PT-2026-122049

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit 680aea08e78c "net: ipv4: Emit notification when fib hardware flags are changed" added an RCU-only fib nlmsg size call for asynchronous hardware flag...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtmphonetnotify skb allocation fillroute stores three components in the skb: - struct rtmsg - RTADST u8 - RTAOIF u32 Therefore, rtmphonetnotify should use NLMSGALIGNsizeofstruct rtmsg + nlatotalsize1 + nlatotalsize4...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential “struct net” leak in inet6rtmgetaddr It appears that if userspace supplies a valid IFATARGETNETNSID value but no IFAADDRESS or IFALOCAL attributes, inet6rtmgetaddr returns -EINVAL while maintaining an elevated...

PT-2026-115776

In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net device reference under RCU in bundle creation xfrm bundle create and xfrm create dummy bundle read dst-dev into a local pointer without taking a device reference, then pass it to xfrm fill dst. A concurrent RTM...

KLA91315 PE vulnerability in Microsoft Server Software

Privilege escalation vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-96940 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware i...

PT-2026-98541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the lowpan newlink function. This occurs because TUNSETLINK allows a TUN device to change its link-layer type to ARPHRD IEEE802154 without initializi...

PT-2026-98680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where an RTM NEWQDISC request allows clsact to bind a populated shared ingress block during the init function, making an embedded mini Qdisc available to lockless readers...

PT-2026-98638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the IPv6 implementation. The issue occurs in the ip6 del rt siblings function when accessing fn-leaf because rt-fib6 node may be null. This happens...

PT-2026-97937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the vxlan mdb flush function. The function iterates over Multicast Database MDB entries using hlist for each entry safe, which is designed to handle the...

CVE-2026-17619

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

EUVD-2026-83297

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17619 The IBM Platform RTM is affected by an SQL injection vulnerability

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17619 The IBM Platform RTM is affected by an SQL injection vulnerability

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-17619

IBM Platform RTM (spectrum-lsf) versions 10.2.0.15 and 10.2.0.16 are affected by a SQL injection vulnerability (CWE-89). The application accepts user input directly in a web interface for SQL queries without adequate validation, allowing a remote attacker to send specially crafted SQL statements ...

CVE-2026-17619: Improper Neutralization of Special Elements used in an SQL Command

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

PT-2026-95617

Name of the Vulnerable Software and Affected Versions IBM Platform RTM affected versions not specified Description An issue exists where a remote attacker can execute specially crafted SQL statements. This allows the attacker to view, add, modify, or delete information within the back-end databas...

PT-2026-94596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched: cls api component where a race condition occurs during the insertion of a protocol. In the tc new tfilter function, if a request loses a race to insert ...

Security Bulletin: The IBM Platform RTM is affected by an SQL injection vulnerability (CVE-2026-17619)

Summary The IBM Platform RTM takes an input in web interface directly for SQL Query, unvalidated value might allow bad actor to insert malicious code into the SQL Query phase. Vulnerability Details CVEID:CVE-2026-17619 DESCRIPTION: IBM Platform RTM is vulnerable to SQL injection. A remote attacke...

PT-2026-93382

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN VNI filter entry policy where GROUP and GROUP6 address attributes are declared as NLA BINARY with only a maximum length. This allows the validate nla functio...

PT-2026-73013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel within the nh rt cache flush function, which is inlined into rtm new nexthop. The problem occurs when nh rt cache flush traverses t...