EUVD-2026-65598

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

CVE-2026-13217 NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi

The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocppprocessservermsg the code calls atoistrtokruid, "-", &tmp without checking the strtokr return value. When the server-supplied uid is empty or contains no -...

ALPINE-CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

Linux Distros Unpatched Vulnerability : CVE-2026-78148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of...

The vulnerability of the mpfs_sys_controller_probe() function in the drivers/soc/microchip/mpfs-sys-controller.c file of the SOC kernel driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...

OpenSSL 1.1.1 < 1.1.1zi Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1zi. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1zi advisory. - Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more...

The vulnerability of the `parse_redboot_partitions()` function in the `drivers/mtd/parsers/redboot.c` file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

CVE-2026-74704

A flaw was found in the Linux kernel. The schcake ACK filter, responsible for processing network packets, contains a vulnerability. A remote attacker could send specially crafted malformed IP packets. This could lead to the system logging excessive warnings or, under specific configurations, caus...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system. In versions 2.4.2 and earlier, a heap buffer overflow vulnerability existed, which allowed a remote attacker to launch a Denial-of-Service DoS attack. This vulnerability was present in the formatlogline function. Exploitation of this...

K000163056: Linux kernel vulnerability CVE-2026-53133, CVE-2026-53176, CVE-2026-53215, CVE-2026-53265

Security Advisory Description CVE-2026-53133 In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes = 4G When the iommu is used the linearization of the mapping can give a single block that is very large split across multiple SG entries. When...

CVE-2026-78186

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

CVE-2026-78186 Open5GS HSS hss-cx-path.c assertion

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to incorrect ownership assignment. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the pm8916_lbc.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pm8916lbc.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the ImageLib component in web browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the ImageLib component in web browsers such as Firefox ESR, Firefox, and the email client Thunderbird is related to improper handling of certain physical or natural conditions. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Library component in web browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Library component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2026-74692

A TOCTOU race condition in the Linux kernel's net/smc module allows a remote attacker to trigger kernel memory exhaustion. The function smc_listen_out() reads the listener's socket state without holding the listener lock, then acquires the lock only afterward. This window lets smc_close_active() ...

Linux Distros Unpatched Vulnerability : CVE-2026-74692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix TOCTOU race between smclistenout and listener close smclistenout reads lsmc-sk.skstate without the listener lock, then acquires locksocknested only...

CVE-2026-19446 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

CVE-2026-18828

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 are affected by a stack-based buffer overflow that allows a remote, unauthenticated attacker to cause a denial of service . The NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with a network attack vector and no required privileges, while IBM's CNA assessment ...