EUVD-2026-102803

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

Vulnerabilities in Juniper Networks Junos OS

Juniper has identified several vulnerabilities in Junos OS. These vulnerabilities exist in various components of Junos OS, including the VXLAN Gateway Daemon vgd, kmd on MX Series routers, the SDK service with JDAF routing, the TWAMP client rmopd service, the gRPC library, the ipfd daemon on SRX...

ROOT-OS-DEBIAN-12-CVE-2026-46470 CVE-2026-46470 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-46470 in the gst-plugins-good1.0 package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-111448

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

CVE-2026-111448

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

Exploit for Use After Free in Linux Linux_Kernel

Samsung Root Kit — Offline Version Android App DF Chain Prefe...

EUVD-2026-102472

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-96424: Incorrect Permission Assignment for Critical Resource

Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...

CVE-2026-96425: Incorrect Permission Assignment for Critical Resource

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...

Linux Distros Unpatched Vulnerability : CVE-2026-96425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus CVE-2026-96425 Note that Nessus relies on the...

VulnCheck KEV: CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026...

CVE-2026-102917: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system...

CVE-2026-111448: Improper Handling of Case Sensitivity

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

PT-2026-115483

Name of the Vulnerable Software and Affected Versions cifs-utils affected versions not specified Description A flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file...

Wazuh check_remote_commands() Code Execution Root Privileges

The vulnerability of the checkremotecommands function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...

PT-2026-115650

Name of the Vulnerable Software and Affected Versions lomiri-download-manager affected versions not specified Description An incorrect DBus policy in the lomiri-upload-manager component of lomiri-download-manager allows an arbitrary user to read arbitrary files with root privileges over DBus. DBu...

PT-2026-115651

Name of the Vulnerable Software and Affected Versions lomiri-download-manager affected versions not specified Description An incorrect DBus policy in lomiri-download-manager allows an arbitrary user to execute arbitrary commands with root privileges over DBus. DBus is a message bus system that...

PT-2026-116132

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An authenticated attacker can elevate their privileges to perform operations with QSECOFR/Root authority on the system. Recommendations At the moment, there is no information about a newer version tha...