CVE-2026-2847

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument IspName results in os command injection. The attack can be launched remotely. The explo...

CVE-2026-2847

The CVE-2026-2847 affects UTT HiPER 520 (product/version: 1.7.7-160105) within the Web Management Interface. The vulnerability is in the sub_44EFB4 function of /goform/formReleaseConnect, where manipulating the Isp_Name argument allows OS command injection. The issue enables remote exploitation, ...

CVE-2026-2676

A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issue is the function preHandle of the file LoginInterceptor.java of the component API Interface. Executing a manipulation can lead to improper authorization. The attack may be...

The vulnerability of the airspy_probe() function in the drivers/media/usb/airspy/airspy.c file of the Linux operating system’s multimedia device driver module allows a hacker to cause a service failure.

The vulnerability of the airspyprobe function in the drivers/media/usb/airspy/airspy.c file of the Linux multimedia device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-21247

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function deleteCache/removeAllCache/syncCache of the file datasetreposwarehousesrcmainjavacomyeqifusyscontrollerCacheController.java of the component Cache Sync Handler...

The vulnerability of the ath11kpci_write32() function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath11kpciwrite32 function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker t...

Vulnerability of the lpfc_rcv_plogi() function in the drivers/scsi/lpfc/lpfc_nportdisc.c module – The SCSI device support driver for the Linux operating system, which allows a hacker to cause service failure.

Vulnerability of the lpfcrcvplogi function in the drivers/scsi/lpfc/lpfcnportdisc.c module – The Linux SCSI device driver has a vulnerability related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failure...

The vulnerability of the mlx5e_init_rep_rx() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the `generate_lfp_data_ptrs()` function in the `drivers/gpu/drm/i915/display/intel_bios.c` file of the DRI driver for the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the generatelfpdataptrs function in the drivers/gpu/drm/i915/display/intelbios.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

The vulnerability of the dev_add_physical_location() function in the drivers/base/physical_location.c file of the Linux kernel device driver module allows a attacker to cause a service failure.

The vulnerability of the devaddphysicallocation function in the drivers/base/physicallocation.c file of the Linux kernel device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-21024

Name of the Vulnerable Software and Affected Versions UTT HiPER 520 version 1.7.7-160105 Description A flaw exists in the Web Management Interface component of UTT HiPER 520. Specifically, manipulating the Isp Name argument within the sub 44EFB4 function of the /goform/formReleaseConnect file can...

RustDesk 后置链接漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. The RustDesk Client for Windows has a post-release link vulnerability, which stems from a symbolic link iss...

PT-2026-21281

Name of the Vulnerable Software and Affected Versions yeqifu warehouse versions prior to aaf29962ba407d22d991781de28796ee7b4670e4 Description A flaw exists in the Customer Endpoint component of yeqifu warehouse. The addCustomer, updateCustomer, and deleteCustomer functions within the...

PT-2026-21282

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability affects the function addInport/updateInport/deleteInport of the file datasetreposwarehousesrcmainjavacomyeqifubuscontrollerInportController.java of the component Inport Endpoint...

leafkit 安全漏洞

Leafkit is an open-source application developed by Vapor. It uses Swift to create modular server-side software. Versions of Leafkit prior to 1.4.1 contained security vulnerabilities. These vulnerabilities stemmed from the fact that htmlEscaped only matched extended character clusters, which could...

The vulnerability of the vdpasim_free() function in the drivers/vdpa/vdpa_sim/vdpa_sim.c module of the vDPA device driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vdpasimfree function in the drivers/vdpa/vdpasim/vdpasim.c module of the vDPA device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __do_sys_set_mempolicy_home_node() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to trigger a system failure.

The vulnerability of the dosyssetmempolicyhomenode function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the SMB2_sess_auth_rawntlmssp_negotiate() function in the fs/cifs/smb2pdu.c module of the Linux kernel file system allows a hacker to induce a service failure.

The vulnerability of the SMB2sessauthrawntlmsspnegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the attach_default_qdiscs() function in the net/sched/sch_generic.c module of the net/sched/sch subsystem of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the attachdefaultqdiscs function in the net/sched/schgeneric.c module of the network scheduling subsystem of the Linux operating system’s kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-21336

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.17 and earlier Description OpenClaw, a personal AI assistant, contains an issue in the skills/skill-creator/scripts/package skill.py script. This script previously followed symbolic links when creating .skill archives...