PT-2026-94798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi driver register function requests protocol devices before registering the driver. If the driver register function fails,...

PT-2026-95455

Name of the Vulnerable Software and Affected Versions pppd affected versions not specified Description An issue exists in the peap response function where a response to a PEAP Request packet is formatted by copying a TLS record of up to 16384 bytes into the fixed global buffer outpacket buf. This...

PT-2026-94714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 driver where the mt7996 mcu beacon cntdwn function emits two bss bcn cntdwn tlv entries during an active CSA countdown, but the MT7996 BEACON UPDATE SIZE on...

PT-2026-94852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the UIO Userspace I/O subsystem where a stale pointer is maintained during a failed registration path. After the device add function is called, the UIO device becomes...

CVE-2026-90360: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regulator: core: use systemfreezablewq for init complete work scheduledelayedwork uses systemwq, which is non-freezable, allowing regulatorinitcompletework to run concurrently with system suspend. This work fires 30s after boot t...

PT-2026-94708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the regulator core where schedule delayed work utilizes system wq, a non-freezable workqueue. This allows the regulator init complete work function to execute...

PT-2026-94645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the sun4i crtc init function returns NULL instead of an error pointer when layer initialization fails. Because the caller function sun4i...

CVE-2026-53555: Improper Neutralization of Input During Web Page Generation

SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...

CVE-2026-92927: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

PT-2026-94801

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.6.0-0010.rc1.ctl4 Description A kernel NULL pointer dereference occurs when the amd pstate ut driver is loaded via modprobe on non-AMD platforms, such as Intel platforms. This issue is triggered within the amd pstate ut...

PT-2026-95140

Name of the Vulnerable Software and Affected Versions Frappe Learning Management System LMS versions prior to 2.52.1 Description A remote attacker can request a traversal path handled by the SCORMRenderer.render function in lms/page renderers.py. The renderer constructs and opens a server-side pa...

PT-2026-94189

Name of the Vulnerable Software and Affected Versions Acer System Monitoring affected versions not specified Description The Acer System Monitoring component, included with NitroSense and PredatorSense, contains a hard-coded AES encryption key. AES Advanced Encryption Standard is a symmetric bloc...

PT-2026-95122

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description A race condition exists in the FileSystem component. A remote attacker who has compromised the renderer process and uses social engineering can bypass system access restrictions by...

PT-2026-95082

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2025-55787: Improper Neutralization of Special Elements used in an SQL Command

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2026-92926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-50609: Improper Access Control

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

PT-2026-95026

Name of the Vulnerable Software and Affected Versions SourceCodester Drug Recommendation System version 1.0 Description An issue exists in the processing of the file /db/drug recommendor.sql that allows for remote information disclosure through manipulation. Recommendations At the moment, there i...

PT-2026-94469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the irqchip/gic-v5 component where the Interrupt Routing System IRS affinity setup publishes an IRS pointer and IAFFID state in the per-CPU data before the remaining I...

PT-2026-94930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the printk component. During legacy printing, a handover to another printing context can occur, causing the console SRCU Sleepable Read Copy Update read...