MINI-WQ72-P6X2-W385

Bulletin has no description...

CVE-2026-85615

Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to bind dashboardId to the authorized projectId. Authenticated attackers can supply an arbitrary victim dashboardId with their own projectId ...

CVE-2026-85615 Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayouts

Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to bind dashboardId to the authorized projectId. Authenticated attackers can supply an arbitrary victim dashboardId with their own projectId ...

CVE-2026-85615

Openpanel before 2.3.0 is affected by an insecure direct object reference (IDOR) vulnerability in the report.getLayouts and report.resetLayout tRPC procedures. The root cause is a failure to bind dashboardId to the authorized projectId , allowing an authenticated attacker to supply an arbitrary v...

CVE-2026-27432 WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Rentals: from n/a before 3.16.0...

WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Rafie Muhammad in WordPress Theme WP Rentals versions 3.16.0...

GHSA-V7PH-R5R6-4JCJ

creationtimestamp| type| source ---|---|--- 2026-09-04 08:32:32+00:00| seen| https://gist.github.com/alon710/4e3a59a46f5538004facf996eb24fc2d...

Malicious Package

Overview ecs-api-reference is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CGA-RVXG-9MHW-F8QQ

Bulletin has no description...

CGA-HPJH-GQW6-R3RM

Bulletin has no description...

CVE-2026-85615: Authorization Bypass Through User-Controlled Key

Openpanel before 2.3.0 contains an insecure direct object reference vulnerability in the report.getLayouts and report.resetLayout tRPC procedures that fail to bind dashboardId to the authorized projectId. Authenticated attackers can supply an arbitrary victim dashboardId with their own projectId ...

PT-2026-85686

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on create cq mapping failure nvmet pci epf create cq calls nvmet cq create, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails...

PT-2026-86188

CVE-2026-80897 - Linux kernel netfs flaw leaves readahead folio refs held on iterator prep failure, risking memory exhaustion. CVSS N/A. Currently unpatched. If you run a kernel with netfs, monitor for updates and test mitigations. https://t.co/Nnac5t2z7p CVE infosec XSS valtersit snippet infosec...

CVE-2026-80821: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

PT-2026-85788

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs read inode mount The $MFT attribute-list walk in ntfs read inode mount validates each entry only with "u8 al entry + 6 al end" and "u8 al entry + le16 to cpual entry-length al end", bu...

PT-2026-86189

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the netfs pgpriv2 copy to cache function where a folio is marked with PG private 2 before being appended to the copy-to-cache rolling buffer via netfs pgpriv2 copy...

PT-2026-85797

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Andrew File System afs component where the afs lookup volume rcu function fails to properly handle cases where afs try get volume fails, leading to a leak of a dyi...

Linux Distros Unpatched Vulnerability : CVE-2026-80841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: defer vmalloc TXRING free until skbs finish AFPACKET TXRING skbs keep a raw pointer to their ring frame. The skb page references preserve page-backe...

CVE-2026-80888: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...

PT-2026-86179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the drm/vmwgfx component when importing a foreign file descriptor. The function ttm prime fd to handle returns an error when the imported file descriptor's dma...