PT-2026-128285

Name of the Vulnerable Software and Affected Versions Juniper Networks Session Smart Router affected versions not specified Description A missing authentication flaw in a critical function allows an unauthenticated network-based attacker to gain administrative privileges. This is achieved by...

PT-2026-128323

Alpine iLX-F511 libanwbtstack.so prh rfcomm cc process test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the abili...

PT-2026-128324

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

PT-2026-128325

Name of the Vulnerable Software and Affected Versions Alpine iLX-F511 affected versions not specified Description An issue exists in the Android Auto service where the system fails to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. This...

CVE-2026-118609: Stack-based Buffer Overflow

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118610: Stack-based Buffer Overflow

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability...

Linux Kernel Missing Initialization of a Variable Vulnerability

Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place...

PT-2026-128319

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This flaw arises because the Android Auto connection handler fails to properly validate the length of user-supplied data prior to copying it into a fixed-length stack buffer. As a result, attackers with physical...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This flaw arises because the prhrfcommccprocesstest function fails to properly validate user-supplied data, allowing data beyond the bounds of allocated buffers to be read. This could enable nearby network attacker...

CVE-2026-116778: Improper Neutralization of Special Elements used in an OS Command

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1, an authenticated API-enabled user with uType=1 who possesses both the user's API token and the global FOG API token can use PUT /fog/storagenode/id/edit to modify Storage Node...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

PT-2026-128326

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

CVE-2026-118611: Heap-based Buffer Overflow

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

(0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Bluetooth OBEX packets. The issue results from the...

Juniper Networks Session Smart Conductor command injection vulnerability

Versions prior to Juniper Networks Session Smart Conductor 7.0.5, versions 7.1.x prior to 7.1.7, and versions 7.2.x prior to 7.2.3 contain a command injection vulnerability. This vulnerability arises from improper handling of special elements within OS commands by AutomatedProvisioner; remote...

CrashFTP cross-site request forgery vulnerability

Versions of CrushFTP prior to 7.3.0 contain a cross-site request forgery vulnerability. This flaw arises because CSRF protection is disabled by default. Attackers can trick authenticated administrators into visiting malicious pages and submitting POST requests to commands such as setUserItem,...

Alpine iLX-F511 buffer error vulnerability

The Alpine iLX-F511 running version 7.0.000 contains a buffer error vulnerability. This vulnerability arises because the prhsdpservicesearchdecode function fails to properly validate the length of user-supplied data prior to copying it into the stack buffer. As a result, network-adjacent attacker...

PT-2026-127800

CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions because CSRF protection is disabled by default. Attackers can lure an authenticated administrator to a malicious page that submits POST requests to commands like...

PT-2026-128320

Alpine iLX-F511 prh sdp service search decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...