CVE-2026-97182: Improper Neutralization

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

PT-2026-97975

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the netfilter component where the nfnl log net exit function calls nf log unset, clearing the logger pointer without waiting for an RCU Read-Copy-Update grace period. Th...

Oracle E-Business Suite (September 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124465 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. Tenable has extracted the preceding description block directly from t...

PT-2026-97895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the svcrdma component where the system fails to reject Write or Reply chunks that have a segcount field set to zero. Because the xdr check write chunk function only...

PT-2026-97934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Bluetooth management component. The uuid count member of the discovery state structure is accessed and modified without proper locking, creating ...

PT-2026-97942

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the btrfs component of the Linux kernel. In the invalidate and check btree folios function, the system waits for an extent buffer to finish reading and then...

PT-2026-97905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio-ap component where the DECLARE BITMAPapm filtered, AP DEVICES macro allocates a bitmap on the stack without zero-initializing it. In the vfio ap mdev hot...

PT-2026-97967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the greybus audio component where the gb audio gb get topology function fetches a topology blob based on a size supplied by a module. The gbaudio tplg parse data...

PT-2026-97872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/arm-smmu-v3 component where the arm smmu device remove function manually frees the IOPF queue, destroys the vmid map, and disables the device. Because the IR...

PT-2026-97876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where Bluetooth enablement fails intermittently with a timeout error. The problem occurs because the hci send cmd sync function uses skb clone ...

PT-2026-97898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the lockd component when releasing locks by server IP address via the /proc/fs/nfsd/unlock ip endpoint. The nlmsvc match ip function incorrectly reverses its arguments...

PT-2026-97900

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/nouveau/dmem component where a callocated underflow occurs during a large folio split. The nouveau dmem folio free function decrements the chunk-callocated...

PT-2026-97951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/efa component during memory region MR registration. When creating an indirect Page Boundary List PBL, the system generates a chunk list to store PBL page...

PT-2026-104849

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds BUG A malformed NTFS directory index entry can advertise a key size larger than the bytes actually present in its NTFS DE payload. Directory lookup then passes that malformed key to cmp...

PT-2026-97688

Name of the Vulnerable Software and Affected Versions huanzi-qch base-admin versions up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1 Description A remote cross site scripting issue exists in the Add User Handler component. The problem occurs within the Save function located in the...

CVE-2026-96884: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the...

PT-2026-98083

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA Advanced Configuration and Power Interface Component Architecture component where parser functions lack sufficient package limit checks. This deficiency can...

PT-2026-97850

Name of the Vulnerable Software and Affected Versions Excalidraw versions prior to 0.18.2 Description An issue exists in the Imported File Handler component within the packages/excalidraw/data/restore.ts file. A remote attacker can perform cross-site scripting XSS—a technique used to inject...

CVE-2026-96777: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.admserver.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql...