tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

CVE-2026-118248

A flaw was found in Highcharts Dashboards. The edit mode component fails to properly validate object property paths, allowing prototype-related keys to be processed. An attacker who controls editable configuration options can supply crafted paths to modify base JavaScript object prototypes...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

CVE-2026-48186

Improper handling of messages before AS security activation can cause unexpected behavior...

CVE-2026-48186

The SAMSUNG Exynos 1280 processor is affected by a vulnerability involving improper exception handling . The root cause is inadequate message processing that occurs before AS security activation , which can lead to unexpected behavior . This vulnerability is associated with CWE-754 (Improper Chec...

EUVD-2026-117260

Improper handling of messages before AS security activation can cause unexpected behavior...

CVE-2026-48186

Improper handling of messages before AS security activation can cause unexpected behavior...

CVE-2026-48186

Improper handling of messages before AS security activation can cause unexpected behavior...

PT-2026-137359

Improper handling of messages before AS security activation can cause unexpected behavior...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

CVE-2023-28098

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.53. This vulnerability arises because the iwlwifi mld driver triggers a WARNON condition even when it is configured for WoWLAN but remains suspended and unconnected to the network, without proper netdetect configuration. This...

PT-2026-120705

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description Issues concerning null pointers were identified during an internal security review. A null pointer is a reference that points to nothing, which can lead to application crashes...

PT-2026-120704

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description Issues concerning reachable assertions were identified during an internal security review. These issues are categorized under CWE-617, which refers to a condition where a...

CVE-2026-86872

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior...

EUVD-2026-104711

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior...

CVE-2026-86872

A logic issue in WebKit was addressed with improved state management. Processing maliciously crafted web content may lead to unexpected behavior . This vulnerability affects Safari 27 , visionOS 27 , and watchOS 27 on macOS Sequoia and macOS Tahoe. The issue is fixed in the specified versions. No...