Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoided a memory leak in applereportfixup The applereportfixup function was returning a buffer allocated using kmemdup, but never freeing that buffer. The caller of reportfixup does not take ownership of the returned...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfc: virtualncidev: Fixed a memory leak in virtualncisend The skb object should be freed in virtualncisend; otherwise, kmemleak will report a memleak. Steps for reproduction simulated in qemu: cd tools/testing/selftests/nci make...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: Do not queue data on closed subflows. Dipanjan reported a critical bug fix at the last minute: WARNING: CPU: 1 PID: 10818 at net/ipv4/afinet.c:153 inetsockdestruct+0x6d0/0x8e0 net/ipv4/afinet.c:153 Linked modules:...

CVE-2026-90702

creationtimestamp| type| source ---|---|--- 2026-09-14 10:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhv5kwyg62p 2026-09-14 10:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fuslokhljzan...

CVE-2026-89711

creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhjzafa762p 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90620

creationtimestamp| type| source ---|---|--- 2026-09-14 04:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bvtg3vp3i26f...

CVE-2026-14962

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:13+00:00| seen| Telegram/cfwIjD0BfTttpxj-RZnmg61xri6aKpaW-Ttu0tih2neg1Gg 2026-09-14 03:00:13+00:00| seen| Telegram/SISeOiJWiDHPKa0-EGjfIE-tIZnqvMDmbIqcTRDP3O63UA 2026-09-15 00:00:22+00:00| published-proof-of-concept|...

CVE-2026-86547

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY 2026-09-15 00:00:23+00:00| seen| Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY...

PT-2026-91765

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

CVE-2026-55846: Improper Limitation of a Pathname to a Restricted Directory

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure open uses URI.getPath in Commands.setUpServer in allure-commandline/src/main/java/io/qameta/allure/Commands.java and passes the...

CVE-2026-55847: Improper Neutralization of Input During Web Page Generation

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

The Model Proposes, the Code Disposes: A Pre-Registered Ablation of a Verifier-And-Acceptance Stage in an LLM-Orchestrated Offensive-Security Agent

We evaluate whether a verifier-and-acceptance stage - a model verifier whose verdicts are enforced by deterministic code - changes what an LLM-driven offensive-security agent reports. We report a 15-run exploratory pilot, a pre-registered 20-run confirmatory ablation, and a pre-registered 2 x 2...

CVE-2026-89724

creationtimestamp| type| source ---|---|--- 2026-09-13 20:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgf4butcg2e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89744

creationtimestamp| type| source ---|---|--- 2026-09-13 15:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfufbjt4s22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89478

creationtimestamp| type| source ---|---|--- 2026-09-13 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfoqj3qvo2n 2026-09-18 08:10:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117291025543386014 2026-09-18 08:20:04+00:00| seen|...

CVE-2026-89708

creationtimestamp| type| source ---|---|--- 2026-09-13 12:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvflfcinod2t 2026-09-14 05:03:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhdhyyi7f2z 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-89689

creationtimestamp| type| source ---|---|--- 2026-09-13 12:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfkbktwx32t...

CVE-2026-90769

creationtimestamp| type| source ---|---|--- 2026-09-13 11:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ajovehl3mgcct 2026-09-13 12:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfkeghhpq2m...

CVE-2026-89675

creationtimestamp| type| source ---|---|--- 2026-09-13 11:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfilv2uav2t...

CVE-2026-89671

creationtimestamp| type| source ---|---|--- 2026-09-13 11:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfhzw7v7j2f 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...