CVE-2026-91527

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful...

CVE-2026-101597

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful...

CVE-2026-91527

A vulnerability exists in the Core component of the Oracle ZFS Storage Appliance Kit (affected version 8.8 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the appliance. Successful exploitation can result in a full takeover of the system. This ...

CVE-2026-101597

The Oracle ZFS Storage Appliance Kit (component: Core ) version 8.8 is affected by an easily exploitable vulnerability. An unauthenticated attacker with network access via HTTP can compromise the appliance, potentially resulting in unauthorized read access to a subset of accessible data. This vul...

CVE-2026-113671

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke image acceptance on a deployment using local...

CVE-2026-93856

A flaw was found in OpenStack Cinder. An authenticated user with project-level access can retrieve messages intended for other projects by issuing a message listing request to the Block Storage API. This flaw leads to information disclosure, exposing resource identifiers and status messages...

CVE-2026-98081

A flaw was found in the Linux kernel's Btrfs file system when handling zoned storage devices. When an operation to finish a storage zone fails, the system returns early without completing proper cleanup, leaving the block group in an inconsistent state and stranding waiting tasks. A local user...

CVE-2026-93781

A flaw was found in the Linux kernel's SCSI Small Computer System Interface subsystem, which can lead to a Denial of Service DoS. During device error recovery, the error handling mechanism attempts to allocate request tags while all available tags are held by pending commands waiting for recovery...

CVE-2026-93242

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. When handling multi-entry response packets, an off-by-one counting error causes the driver to consume an extra entry from the response queue. This issue can cause legitimate firmware responses to be prematurely marked as process...

CVE-2026-90031

A flaw was found in the Linux kernel's usb-storage component, specifically within the eneub6250 driver. A race condition exists between the delayed scan work and the enegetcardtype probe function. This occurs because both operations attempt to use the same Universal Serial Bus USB Request Block U...

CVE-2026-113656

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages unbounded multipart uploads before form validation or authentication and lacks upload size, count, and rate limits. Repeated unauthenticated...

EUVD-2026-105185

ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages unbounded multipart uploads before form validation or authentication and lacks upload size, count, and rate limits. Repeated unauthenticated...

CVE-2026-98478

A flaw was found in the Linux kernel's Universal Flash Storage UFS driver. During device error recovery, the driver pauses all command queues, which inadvertently prevents internal recovery commands from being dispatched. This condition can result in an unrecoverable circular wait deadlock, leadi...

CVE-2026-112069

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

D-Link Network Attached Storage - Backdoor Account

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

EUVD-2025-211136

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...

EUVD-2026-104667

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...

EUVD-2025-211135

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

PT-2026-119277

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful...