CVE-2026-74580

CVE-2026-74580 - LPE CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration - Exploit Exploit History I discovered this vulnerability three days after it had been reported by another researcher. However, I had already developed the exploit and chose not to release it until ...

CVE-2026-119755

Tasmota versions through 16.0.0 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in the HttpCheckPriviledgedAccess() function. The root cause is a failure in Referer-based CSRF protection validation, which can be bypassed by crafting a Referer header containing the device's hos...

CVE-2026-33958

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds OOB access, resulting in a denial-of-service DoS condition...

CVE-2026-33958

The SAMSUNG Exynos 1080 processor contains an input validation error that allows for an out-of-bounds (OOB) access when processing malformed RRC Reconfiguration messages . This vulnerability can result in a denial-of-service (DoS) condition. No specific software versions are listed as affected, a...

CVE-2026-33958

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds OOB access, resulting in a denial-of-service DoS condition...

CVE-2026-33958

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds OOB access, resulting in a denial-of-service DoS condition...

EUVD-2026-117277

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds OOB access, resulting in a denial-of-service DoS condition...

PT-2026-137346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Processing a malformed RRC Reconfiguration message leads to an out-of-bounds OOB access, which results in a denial-of-service DoS condition. Out-of-bounds access...

Exploit for CVE-2026-74580

CVE-2026-74580 CVE...

CVE-2026-79980 Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS

The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier iface-config.dhcpv4.xid as a counter rather than as a per-transaction random value. It was seeded once with sysrand32get in dhcpv4startinternal, incremented by one in dhcpv4senddiscover and dhcpv4senddecline...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f; it can therefore be 0..15. linkremovaltimeout contains IEEE80211MLDMAXNUMLINKS 15 elements, s...

EUVD-2026-103072

ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider,...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: i2c: acpi: fixed a resource leak in device addition during reconfiguration. The acpii2cfindadapterbyhandle function calls busfinddevice, which takes a reference to the adapter. This reference is never released, resulting in a...

CVE-2026-50218

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

CVE-2026-50218

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

CVE-2026-50218

The Akamai GPA (Guardicore Platform Agent) client on all platforms before version 7.4 is vulnerable to an issue where it improperly validates JWT tokens used for seeding. An attacker can exploit this by tricking a user into interacting with a malicious link to provide a spoofed JWT token . This a...

CVE-2026-50218

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

PT-2026-113652

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

EUVD-2026-100834

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

CVE-2026-50218: Improper Control of Resource Identifiers

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...