CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

kernel: ipvs: do not propagate one-packet flag to synced conns

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When a synced connection is established, it can incorrectly inherit a "one-packet" flag from its destination. This misconfiguration causes the connection's expiry process to mishandle its cleanup, leaving behind stale memory...

Eufy Omni C20, Omni X10 Pro (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

Security Bulletin: This Power System update is being released to address CVE-2026-52943, CVE-2026-43373, and CVE-2026-43194

Summary An unauthenticated attacker on the BMC's local network can cause loss of service. Vulnerability Details CVEID:CVE-2026-52943 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers...

Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. id: CVE-2018-15961 info: name: Adobe ColdFusion - Unrestricted File Upload...

PT-2026-104886

In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfs io -f -c "pwrite -b 3m -S 0x61 0 3m" -c "fpunch 1m 1m" -c "seek -h 0" -...

Linux Distros Unpatched Vulnerability : CVE-2026-93819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: mediatek: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurren...

Linux Distros Unpatched Vulnerability : CVE-2026-97498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evict...

PT-2026-97944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fs-integrity component of the block layer where the system fails to properly check BIP CHECK flags before generating or verifying Protection Information PI. This...

Linux Distros Unpatched Vulnerability : CVE-2026-93821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: altera: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent...

PT-2026-97877

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client DFS cache where the get tgt name function returns an error pointer when the ce-tgthint variable is NULL. Additionally, the dfs cache noreq update tgthin...

PT-2026-97884

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the madvise cold or pageout pte range function where the pmd trans huge lock mechanism incorrectly handles device-private Page Middle Directories PMDs. When a...

PT-2026-97936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the aml spisg clk init function where the clk init data structure is not fully initialized. While the function populates init.parent data, it leaves init.parent names...

PT-2026-98103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the usbip module within the vhci hcd component. The function status show vhci fails to verify if the hcd pointer returned by platform get drvdata is...

PT-2026-97945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the make bad inode function is used within ocfs2 read inode block full. Because make bad inode resets the inode type to S IFREG, applying this t...

PT-2026-97789

Name of the Vulnerable Software and Affected Versions Netlink ICT HG323RW affected versions not specified Description Insufficient authorization and input validation controls in the diagnostic script import functionality allow an authenticated attacker to upload and execute a specially crafted...

ROS-20260924-73-0032

The vulnerability of the raid10run function in the drivers/md/raid10.c module of the Linux kernel affects several device-related functions such as RAID and LVM. This vulnerability is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker ...

PT-2026-97943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Improper exception masking in the arm64 hibernate code can lead to system crashes or warnings during the resume process. When a hibernation image is saved via swsusp arch suspend, all DA...

PT-2026-98117

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/userq component where mqd and fw objects, which are essential queue core objects, could be unmapped and evicted. If these buffers are evicted, the...