PT-2026-99763

Name of the Vulnerable Software and Affected Versions Eyeplus version 57.0.0.0308 Description A remote stack-based buffer overflow exists within the p2pcam HTTP Parser component. This issue occurs when an unknown function fails to properly handle input, allowing a remote attacker to trigger the...

PT-2026-102402

Name of the Vulnerable Software and Affected Versions Intelbras TIP 125i versions 4.3.35 through 4.3.41 Description A remote attack targeting an unknown function within the Básico Page component can lead to the inclusion of sensitive information in the source code. This issue is characterized by...

CVE-2026-52748: Missing Authentication for Critical Function

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

ROS-20260928-73-0042

The vulnerability of the modules net/sctp/smmakechunk.c and net/sctp/smstatefuns.c in the Linux operating system is related to the disclosure of information due to timing mismatches. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected...

ROS-20260928-73-0008

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260928-73-0115

The vulnerability of the walkstackframe function in the arch/riscv/kernel/stacktrace.c file, a subsystem for module management on the RISCV architecture of the Linux operating system’s kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker,...

PT-2026-99882

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

PT-2026-99905

Name of the Vulnerable Software and Affected Versions SUSE Rancher Fleet versions 0.16 through 0.16.1 Description The Git webhook receiver the gitjob webhook service fails to verify incoming requests when a webhook secret is not configured. This allows a remote caller with network access to the...

CVE-2026-101262: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects unknown code of the file /api/ZRQos/setonlineclient. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

CVE-2026-100903: Missing Authentication for Critical Function

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipulation of the argument objectId leads to missing authentication. The attack can be launched remotely. The exploit is...

CVE-2026-101100: Incomplete Cleanup

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...

ROS-20260928-73-0010

The vulnerability of the bpfprogtestrunxdp function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-101053: Improper Access Control

A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUTFILE of the file /tmp/wpasupplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls. The attack may be launched remotely. The exploit...

CVE-2026-101202: Out-of-bounds Write

A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to out-of-bounds write. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure b...

PT-2026-102371

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions prior to 8.4 Description A flaw in the TGA Image Handler component allows a remote attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer...

Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104443)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104443 advisory. - In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java L...

CVE-2026-101077: Missing Authentication for Critical Function

A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function processrequest of the component boatemp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contact...

CVE-2026-101072: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

PT-2026-99883

Name of the Vulnerable Software and Affected Versions Netcore NR289-GE version 1.4.5102 Description An OS command injection flaw exists in the CGI Handler component. A remote attacker can exploit this by manipulating the ip argument within the /ap ip.cgi endpoint, which is processed by the system...

CVE-2026-101074: Stack-based Buffer Overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...