CVE-2026-64586

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

CVE-2026-64586

CVE-2026-64586 Linux kernel vulnerability in brcmfmac: removal of devices could race with outstanding bus_reset work. The fix adds a per-bus mutex (bus_reset_lock) and routes arming of the bus_reset through brcmf_bus_schedule_reset(), cancels via brcmf_bus_cancel_reset_work(), and drains the runn...

CVE-2026-64586 wifi: brcmfmac: drain bus_reset work on device removal

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

EUVD-2026-53773

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

CVE-2026-64586 wifi: brcmfmac: drain bus_reset work on device removal

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs "reset" entry both schedule drvr-busreset, whose callback recovers drvr through containerof and dereferences it. The removal path frees drvr...

WordPress Membership Plugin – Kadence Memberships plugin <= 4.0.0 - Unauthenticated Password Reset Link Poisoning to Account Takeover vulnerability

Unauthenticated Password Reset Link Poisoning to Account Takeover vulnerability discovered by scort in WordPress Plugin Restrict Content versions = 4.0.0...

SUSE CVE-2026-64581

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...

PT-2026-70008

Уязвимость прикладного программного интерфейса сброса пароля программного средства визуализации данных и создания отчетов Metabase связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный SQL-запро...

PT-2026-68427

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB gadget functionfs module where reset work is not consistently initialized. When a functionfs instance is unmounted, the ffs fs kill sb function calls cancel wo...

PT-2026-68419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the brcmfmac WiFi driver where the removal path frees the drvr structure without draining pending work. Specifically, the brcmf fw crashed function and the debugfs "rese...

Linux Distros Unpatched Vulnerability : CVE-2026-64586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: drain busreset work on device removal brcmffwcrashed and the debugfs reset entry both schedule drvr-busreset, whose callback recovers drvr throu...

Use of a Key Past its Expiration Date

Overview Affected versions of this package are vulnerable to Use of a Key Past its Expiration Date via the SavePasswordController::handle process. An attacker can gain unauthorized access to user accounts by submitting expired password reset tokens directly to the reset endpoint, bypassing the...

CVE-2026-39923

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...

EUVD-2026-53446

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...

CVE-2026-39924

CVE-2026-39924 affects Flarum prior to 1.8.16. The vulnerability is a session persistence issue caused by not clearing the access_tokens table on password changes, leaving attacker-held sessions active even after a victim resets a password. The TokensClearer::clearPasswordTokens() function only r...

CVE-2026-39924 Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation

Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a valid session token to retain full account access after a victim changes their password, because the accesstokens table is never cleared on password change events. The...

CVE-2026-39923

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...

CVE-2026-39923 Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...

CVE-2026-39923

CVE-2026-39923 affects Flarum prior to 1.8.16. A password reset token expiry bypass allows unauthenticated attackers to reuse expired tokens by POSTing to the reset endpoint; SavePasswordController::handle() calls PasswordToken::findOrFail() without expiry validation, bypassing the 24-hour token ...

EUVD-2026-53389

Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submitting them directly to the reset processing endpoint. The SavePasswordController::handle method calls PasswordToken::findOrFail...