kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to bypass security restrictions.

The vulnerability of the DnsResolveContext component in the framework for developing network applications, servers, and Netty protocol clients is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

PT-2026-99855

Name of the Vulnerable Software and Affected Versions Thinkware U3000 versions prior to 1.02.04 Description An issue exists in the TCP Service component where manipulating the path argument within the PUT FILE function for the file /tmp/wpa supplicant.conf can lead to improper access controls. Th...

CVE-2026-100664

A flaw was found in Netty's HTTP/3 codec. When converting HTTP/1 requests to HTTP/3, the codec improperly prioritizes the Host header over the request-target authority. A remote, unauthenticated attacker can exploit this authority confusion by sending a request containing conflicting destination...

[SECURITY] [DSA 6518-1] incus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6518-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 26, 2026 https://www.debian.org/security/faq -...

PT-2026-99290

Name of the Vulnerable Software and Affected Versions Capgo capgo.app affected versions not specified Description An indirect bypass of the row-level security policy exists in the public.manifest table. A user or principal with app-scoped upload, write, or all API keys, or an authenticated user...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker...

fast-uri: fast-uri: Security bypass due to inconsistent host case normalization

A flaw was found in fast-uri, a dependency-free URI parser. This vulnerability occurs because the software folds the host to lowercase before percent-decoding it, allowing percent-encoded uppercase characters to bypass this normalization. A remote attacker could exploit this by crafting a malicio...

kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

A flaw was found in the drm/xe/rtp component of the Linux kernel. This vulnerability arises from the unconditional whitelisting of Output/Availability OA registers, which is a security violation. By default, these registers could be whitelisted after system events such as probe, graphics...

EUVD-2026-86530

Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it by binding it to their digital certificate. A flaw was discovered where the new Standard Token Exchange V2 feature does not check for this...

CVE-2026-97846

Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it by binding it to their digital certificate. A flaw was discovered where the new Standard Token Exchange V2 feature does not check for this...

Security Bulletin: IBM Verify Identity Governance Container affected by multiple vulnerabilities

Summary Multiple security vulnerabilities affecting dependent components used by IBM Verify Identity Governance Container have been addressed in the latest product update. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION: Java SE is vulnerable to a denial of service, caused by an easily...

The vulnerability of the dashboard management mechanism of the Kibana data visualization service allows a hacker to bypass security restrictions.

The vulnerability of the dashboard management mechanism of the Kibana data visualization service is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

The vulnerability of the Erlang/OTP software platform, related to incorrect comparison of the number of connections, allows attackers to circumvent existing security restrictions.

The vulnerability of the Erlang/OTP software platform is related to an incorrect comparison of the number of connections. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...

The vulnerability of the Fleet plugin of the Kibana data visualization service allows a hacker to bypass security restrictions.

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

PT-2026-98361

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description Keycloak includes an mTLS holder-of-key binding feature designed to ensure tokens are only usable by the client that originally requested them by binding the token to a digital certificate. ...

The vulnerability of the golang-x-net package in the Golang programming language arises from improper checking of the unsafe equivalence of input data. This allows attackers to circumvent existing security restrictions and execute arbitrary code.

The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

cxf-rt-rs-security-oauth2: Apache CXF: Security bypass due to improper handling of authorization parameters

A flaw was found in Apache CXF. This vulnerability allows an attacker, who has compromised a client's secret, to bypass critical security protections in the authorization process. By injecting malicious values for parameters like codechallenge and nonce, the attacker can undermine the integrity o...

fast-uri: fast-uri: Security bypass due to inconsistent host case normalization

A flaw was found in fast-uri, a dependency-free URI parser. This vulnerability occurs because the software folds the host to lowercase before percent-decoding it, allowing percent-encoded uppercase characters to bypass this normalization. A remote attacker could exploit this by crafting a malicio...

CVE-2026-63450

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit a vulnerability in the FTP parser where sending a RETR or STOR command before PORT or PASV negotiation is incorrectly treated as a fatal error. This error...