PT-2026-94189

Name of the Vulnerable Software and Affected Versions Acer System Monitoring affected versions not specified Description The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES Advanced Encryption Standard is a symmetric bloc...

PT-2026-94852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UIO Userspace I/O subsystem where a stale pointer is maintained during a failed registration path. After the device add function is called, the UIO device becomes...

PT-2026-94967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-unlock issue exists in the lp5860 device init function. If the lp5860 init dt function fails, a mutex that has already been unlocked is unlocked a second time. A double-unlock...

PT-2026-94733

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.3 Description An issue exists in the md/raid1 component where adding a new rdev to an existing RAID1 array with the serialize policy enabled can lead to a system crash. This occurs because the bind rdev to array...

PT-2026-94836

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ad5686 DAC driver within the Industrial I/O IIO subsystem due to a missing NULL check on match data. If a user binds the driver using driver override via sysfs wit...

PT-2026-94470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the visconti clk register gate function where the clk init data structure is not fully initialized. Specifically, the function populates init.parent data but leaves...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the printk component. During legacy printing, a handover to another printing context can occur, causing the console SRCU Sleepable Read Copy Update read...

CVE-2026-81871

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTELEXPORTEROTLPLOGSCERTIFICATE, OTELEXPORTEROTLPCERTIFICATE, and related client certificate environment variables through loadEnvTLS into cfg.tlsCfg, but...

CVE-2026-92526

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-20282 Cisco Identity Services Engine Authenticated Write Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...

CVE-2026-92808

CVE-2026-92808 is a server-side request forgery (SSRF) vulnerability in the UnifiedLogin service of Altium Enterprise Server . An unauthenticated network attacker can force the server to issue outbound HTTP requests to arbitrary destinations, including internal services reachable only from the se...

CVE-2026-92526 itsourcecode Leave Management System index.php sql injection

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

EUVD-2026-81092

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-92526 itsourcecode Leave Management System index.php sql injection

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-92526

A SQL injection vulnerability exists in itsourcecode Leave Management System 1.0 , affecting the ID argument within /module/leave/index.php. An authenticated remote attacker (low privileges required) can manipulate this parameter to execute arbitrary SQL queries, resulting in low impact on confid...

CVE-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

CVE-2026-87976

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

ShieldCrash

ShieldCrash Vulnerabilidad 0day de Windows Defender Microsoft no ha logrado parchear correctamente ShieldBreak CVE-2026-69414; bajo condiciones específicas, todavía es posible desencadenar exactamente el mismo problema que causó ShieldBreak. Aunque Microsoft corrigió varias cosas para evitar...

CVE-2026-92406

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...