CVE-2026-58238

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex t...

EUVD-2026-55870

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex t...

CVE-2026-58238 Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex t...

CVE-2026-58238 Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could send specially crafted input that causes the component to crash and restart. Successful exploitation requires specific runtime conditions to be met, making the attack complex t...

CVE-2026-58238

CVE-2026-58238 affects SAP Approuter in SAP Business AI Platform. The vulnerability arises from insufficient handling of certain requests under specific runtime conditions, allowing an unauthenticated attacker to craft input that causes the component to crash and restart. Impact is limited to ava...

PT-2026-70020

Name of the Vulnerable Software and Affected Versions SAP SAPSPrint Service affected versions not specified Description Memory corruption exists in the handling of certain commands. An unauthenticated attacker can send specially crafted requests to trigger a buffer overflow, which leads to a...

CVE-2026-68362

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11khalsrngaccessbegin In ATH11KQMIEVENTFWREADY, ATH11KFLAGREGISTERED is set unconditionally even when ath11kcoreqmifirmwareready fails. This leaves the driver in an inconsistent...

EUVD-2026-55463

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11khalsrngaccessbegin In ATH11KQMIEVENTFWREADY, ATH11KFLAGREGISTERED is set unconditionally even when ath11kcoreqmifirmwareready fails. This leaves the driver in an inconsistent...

CVE-2026-68362 wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11khalsrngaccessbegin In ATH11KQMIEVENTFWREADY, ATH11KFLAGREGISTERED is set unconditionally even when ath11kcoreqmifirmwareready fails. This leaves the driver in an inconsistent...

CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter

An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...

CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter

An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...

PT-2026-69762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the ath11k hal srng access begin function. The issue occurs because ATH11K FLAG REGISTERED is set unconditionally during ATH11K QMI EVENT FW READY,...

CVE-2026-54213

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...

EUVD-2026-54444

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...

CVE-2026-54213 TeamDavid: Denial of Service via endpoint 'internalRestart'

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...

CVE-2026-54213 TeamDavid: Denial of Service via endpoint 'internalRestart'

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...

CVE-2026-54213

CVE-2026-54213 affects Tobit Laboratories AG TeamDavid’s Webbox. A public, unauthenticated request to the /internalRestart endpoint causes the server to shut down instead of restarting, enabling a remote attacker to trigger a persistent denial-of-service by taking the web server offline. Recovery...

CVE-2026-53985

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

CVE-2026-53985 Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

EUVD-2026-54095

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...