PT-2026-98604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the IPv6 implementation. The function ipv6 route iter active incorrectly identifies a walker in the FWS U state at the table root as already unlinked...

CVE-2026-97913

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop op While the QSIZE register setting should prevent an out of bounds access of the command stream, it is not clear whether the h/w generates an interrupt in this case as is require...

CVE-2026-97569: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

PT-2026-98883

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane exposes the Recurring::stop function as a state-changing GET route that lacks Cross-Site Request Forgery CSRF token validation. CSRF is a type of attack that tricks a victim into...

PT-2026-98996

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...

CVE-2026-97569

In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of packets, it can mark a BD with the NOCMPL bit to defer completions. The expectation is that the last packet in the ring will have this bit...

Linux Distros Unpatched Vulnerability : CVE-2026-97569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Prevent queue stop with deferred completions When the driver receives a burst of...

SUSE CVE-2026-97508

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

SQL Injection

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to SQL Injection in the add function. An attacker can execute arbitrary SQL commands by submitting crafted input as the word parameter in the stop-word...

SQL Injection

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to SQL Injection in the add function. An attacker can execute arbitrary SQL commands by submitting crafted input as the word parameter in the stop-word...

CVE-2026-97508: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

PT-2026-98015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the au1000 close function where free irq is called while the aup-lock is held via spin lock irqsave. Because free irq can sleep while acquiring the IRQ descriptor...

Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183

This module enables sites to block access for the administrative user account user 1 or users with the administrator role. The module does not sufficiently enforce these access restrictions across all supported authentication mechanisms. As a result, a blocked administrative user may still be abl...

MiracleLinux 9 : coreutils-8.32-41.el9_8.1 (AXSA:2026-1880:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1880:05 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directl...

CVE-2026-93042

CVE-2026-93042 affects the Linux kernel dw-edma DMA engine driver. When a deferred STOP reaches the interrupt handler, the driver calls vchan_cookie_complete(), which schedules a callback for the active descriptor and leaves other issued or submitted descriptors queued—contrary to the DMA Engine ...

PT-2026-94626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md stop function where the bitmap is destroyed before mddev detach is called. This sequence causes mddev detach to skip the bitmap ops-wait behind writes operation...

PT-2026-94404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net: fec component where the fec ptp stop function is called unconditionally during device removal in fec drv remove and on the failed initialization path in fec...

PT-2026-94455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net/smc module when the smc llc flow stop function resets a flow structure using a blind memset. If the flow-qentry variable is non-NULL, the pointer is...

CVE-2026-93149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: avoid NULL skb in stop queue drain mac80211hwsimstop drops any frames left in data-pending. The loop currently checks skbqueueempty and then dequeues separately. That split is racy with TX status handling,...

PT-2026-94945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mac80211 hwsim stop function when draining the data-pending queue. The process currently checks if the queue is empty using skb queue empty before calling...