CVE-2026-65400-poc

CVE-2026-65400 — macOS Screen Sharing pre-auth root file read read-only PoC Read-only proof of concept. It demonstrates the authentication bypass by reading a root-only file from a vulnerable host. It writes nothing to the target: no LaunchDaemon, no shell startup file, no crontab, no RCE chain...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd-result only when scmnd is not NULL. This change fixes the following kernel NULL pointer dereference, which is occasionally reproduced by blktests srp/007. Bug: Kernel NULL pointer dereference, address:...

CVE-2026-90307

A flaw was found in the Linux kernel. A remote attacker could exploit a vulnerability in the SCSI Remote Protocol SRP implementation by sending a specially crafted, truncated credential request. This malformed request causes an out-of-bounds read, leading to a heap information leak of up to 8 byt...

CVE-2026-103903

A high-severity incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with low-privilege credentials to escalate privileges. The flaw exists because the stage-one EC-SRP challenge is verified against the attacker's acco...

CVE-2026-103903 MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation

An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP...

EUVD-2026-97325

An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP...

CVE-2026-103903: Incorrect Authorization

An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP...

PT-2026-110529

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description An incorrect authorization issue exists in the WinBox authentication flow. A remote authenticated attacker with low-privilege credentials can obtain the authorization policy of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/srp: Fixed a heap information leak that occurred when a truncated SRPCREDREQ was passed. The srprecvdone function passes wc-bytelen to srpprocessrsp. However, it does not pass anything to srpprocesscredreq and...

Exploit for Incorrect Implementation of Authentication Algorithm in Vmware Vcenter_Server

VC-Strike VMware vCenter Integrated Authorization Penetrati...

CVE-2026-100075

A flaw was found in the Linux kernel's SCSI Remote Direct Memory Access Protocol SRP target driver. When memory allocation fails while processing multi-buffer descriptors, the error-handling routine fails to reset internal tracking counters and leaves an invalid memory pointer. A remote client...

SUSE CVE-2026-90307

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

Linux Distros Unpatched Vulnerability : CVE-2026-90307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and...

AZL-101903 CVE-2026-90307 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

DEBIAN-CVE-2026-90307

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90307

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

EUVD-2026-81968

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

CVE-2026-90307

CVE-2026-90307 is a heap information disclosure vulnerability in the Linux kernel's RDMA/srp (SCSI RDMA Protocol) subsystem. The root cause is that srp_process_cred_req() and srp_process_aer_req() read fixed-size fields from the receive buffer without verifying that the data was actually present....

CVE-2026-90307 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and srpprocessaerreq, which read fixed-size fields from the receive buffer witho...

PT-2026-94655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap information leak exists in the RDMA/srp component. The srp recv done function fails to pass the received byte length to srp process cred req and srp process aer req, which then re...