerability exists in the Linux kernel 's mac80211 component where calling ieee80211_handle_reconfig_failure during a failed NAN reconfiguration causes all interfaces to be marked as not in the driver. This leads to dangling pointers to objects like stations and links (specifically noted for ...

6AI score0.00173EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/24 4:04 p.m.•48 views

CVE-2026-97492 wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

0.00173EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/09/24 12:00 a.m.•14 views

CVE-2026-97492

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that marks all interfaces as not in the driver. Then, at the error path of th...

6AI score0.00173EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/24 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-97492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: don't call ieee80211handlereconfigfailure when not needed In case reconfiguration of NAN fails, we call ieee80211handlereconfigfailure, that mar...

6AI score0.00173EPSS
SaveExploits0References3
Rows per page
Query Builder