DRI driver Kernel Heap Buffer Overflow DoS

The vulnerability of the generatelfpdataptrs function in the drivers/gpu/drm/i915/display/intelbios.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

Linux multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the airspyprobe function in the drivers/media/usb/airspy/airspy.c file of the Linux multimedia device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel SMB2 DoS

The vulnerability of the SMB2sessauthrawntlmsspnegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel device driver Heap Buffer Overflow DoS

The vulnerability of the devaddphysicallocation function in the drivers/base/physicallocation.c file of the Linux kernel device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Mellanox Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

PT-2026-21281

Name of the Vulnerable Software and Affected Versions yeqifu warehouse versions prior to aaf29962ba407d22d991781de28796ee7b4670e4 Description A flaw exists in the Customer Endpoint component of yeqifu warehouse. The addCustomer, updateCustomer, and deleteCustomer functions within the...

RustDesk post-link vulnerability

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. The RustDesk Client for Windows has a post-release link vulnerability, which stems from a symbolic link iss...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the dosyssetmempolicyhomenode function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath11kpciwrite32 function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker t...

lpfc_rcv_plogi() Function DoS

Vulnerability of the lpfcrcvplogi function in the drivers/scsi/lpfc/lpfcnportdisc.c module – The Linux SCSI device driver has a vulnerability related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failure...

PT-2026-21282

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of the file datasetreposwarehousesrcmainjavacomyeqifubuscontrollerInportController.java of the component Inport Endpoint...

PT-2026-21247

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file datasetreposwarehousesrcmainjavacomyeqifusyscontrollerCacheController.java of the component Cache Sync Handler...

PT-2026-21336

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.17 and earlier Description OpenClaw, a personal AI assistant, contains an issue in the skills/skill-creator/scripts/package skill.py script. This script previously followed symbolic links when creating .skill archives...

PT-2026-21024

Name of the Vulnerable Software and Affected Versions UTT HiPER 520 version 1.7.7-160105 Description A flaw exists in the Web Management Interface component of UTT HiPER 520. Specifically, manipulating the Isp Name argument within the sub 44EFB4 function of the /goform/formReleaseConnect file can...

Leafkit security vulnerabilities

Leafkit is an open-source application developed by Vapor. It uses Swift to create modular server-side software. Versions of Leafkit prior to 1.4.1 contained security vulnerabilities. These vulnerabilities stemmed from the fact that htmlEscaped only matched extended character clusters, which could...

Azure File Sync Agent v22.1 Release – February 2026 (KB5080681)

Update Rollup for Azure File Sync agent version 22.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v22.1 Release – February 2026 (KB5080681)

Update Rollup for Azure File Sync agent version 22.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2026-26323 OpenClaw has a command injection in maintainer clawtributors updater

OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script scripts/update-clawtributors.ts. The issue affects contributors/maintainers or CI who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicio...

CVE-2026-26158 affecting package busybox for versions less than 1.35.0-17

CVE-2026-26158 affecting package busybox for versions less than 1.35.0-17. A patched version of the package is available...

CVE-2026-27014

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop, and deeply nested directories cause unbounded recursion stack overflow in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...