CVE-2026-77900: Missing Authentication for Critical Function

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...

PT-2026-108705

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.1.0 through 2.16.1 AsyncHttpClient versions 3.0.0 through 3.0.13 Description The ThreadSafeCookieStore in the AsyncHttpClient library fails to track whether a Set-Cookie response was received via a secure transport...

PT-2026-108712

Call API localhost-only authentication bypass via spoofed Host header Summary PraisonAI's patched PRAISONAI CALL AUTH=disabled safeguard for the n8n/call agent invocation API can be bypassed with a spoofed Host: 127.0.0.1 header, allowing an unauthenticated network caller to list and invoke...

PT-2026-108641

Summary createVerifier in fast-jwt ≤ 6.3.0 skips signature verification entirely when the key option is a falsy synchronous value '' or null and the algorithms option is set to a non-empty allowlist. An attacker who can present a JWT to the application — regardless of algorithm — can forge...

ROS-20261008-73-0082

The vulnerability of the hcileremoteconnparamreqevt function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261008-73-0079

The vulnerability of the nftqueue function in Linux operating systems is related to improper handling of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261008-73-0077

The vulnerability of the hcicmdsyncqueueonce function in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261008-73-0073

The vulnerability of the nfconntrackhelperunregister function in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informati...

ROS-20261008-73-0060

The vulnerability of the getherdisconnect function in the drivers/usb/gadget/function/uether.c module of the Linux device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service...

ROS-20261008-73-0051

The vulnerability of the vxlannacreate function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

ROS-20261008-73-0235

The vulnerability of the dwc2hsotgudcstop function in the drivers/usb/dwc2/gadget.c file of the Linux device driver framework relates to the unlocking of a locked resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20261008-73-0231

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261008-73-0117

The vulnerability of the mpu3050commonremove function in the iio/gyro/mpu3050-core.c driver of various types of embedded sensors in the Linux operating system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261008-73-0094

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261008-73-0046

The vulnerability of the atmio16dattach function in the drivers/comedi/drivers/niatmio16d.c module relates to the assignment of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20261008-73-0044

The vulnerability of the dt2815attach function in the drivers/comedi/drivers/dt2815.c module, which supports Linux kernel-based data collection devices, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...

ROS-20261008-73-0019

The vulnerability of the cachefuseadddirenttocache function in the fs/fuse/readdir.c module of the Linux operating system is related to the execution of operations outside the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gai...

CVE-2026-103692: Improper Privilege Management

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

CVE-2026-104076: Missing Authentication for Critical Function

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read sensitive device information and modify device configuration via unprotected REST API endpoints. Attackers can send...

ROS-20261008-73-0241

The vulnerability of the cdns3gadgetinit function in the drivers/usb/cdns3/cdns3-gadget.c driver for Linux USB device drivers is related to an incorrect definition of internal states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...