CVE-2026-54053: Improper Limitation of a Pathname to a Restricted Directory

Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated user can write arbitrary files outside...

CVE-2026-90231: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

PT-2026-94421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init function sets q-quantum using psched mtu without an overflow check. On devices with an...

PT-2026-94420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow issue exists in the Stochastic Fairness Queueing sfq scheduler. When sfq init sets the q-quantum value using psched mtu, a device with an excessively large Maximum...

PT-2026-94181

Name of the Vulnerable Software and Affected Versions Motors WordPress plugin versions prior to 1.4.121 Description An authorization bypass exists that allows unauthenticated attackers to access non-published car listings, including those in draft, pending, and private status. By providing a...

PT-2026-94423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq codel init function where the q-quantum and q-cparams.mtu values are set using psched mtu without proper clamping. When a device is configured with an excessive...

PT-2026-94299

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.3.8 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An authentication bypass allows unconfirmed users to obtain a session, bypassing mandatory email confirmation requirements...

PT-2026-95007

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description A flaw in the background job dispatch mechanism allows remote code execution with the privileges of the web user. The issue occurs because background job arguments are passed directly as the arg...

CVE-2026-85500: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...

PT-2026-94390

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 6.2 through 9.17 Description An authentication bypass exists when the 'webserver' source is enabled in AUTHENTICATION SOURCES. The WebserverAuthentication.get user function reads the config.WEBSERVER REMOTE USER from the...

PT-2026-94651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the show pte function when CONFIG DEBUG USER=y and the user debug=31 command line option is enabled. This occurs because a user fault can trigger show pt...

PT-2026-94284

Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...

PT-2026-94254

The password reset funcionality is vulnerable to unauthorized account modification due to improper validation of the user id parameter. An attacker can manipulate this predictable numeric identifier to reset passwords for arbitrary users without proving account ownership...

RockyLinux 9 : firewalld (RLSA-2026:67585)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67585 advisory. firewalld: firewalld: Local unprivileged user can modify firewall state due to D-Bus setter mis- authorization CVE-2026-4948 Tenable has extracted the preceding...

PT-2026-94901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the esp ssg unref function where it incorrectly releases page references on the source scatterlist after an AEAD operation. When a socket buffer skb contains managed...

CVE-2026-92584

AVideo through 29.0 current revision e01e41ecc contains a stored cross-site scripting vulnerability. The unauthenticated view-counter endpoint objects/videoAddViewCount.json.php reaches VideoStatistic::save, which writes the caller's User-Agent via getUserAgentInfo, which returns unrecognized age...

GHSA-G3PG-FRFM-PR2M OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

Description In OpenFGA, the ListUsers API could incorrectly return a user who should have been excluded. Preconditions This applies if all of the following are present: - The authorization model contains a relation defined as an intersection and where at least one operand is an exclusion of the...

GHSA-C7C5-5J6R-Q957 djust has broken object-level access control (IDOR)

Impact djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry points: a the initial HTTP GET render, b SPA urlchange navigation, and c % liverender % embedded child views. An authenticated...

CVE-2026-92589 Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reorder

Craft CMS 5.0.0 through 5.10.12 fixed in 5.10.13 contains a broken access control flaw in the nested-elements reorder endpoint. When an authenticated control panel user with viewEntries and viewPeerEntries but without savePeerEntries opens another author's entry in read-only mode, Craft...

CVE-2026-92584

AVideo through version 29.0 (revision e01e41ecc) is affected by a stored cross-site scripting vulnerability in the unauthenticated view-counter endpoint objects/videoAddViewCount.json.php. The attacker-supplied User-Agent header is written into the videos_statistics.app column via VideoStatistic:...