PT-2026-79738

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x irq bus sync unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions read or write must hold the i2c lock. The functio...

Linux Distros Unpatched Vulnerability : CVE-2026-74733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: pca953x: fix pca953xirqbussyncunlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to...

CVE-2026-55241: Uncontrolled Resource Consumption

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/src/api/routes/authRoutes.ts passes multipart...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002902 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setting of fpc register kvmarchvcpuioctlsetfpu allows to set the floating point...

EUVD-2026-62685

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-17429 Power System Incorrect Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with...

CVE-2026-19321 Power System Integer Overflow

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...

CVE-2026-19321

IBM Power Firmware is vulnerable due to CWE-190: Integer Overflow or Wraparound in host firmware. An attacker with service-processor access can craft commands to leak inaccessible hardware registers, causing limited confidentiality and high availability impact (CVSS 6.7). Affected versions includ...

EUVD-2026-62682

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...

CVE-2026-19321 Power System Integer Overflow

Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...

Missing Authorization

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization through the register API endpoint. An attacker can create unauthorized user accounts by sending crafted requests to the affected A...

Missing Authorization

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization through the register API endpoint. An attacker can create unauthorized user accounts by sending crafted requests to the affected A...

CVE-2026-19942: Improper Limitation of a Pathname to a Restricted Directory

The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCFAbilitiesMedia::register replace-media-file executecallback function in all versions ...

CVE-2026-76209: Missing Authorization

phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled. Attackers can bypass the registration restriction by submitting requests to POST /api/register or POST...

PT-2026-78574

Name of the Vulnerable Software and Affected Versions IBM Power Firmware version FW1120.00 IBM Power Firmware versions FW1110.00 through FW1110.30 IBM Power Firmware versions FW1060.00 through FW1060.80 Description A flaw in the host firmware allows an attacker with service access to the service...

CVE-2026-73351 WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-72280

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architectures. A guest operating system, when operating in a nested virtualization environment, could trigger a hypervisor panic hyppanic by writing to the ZCREL2 system register alias. This issue leads to a denial ...

CVE-2026-50191: Improper Authentication

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The POST /api/register...

CVE-2026-73351: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

CVE-2026-72111

A flaw was found in the Linux kernel's BPF verifier. When processing a context load of an LSM hook return value, the markregs32range function incorrectly intersects new register bounds with stale ones, rather than replacing them. This can lead to a mismatch between the verifier's understanding of...