PT-2026-98128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt component where the XDomain reference is not maintained during the lifetime of a service. This occurs because the service ID is released in the tb...

PT-2026-104846

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tb service release and the ID array is owned by the parent XDomain...

PT-2026-104985

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tb cfg request fails in tb xdomain response If tb cfg request fails setting up the request for example the control channel is shut down already it returns an error without calling the callback. To...

PT-2026-104965

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-root switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb xdp handle request return error to the remote host. However, we need to make sure we keep the...

PT-2026-98129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the thunderbolt component when the tb xdomain response function is executed. If the tb cfg request function fails to set up a request, such as when the control...

PT-2026-98127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt component where the tb-root switch is not properly set to NULL when a domain is stopped. This failure to clear the root switch prevents the tb xdp hand...

CLEANSTART-2026-QW90668 Security fix for ghsa-5359-pvf2-pw78 applied in: thingsboard-tb-web-ui 4.3.0.1-r0

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QM33219 Security fix for ghsa-37ch-88jc-xwx2 applied in: sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

ghsa-37ch-88jc-xwx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QC14914 Security fix for CVE-2026-4867 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-4867 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DT32496 Security fix for ghsa-76c9-3jph-rj3q applied in: thingsboard-tb-web-ui 4.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RN17986 Security fix for ghsa-vg35-5wq7-3x7w applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AV82595 Security fix for ghsa-v98h-vmpc-fpqv applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NJ61543 Security fix for CVE-2026-47762 applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UG66310 Security fix for ghsa-q742-qvgc-gc2f applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LJ04584 Security fix for CVE-2026-47761 applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KI92427 Security fix for CVE-2026-47759 applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101578

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101835

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...