EUVD-2026-104397

Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...

CVE-2026-112291 Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem path...

CVE-2026-112291 Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem path...

CVE-2026-112291

The Flarum Extension Manager version 2.0.0-beta.1 before 2.0.0-beta.8 is vulnerable to an unauthenticated information disclosure due to missing authorization and admin checks on the TaskResource index endpoint. Remote attackers can send GET requests to /api/extension-manager-tasks to retrieve tas...

CVE-2026-112289 Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.linktotask. Attackers can embed HTML or script that executes when administrators open the task changelist or change...

CVE-2026-112289 Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.linktotask. Attackers can embed HTML or script that executes when administrators open the task changelist or change...

CVE-2026-112289 Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.linktotask. Attackers can embed HTML or script that executes when administrators open the task changelist or change...

CVE-2026-112289

Koalixcrm versions through 1.14.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists because malicious task titles are rendered unescaped by the Task.link_to_task() function. Staff users can inject scripts that execute in the context of an administrator's browser...

CVE-2026-112305: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the taskrunner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansiblesshcommonargs with a ProxyCommand or...

Agent World Model in the Wild: Computer-Use Agent Environment Synthesis

Agent learning is shifting from learning from human data toward learning through interaction with the world. However, scaling such learning directly in real-world computer systems is challenging and can introduce substantial security risks. We therefore propose Agent World Model in the Wild...

PT-2026-117465

Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task runner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansible ssh common args with a ProxyCommand or...

UBUNTU-CVE-2026-98864

In the Linux kernel, the following vulnerability has been resolved: schedext: Wait for SCXOPSSDISPATCHING before reenqueueing a task ebf1ccff79c4 "schedext: Fix ops.dequeue semantics" moved the final opsstate store in scxdispatchenqueue after the DSQ unlock so that the custody update and...

CVE-2026-98507 mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anonvma init and vma-anonvma publish On arm64 server, we find that a task trying to grab the anonvma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds. Tainted:...

CVE-2026-98507 mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anonvma init and vma-anonvma publish On arm64 server, we find that a task trying to grab the anonvma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds. Tainted:...

CVE-2026-98507

The Linux kernel contains a memory management flaw in the mm/rmap subsystem due to a missing memory barrier during the initialization and publication of anon_vma objects. Specifically, in __anon_vma_prepare(), the store to anon_vma->root and the publication to vma->anon_vma can be reordered...

PT-2026-117085

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task struct-sched cache grp to fix UAF Add a sched cache grp pointer to task struct so that scheduler code can access the cache group directly via the task, without going through mm-sched cache grp. This...

PT-2026-116726

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon vma init and vma-anon vma publish On arm64 server, we find that a task trying to grab the anon vma lock triggers hungtask. INFO: task main:2354726 blocked for more than 120 seconds...

PT-2026-117077

In the Linux kernel, the following vulnerability has been resolved: io uring: fix task work add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs task work off its own list and doesn't need to be told about it, so it can pop and complete a request as soon as mpscq push has published i...

PT-2026-117009

In the Linux kernel, the following vulnerability has been resolved: perf: Fix race between perf event exit task and perf pending task A race condition exists between perf event exit task and perf pending task during begin new exec. During begin new exec, perf event exit task may be called, and th...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.36 has a security vulnerability. This vulnerability stems from the lack of a memory barrier between the anonvma initialization and the vma-anonvma release. This may lead to the reuse of anonvma after its root is released, causing abnormal lock states and task suspensi...