CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

CVE-2026-6889

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-51382

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-54609

QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECTREQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of...

GHSA-85RG-P3FR-XC2F QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Impact The relay's reconnect handler forwards every RECONNECTREQUEST to the host without deduplication or a size cap on the pendingReconnects map, unlike the connect flow which guards against this with maxPendingConnections. An unauthenticated attacker who knows a valid session ID can send...

NPM: QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

NPM: QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECTREQUEST forwarding vulnerability discovered by ? in WordPress Npm qti-neon versions 1.0.0...

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Impact The relay's reconnect handler forwards every RECONNECTREQUEST to the host without deduplication or a size cap on the pendingReconnects map, unlike the connect flow which guards against this with maxPendingConnections. An unauthenticated attacker who knows a valid session ID can send...

CVE-2026-54609 QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECTREQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of...

CVE-2026-54609

QtINeon CVE-2026-54609 affects NeonRelay (Java, Python, TypeScript). The vulnerability is unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding in handleReconnectRequest, where packets are forwarded to the host without bounding. This creates a denial-of-service pa...

EUVD-2026-49905

QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECTREQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of...

CVE-2026-54609

QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECTREQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of...

UBUNTU-CVE-2026-64390

In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2LOCK adds each granted byte-range lock to both the file lock list and the lock list of the connection which handled the request. The final close and durable handle paths,...

CVE-2026-64390

The CVE-2026-64390 issue affects the Linux kernel ksmbd component where SMB2_LOCK locks are tracked on the file lock list and the lock list of the handling connection. With SMB3 multichannel, the LOCK owner can differ from the file opener, so a lock entry can be removed under a different spinlock...

EUVD-2026-48934

In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2LOCK adds each granted byte-range lock to both the file lock list and the lock list of the connection which handled the request. The final close and durable handle paths,...

CVE-2026-64390 ksmbd: track the connection owning a byte-range lock

In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2LOCK adds each granted byte-range lock to both the file lock list and the lock list of the connection which handled the request. The final close and durable handle paths,...

GHSA-J8GR-8FP3-5Q5H Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR Microsoft.AspNetCore.App.Runtime. This advisory also provides guidance on what...

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core SignalR Microsoft.AspNetCore.App.Runtime. This advisory also provides guidance on what...

SUSE CVE-2026-64016

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbdreopendurablefd republishes the same ksmbdfile into the session volatile-id table. If smb2open then takes a later error path, cleanup...

Linux Distros Unpatched Vulnerability : CVE-2026-64016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds,...

CVE-2026-64016

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbdreopendurablefd republishes the same ksmbdfile into the session volatile-id table. If smb2open then takes a later error path, cleanup...