CVE-2026-30060

free5gc v4.0.1 is affected by a Denial of Service vulnerability triggered when parsing crafted SUCI (Subscription Concealed Identifier) data during UE registration. The issue is tracked in the project's issue tracker (GitHub issue #769 ). The CVSS 3.1 score is 7.5 (HIGH) with a network attack vec...

EUVD-2026-67111

An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...

CVE-2026-30059

free5gc v4.0.1 , an open-source 5G Core implementation, contains a vulnerability in its NAS decoder component that allows a remote attacker to trigger a Denial of Service by sending a crafted Registration Request message. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector requiring no ...

CVE-2026-30060

An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...

PT-2026-82446

Name of the Vulnerable Software and Affected Versions Spring Security OAuth2 Authorization Server versions 7.0.0 through 7.0.4 Description When Dynamic Client Registration is enabled, the registration endpoint does not sufficiently validate certain client metadata fields provided by the registeri...

CVE-2026-30069

A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...

CVE-2026-30069

CVE-2026-30069 is a NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 , an open-source 5G core network implementation. An unauthenticated remote attacker can trigger a Denial of Service by supplying a crafted payload, leading to a crash without impacting confid...

DRUPAL-CONTRIB-2026-106

This module integrates Drupal Commerce with the CyberSource payment gateway. The module does not correctly verify the integrity of data returned by the payment provider. A timing attack could allow an attacker to trick the site into registering that payment has been received even if it hasn't. Th...

AZL-97698 CVE-2026-80565 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80565

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80559

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

CVE-2026-80559

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

CVE-2026-80565

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

UBUNTU-CVE-2026-80559

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80559

CVE-2026-80559 is a Linux kernel vulnerability in the sur40 input driver. The root cause is an incorrect registration ordering in sur40_probe(): input_register_device() was called before the V4L2 video device and vb2_queue were fully initialized. If userspace opened the input device immediately, ...

CVE-2026-80559 Input: sur40 - fix input device registration ordering

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

Controlling when CSS custom property values are computed

When and how CSS custom property values are calculated might not be what you expect, and it has a big impact on your styles. The default Take this HTML: … And this CSS: .second-item --index: sibling-index; & :first-child scale: var--index; If you're unfamiliar with sibling-index, here's a quick...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098827 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails when...

Linux Distros Unpatched Vulnerability : CVE-2026-80559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue...