ROOT-APP-NPM-CVE-2026-64644 CVE-2026-64644 in next - Patched by Root

Root has patched CVE-2026-64644 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root

Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-65213

The Supermicro BMC IPMI feature contains a vulnerability that may allow an IPMI authenticated administrator to perform Arbitrary Command Execution with superuser privileges . This flaw, identified as CWE-78 (OS Command Injection), enables the execution of commands as the operating system root use...

CVE-2026-65213 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...

EUVD-2026-110639

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...

ROOT-APP-PYPI-CVE-2026-22702 CVE-2026-22702 in virtualenv - Patched by Root

Root has patched CVE-2026-22702 in the virtualenv package for Root:PyPI. Multiple fixed versions available...

Exploit for CVE-2026-98260

CVE-2026-98260 · Xiaomi 17 Pro pandora Local Privilege Escal...

Review.CVE-2021-3156

👑 CVE-2021-3156 Baron Samedit — Privilege Escalation via Heap Overflow in sudo 📅 Дата: 2025-06-08 ✍️ Автор: @TopskiyPavelQwertyGang 🧠 Security Researcher | Red Team Enthusiast 🧠 CVE Overview CVE-ID: CVE-2021-3156 Type: Heap-based Buffer Overflow Component: sudoedit sudo Access level: Local Goal:...

ROOT-APP-NUGET-CVE-2026-96960 CVE-2026-96960 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-96960 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2026-47302 CVE-2026-47302 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-47302 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

ROOT-APP-NUGET-CVE-2026-50525 CVE-2026-50525 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-50525 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

SUSE CVE-2026-99098

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dmintegritycheck and dmintegrityinlinerecheck compute the checksum of each block into an on-stack buffer of HASHMAXDIGESTSIZE bytes...

CLEANSTART-2026-LN45118 On most platforms, Go uses the given system root certificates

CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details...

CLEANSTART-2026-JH01594 On Windows, when the target of Root

CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details...

PT-2026-125898

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...

PT-2026-126645

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...

PT-2026-126615

Name of the Vulnerable Software and Affected Versions Aidot Linkind Matter Smart Plug version 1.01.32 OREiN Matter Smart Light Bulb version 3.15.21 Linkind Wi-Fi Smart Light Bulb version 3.30.17 Description Remote Code Execution RCE is possible due to an issue in the UPnP root description parsing...

CVE-2026-102814: Improper Neutralization of Special Elements used in an OS Command

An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...

TP-Link RE305 command injection vulnerability

The TP-Link RE305 V3 running firmware versions prior to 1.1.8 Build 20260921 Rel. 42853 contain a command injection vulnerability. This vulnerability stems from an operating system command injection flaw in the tmpServer service, which runs with root privileges and listens on the local loopback...

CVE-2026-112352: Reliance on Cookies without Validation and Integrity Checking

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection...