UEFI Reference Firmware Advisory

Summary: A potential security vulnerability in UEFI for some Intel Reference Platforms may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35991 Description: Improper initialization in the UEFI...

MINI-R3H6-5R29-MQ4H

Bulletin has no description...

MINI-PWF8-7H8M-PQHW

Bulletin has no description...

MINI-J3CV-2WCF-W82Q

Bulletin has no description...

MINI-P72F-5CRJ-32FW

Bulletin has no description...

MINI-85WM-WHQ9-P375

Bulletin has no description...

MINI-5WCF-Q463-RW27

Bulletin has no description...

MINI-57VP-2R25-GRC3

Bulletin has no description...

CVE-2026-42950

creationtimestamp| type| source ---|---|--- 2026-05-11 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN03037325 2026-05-13 15:37:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqn3qbbyj2k 2026-06-03 01:22:01+00:00| seen|...

CVE-2026-43883 WWBN AVideo: IDOR in PayPalYPT agreementCancel.json.php Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/PayPalYPT/agreementCancel.json.php cancels a PayPal billing agreement using an attacker-supplied agreement parameter without verifying that the authenticated user owns the agreement. A low-privilege...

CVE-2026-42456

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio for another user's chat response within the same workspace...

CVE-2026-41311

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript he...

MINI-X8R3-5RR5-WF28

Bulletin has no description...

MINI-X93F-VJ3X-FJ36

Bulletin has no description...

MINI-WPCG-H264-5C96

Bulletin has no description...

MINI-W56P-4C67-QFJH

Bulletin has no description...

MINI-VMJ7-PQMF-HG6M

Bulletin has no description...

MINI-RW9R-PCWH-PFXR

Bulletin has no description...

MINI-R58X-Q228-4JVM

Bulletin has no description...

MINI-V2M7-GF7R-FXM7

Bulletin has no description...