PT-2026-35009

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the batman-adv module, the function batadv bla add claim can replace claim-backbone gw and drop the last reference of the old gateway while readers are still following the pointer. Th...

VulnCheck KEV: CVE-2026-3965

A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...

MINI-MM75-G8VH-J5R4

Bulletin has no description...

MINI-R64X-MHJM-P9W3

Bulletin has no description...

MINI-Q66W-F7X6-GRQH

Bulletin has no description...

MINI-HQGJ-W9JW-HX2F

Bulletin has no description...

MINI-M899-QJH2-G987

Bulletin has no description...

MINI-47XC-CP6V-542P

Bulletin has no description...

MINI-3J8J-829C-3V77

Bulletin has no description...

MINI-PG4P-8P25-256H

Bulletin has no description...

CVE-2026-4896

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...

MINI-RM42-6533-33R6

Bulletin has no description...

MINI-V337-MR4V-R68F

Bulletin has no description...

MINI-J72V-2PHG-G3H3

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-23436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: shaper: protect from late creation of hierarchy We look up a netdev during prep of Netlink ops pre- callbacks and take a ref to it. Then later in the body ...

ECHO-5DE4-11C3-45F3

Bulletin has no description...

MINI-QF84-6C97-696V

Bulletin has no description...

MINI-Q86Q-5RFC-CF5C

Bulletin has no description...

EUVD-2026-18981

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...

CVE-2026-4896

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including wcfmmodifyorderstatus, deletewcfmarticle,...