pretix-tracking-scripts (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-101271 via pretix (>=2024.11.0, <=2026.2.2)

pretix PYPI version =2024.11.0, =1.0.0, =1.0.2 Source cves: CVE-2026-101271 Source advisory: MEND:CVE-2026-101271...

CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...

CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...

EUVD-2026-88753

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...

pretix-tracking-scripts (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-101270 via pretix (>=2024.11.0, <=2026.2.2)

pretix PYPI version =2024.11.0, =1.0.0, =1.0.2 Source cves: CVE-2026-101270 Source advisory: MEND:CVE-2026-101270...

pretix-tracking-scripts (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-101268 via pretix (>=2024.11.0, <=2026.2.2)

pretix PYPI version =2024.11.0, =1.0.0, =1.0.2 Source cves: CVE-2026-101268 Source advisory: MEND:CVE-2026-101268...

pretix-tracking-scripts (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-101267 via pretix (>=2024.11.0, <=2026.2.2)

pretix PYPI version =2024.11.0, =1.0.0, =1.0.2 Source cves: CVE-2026-101267 Source advisory: MEND:CVE-2026-101267...

CVE-2026-98074

A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...

EUVD-2026-88579

mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrier names, waybill numbers, and complete...

CVE-2026-102363

mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrier names, waybill numbers, and complete...

Linux Distros Unpatched Vulnerability : CVE-2026-98164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shado...

Agent-Warden: EBPF-Based Kernel-Native Process-File Provenance Tracking for LLM Agents

LLM agents execute dynamically generated process and file operations that are often invisible to application-layer tracing. We present Agent-Warden, an extended Berkeley Packet Filter eBPF-based provenance monitor for tracking task and regular-file states across process creation, file access, and...

PT-2026-102529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 MMU where the kvm gfn is write tracked function only checks the supplied memslot. Because page tracking is per-address-space and shadow pages are shared...

CVE-2026-98164: Always-Incorrect Control Flow Implementation

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...

CVE-2026-98164

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...

CVE-2026-102363 mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number

mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrier names, waybill numbers, and complete...

CVE-2026-102363 mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number

mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrier names, waybill numbers, and complete...

CVE-2026-49994

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

EUVD-2026-88401

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...