CVE-2026-98130

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. A race condition exists when starting an SCTP timer, where the timer can expire before it is reset, resulting in improper reference counting for the connection association. An attacker could exploit this...

CVE-2026-93283

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit master subsystem. This issue can result in a Denial of Service DoS caused by a system crash. When device registration fails, the driver frees the device object but fails to clear internal pointers referencing the freed...

CVE-2026-93817

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...

CVE-2026-93814

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. When a system suspend is initiated while an SPI controller operating in target mode has an active data transfer, the ongoing transfer is not cleanly aborted. This issue allows a local user to cause a Denial of Servi...

CVE-2026-93281

A flaw was found in the Linux kernel's Realtek Wi-Fi driver rtw89. This vulnerability may allow an attacker within wireless range to cause a Denial of Service DoS via a system crash. By transmitting a crafted wireless frame with malformed capability information, an attacker can trigger an imprope...

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically within the drm/amdgpu/vcn4 component. This vulnerability allows for an out-of-bounds read when processing an Instruction Buffer IB. An attacker could potentially exploit this to read sensitive information...

CVE-2026-82928

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...

CVE-2026-98119

A flaw was found in the Linux kernel's netfs network filesystem subsystem. A local user could cause a Denial of Service DoS by triggering a system crash when performing unbuffered write operations under memory exhaustion conditions. This issue occurs because the kernel fails to verify that memory...

CVE-2026-98118

A flaw was found in the Linux kernel's netfs network filesystem subsystem. A local user could exploit a race condition during readahead operations to cause a Denial of Service DoS via a system crash. This issue stems from improper synchronization between the application thread and collector threa...

CVE-2026-93804

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A race condition can occur when disconnecting from an Independent Basic Service Set IBSS, an ad-hoc wireless network while network traffic is simultaneously being transmitted across processor cores. This timing conflict causes da...

CVE-2026-93801

A flaw was found in the Linux kernel's SMB Server Message Block client. Certain file information structures allocated on the stack are not zero-initialized, leaving them containing random data when specific fields are not explicitly set. A local user performing file operations on a mounted SMB...

CVE-2026-93268

A flaw was found in the Linux kernel's ext4 file system. When mounting a file system, expanding extended attribute storage while holding an active journal lock can create a circular locking dependency. A local user capable of mounting or triggering file system recovery operations could exploit th...

CVE-2026-98107

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user can trigger an out-of-bounds memory write by establishing multiple concurrent Logical Link Control and Adaptation Protocol L2CAP connections. Due to improper channel limit verification, this flaw allows memory corruption tha...

CVE-2026-82928 Undocumented access path in mH-DEVELOPER

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...

EUVD-2026-88228

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...

CVE-2026-82928

The mH-DEVELOPER smart home module contains a hardcoded SSH public key within /root/.ssh/authorized_keys, which functions as a potential backdoor . Because the SSH daemon starts automatically and permits root login via key authentication, an attacker possessing the matching private key can obtain...

CVE-2026-82928 Undocumented access path in mH-DEVELOPER

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...

CVE-2026-93796

A flaw was found in the Linux kernel's iwlwifi driver. When wireless device initialization encounters an error during transmit setup, the cleanup process frees memory allocated for packet reception but fails to clear the corresponding pointers. A local user could trigger subsequent device teardow...

WordPress Post Voting System plugin <= 1.0 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Post Voting System versions = 1.0...

CVE-2026-85134

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...