CVE-2026-16209

creationtimestamp| type| source ---|---|--- 2026-07-19 08:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqye452ogs2g 2026-07-19 08:30:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mqyegoqwk22f...

CVE-2026-16224 jxxghp MoviePilot Application API improper authorization

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

CVE-2026-53994

creationtimestamp| type| source ---|---|--- 2026-07-19 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944052588841641 2026-07-19 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxmy73t342g 2026-07-19 06:00:37+00:00| seen|...

EUVD-2026-45404

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/webfetch/webfetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has...

PT-2026-61517

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long name that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...

PT-2026-61196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the notifier sequence in the amdgpu hmm range get pages function is not read correctly. If the sequence is read more than once, the syst...

PT-2026-61235

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the l2tp session get by ifname function. A reader matching session-ifname can be preempted between the strcmp and refcount inc operations. If the last referenc...

PT-2026-61394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the netfilter ebtables component occurs due to the way table structures are removed. The issue is addressed by implementing a two-stage removal scheme to ensure that the...

PT-2026-61173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VCN encoder and decoder rings in the drm/amdgpu/vcn component do not support 64-bit user fence writes. This issue leads to the rejection of CS submissions that utilize user fences...

PT-2026-61436

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged local user can cause a host CPU to pin indefinitely. This occurs when L2TP CMD SESSION GET is issued on L2TP ATTR IFNAME concurrently with L2TP CMD SESSION CREATE and L2T...

PT-2026-61165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v2.0 rings do not support 64-bit user fence writes. This leads to a failure to reject CS submissions that include user fences...

PT-2026-61258

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 implementation regarding how the ZCR EL2 register is handled for VHE guest hypervisors. When a guest hypervisor updates ZCR EL2 via ZCR EL1, the value is...

PT-2026-61453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locking issue exists in the SMB client where the tc count increment within the smb2 find smb sess tcon unlocked function is not properly protected. This occurs because the code failed ...

PT-2026-61206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An adjacent Fibre Channel fabric actor, such as a compromised switch, fabric controller, or a same-zone N Port capable of source spoofing, can trigger a non-return state in the generic F...

Linux Distros Unpatched Vulnerability : CVE-2026-63796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: reject oversized group bitmap descriptors ocfs2validategdparent only bounds bgbits against the parent allocator's chain geometry. A malicious descriptor...

Fedora 44 : python-asyncssh (2026-1f248487e4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1f248487e4 advisory. update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file...

system-user-zabbix-7.0.28-1.1 on GA media (moderate)

system-user-zabbix-7.0.28-1.1 on GA media Announcement ID: openSUSE-SU-2026:11304-1 Rating: moderate Cross-References: CVE-2026-25680 CVE-2026-42502 CVSS scores: CVE-2026-25680 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25680 SUSE : 8.7...

Updated perl-Config-IniFiles package fixes a security vulnerability

The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...

CVE-2026-12228

creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...

OPENSUSE-SU-2026:21379-1 Security update for ctop

This update for ctop fixes the following issues: Changes in ctop embedded dependencies: - CVE-2022-21698: clientgolang: Denial of service using InstrumentHandlerCounter bsc1248710 - CVE-2024-45310: runc: runc can be tricked into creating empty files bsc1257431 - CVE-2026-10722: ebpf: Crash when...