ROOT-APP-NPM-CVE-2026-41240 CVE-2026-41240 in dompurify - Patched by Root

Root has patched CVE-2026-41240 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65912 CVE-2026-65912 in dompurify - Patched by Root

Root has patched CVE-2026-65912 in the dompurify package for Root:npm. Multiple fixed versions available...

Exploit for CVE-2026-98260

CVE-2026-98260 · Xiaomi 17 Ultra nezha Temporary Root + Ke...

CLEANSTART-2026-PP09847 On most platforms, Go uses the given system root certificates

CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details...

PT-2026-127800

CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions because CSRF protection is disabled by default. Attackers can lure an authenticated administrator to a malicious page that submits POST requests to commands like...

PT-2026-128264

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token can use PUT /fog/storagenode/id/edit to modify Storage Node...

PT-2026-128288

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YAN...

PT-2026-128323

Alpine iLX-F511 libanwbtstack.so prh rfcomm cc process test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the abili...

CVE-2026-118633: Path Traversal: '.../...//'

A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM all versions after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and th...

CVE-2026-118609: Stack-based Buffer Overflow

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118610: Stack-based Buffer Overflow

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...

CVE-2026-118605: Stack-based Buffer Overflow

Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...

CVE-2026-118611: Heap-based Buffer Overflow

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This flaw arises because the prhrfcommccprocesstest function fails to properly validate user-supplied data, allowing data beyond the bounds of allocated buffers to be read. This could enable nearby network attacker...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This vulnerability arises because the length of user-supplied data is not properly validated prior to copying it into the heap buffer during Bluetooth OBEX packet processing. As a result, physical presence attacker...

PT-2026-128285

Name of the Vulnerable Software and Affected Versions Juniper Networks Session Smart Router affected versions not specified Description A missing authentication flaw in a critical function allows an unauthenticated network-based attacker to gain administrative privileges. This is achieved by...

Juniper Networks Session Smart Router backlink vulnerability

Versions prior to Juniper Networks Session Smart Router 7.0.5, versions 7.1.0 through 7.1.7, and versions 7.2.0 through 7.2.3, as well as Juniper Networks Session Smart Conductor versions prior to 7.0.5, 7.1.0 through 7.1.7, and 7.2.0 through 7.2.3, contain a post-link vulnerability. This...

PT-2026-127904

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.80 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.40 Dell PowerProtect Data Domain versions 8.6.1.0 through...

MiracleLinux 9 : flatpak-1.12.9-4.el9_8.6 (AXSA:2026-2177:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2177:08 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitra...

Rocky Linux 9 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc Multiple Vulnerabilities (crlsa-2026_89850)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689850 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary wri...