MINI-CXHV-7C9F-VC58

Bulletin has no description...

MINI-4X92-9C42-V5QF

Bulletin has no description...

MINI-87MX-HPHH-XJ8F

Bulletin has no description...

MINI-26MG-3WGJ-4JCQ

Bulletin has no description...

CGA-7F98-J55X-R3X6

Bulletin has no description...

GHSA-4J38-RW27-97GX org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

Impact It's possible to forge a request to delete a message. Patches The problem has been patched in version 2.0-rc-1 of Discussion Extension. Workarounds There's no easy workaround except upgrading. References https://jira.xwiki.org/browse/DISCUSSION-22 For more information If you have any...

SUSE CVE-2026-64534

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst, when a data digest mismatch is detected, nvmetrequninit is called unconditionally. However, if the command arrived via the...

SUSE CVE-2026-64535

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...

CVE-2026-64535

A use-after-free flaw was found in the Linux kernel's NVMe-over-Fabrics TCP target nvmet-tcp driver. When NVMe/TCP data digest is enabled and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based write transfer, the digest error handler in nvmettcptryrecvddgst calls...

MINI-QW4R-VP4G-MMFH

Bulletin has no description...

MINI-M4R2-JQRQ-26GH

Bulletin has no description...

MINI-C6XJ-4H79-9VPJ

Bulletin has no description...

MINI-6PX3-3G2C-8M4V

Bulletin has no description...

MINI-XR8J-FR9H-CWHG

Bulletin has no description...

CVE-2026-59539

CVE-2026-59539 affects the WordPress plugin Paid Member Subscriptions (versions

CVE-2026-59539 WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Paid Member Subscriptions = 3.0.7 versions...

CVE-2026-59531

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks = 2.10.0 versions...

MINI-FQ6M-W3G5-W85G

Bulletin has no description...

CVE-2026-57917 Improper Restriction of XML External Entity Reference in proCertum SmartSign

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity XXE vulnerability is triggered simply by previewing a file in the file...

UBUNTU-CVE-2026-64534

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst, when a data digest mismatch is detected, nvmetrequninit is called unconditionally. However, if the command arrived via the...