CVE-2026-49431

The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...

EUVD-2026-62241

The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...

IriSig-Spoof: A Real-World Benchmark for Time-Robust Satellite RF Fingerprinting and Spoofing Detection

Low Earth orbit LEO satellite Internet is becoming critical communications infrastructure, yet its open wireless links remain vulnerable to satellite impersonation and signal spoofing. Radio frequency fingerprinting RFF offers a potential defense by exploiting transmitter-specific hardware...

OPENSUSE-SU-2026:11550-1 perl-Net-CIDR-Set-0.230.0-1.1 on GA media

These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-80598

These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed...

coreruleset v4.29.0

Branch| Status ---|--- main| 🛡️ OWASP CRS The OWASP CRS is a set of generic attack detection rules for use with OWASP ModSecurity, OWASP Coraza, or other compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

A Calibrated and Explainable Bimodal Machine Learning Framework for Hybrid Intrusion Detection

Modern communication systems face critical gaps in detecting unknown attacks and rare threat classes due to extreme data imbalance and black-box decision logic. We propose a bimodal framework of calibrated and explainable machine learning ML for network security, unifying known-class precision wi...

CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

UBUNTU-CVE-2026-72320

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

CVE-2026-72320

CVE-2026-72320 concerns the Linux kernel netfilter implementation for nft_lookup. The issue arises in how inverted lookups (NFT_LOOKUP_F_INV) interact with the catchall element in interval sets, potentially causing an incorrect verdict. The documented fix folds the catchall lookup into ext before...

CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...

PT-2026-72963

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth management component during Extended Inquiry Response EIR updates. The MGMT OP SET LOCAL NAME command is handled asynchronously and can...

PT-2026-72440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory allocation failure in the netfilter module can cause a cloned nft pipapo match structure to enter an inconsistent state. This occurs when lookup tables are partially resized, bi...

PT-2026-72145

Name of the Vulnerable Software and Affected Versions Propovoice: All-in-One Client Management System versions prior to 1.7.9 Description An issue exists where the REST endpoint of the create function fails to validate the user-supplied role parameter against a list of permitted WordPress roles a...

PT-2026-72600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 memory management where the PAGE UNUSED softbit is not consistently cleared when new page table entries ptes are set. This bit is used to signal try to unmap...

PT-2026-72961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the Bluetooth subsystem. The function hci find adv instance returns an adv info pointer that is only valid while hdev-lock is held. However,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: chaos-mesh, kube-mgmt-fips, rancher-fleet-fips, ocm-kubernetes-controller, kyverno-fips, falcoctl, vcluster-fips, tigera-operator, steampipe, drone-fips, tw, trivy-operator, cloudbeat, tigera-operator-fips, helm-operator, kube-mgmt, cluster-api-helm-controller-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: trivy-operator, osv-scanner, kubescape, grype, ctop, cilium-cli, headlamp, kubevela, helm-set-status, tw, wolfictl, envoy-gateway, docker-cli-buildx, skaffold, k8ssandra-client, kubescape-operator, containerd, kaniko, chartmuseum, docker-compose, helm-operator, spege...