UBUNTU-CVE-2026-40213

OpenStack Cyborg before 16.0.1 uses rule:allow checkstr='@' as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless of roles, project membership, or scope. An authenticated user with zero role assignments can complet...

parisc: Do not reprogram affinitiy on ASP chip

...

CVE-2018-17923

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it...

PT-2018-14275

Name of the Vulnerable Software and Affected Versions SAGA1-L8B versions prior to A0.10 Description The issue allows an attacker with physical access to the product to potentially reprogram it. Recommendations For versions prior to A0.10, update the firmware to version A0.10 or later to resolve t...

CVE-2018-17923: Improper Authentication

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it...

GAIN Electronic Co. Ltd SAGA1-L Series Incorrect Certification Vulnerability

GAIN SAGA1-L Series is a SAGA1-L series industrial remote control product from GAIN Electronic. A security vulnerability exists in GAIN SAGA1-L Series products using firmware versions prior to A0.10. An attacker in close physical proximity could exploit the vulnerability to reprogram the product...