PT-2026-72818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack overflow occurs in the cls bpf offload cmd function. The issue arises during an offload rollback process when tc setup cb replace fails. The function attempts to roll back by...

CVE-2026-64607 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, pinot-fips, camunda-zeebe, kayenta, nrjmx, dependency-track-apiserver, logstash-fips, flyway, apache-hop, nuxeo, metabase, opensearch, floci-az, cloudwatch-exporter, logstash, commercial-elasticsearch, sonarqube, conductor, akhq, wavefront-proxy,...

MINI-Q74C-HM4M-P3CF

Bulletin has no description...

MINI-7M47-CQX6-J3FG

Bulletin has no description...

DoS (Denial of Service) tar Dependency in Confluence Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.5, 9.5.1, 10.1.2, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

CVE-2026-19844

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-19845

A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. Executing a manipulation of the argument Comment can lead to stack-based buffer overflow. It is possible to launch the...

CVE-2026-19844

TOTOLINK A800RR 4.1.2cu.5137_B20200730 is affected by a stack-based buffer overflow in the IPv6 component ipv6.so, specifically in function setRadvdCfg of /cgi-bin/cstecgi.cgi. Manipulating the argument radvdinterfacename triggers the overflow. The vulnerability can be exploited remotely, and pub...

MINI-CHCJ-VV63-6FCQ

Bulletin has no description...

MINI-GMX2-C4VW-66HM

Bulletin has no description...

CVE-2026-73566

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could provide a specially crafted tar archive with a long-path header. When processing this archive with a non-empty member-selection list, an uncontrolled recursion in the filesFilter function can lea...

MINI-8P2G-7MP2-5XW2

Bulletin has no description...

MINI-WXPC-FGG4-JCRG

Bulletin has no description...

MINI-FQXJ-MVV3-59Q4

Bulletin has no description...

MINI-FXCM-3XP4-22RF

Bulletin has no description...

MINI-HXQ2-QX55-VGR3

Bulletin has no description...

MINI-M334-RH4H-HGVH

Bulletin has no description...

CVE-2026-19824 Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow

A weakness has been identified in Tenda W20E 15.11.0.610681546841CNTDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stack-based buffer overflow. The attack can be executed remotely. Th...

CVE-2026-19823 Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the...

CVE-2026-19822 Tenda W20E QoS Edit editQos lstAdd stack-based overflow

A vulnerability was identified in Tenda W20E 15.11.0.610681546841CNTDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. T...