CVE-2026-16876

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...

CVE-2026-16876

NEC UNIVERGE IX-R/IX-V series routers are affected by an authentication bypass in the WebGUI component, classified as Missing Authentication for Critical Function (CWE-306) . A remote unauthenticated attacker can send a specially crafted message to the WebGUI over the internet to execute arbitrar...

CVE-2026-75439

An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...

CVE-2026-71620

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

AZL-99615 CVE-2026-80765 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

EUVD-2026-71408

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

CVE-2026-80765

CVE-2026-80765 affects the Linux kernel 's Hyper-V synthetic HID driver. The function mousevsc_on_receive_device_info() trusts the bLength and wDescriptorLength fields in SYNTH_HID_INITIAL_DEVICE_INFO messages without verifying that the received VMBus packet actually contains both the HID descrip...

CVE-2026-80765 HID: hyperv: validate initial device info bounds

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

EUVD-2026-71743

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component...

CVE-2026-75439

CVE-2026-75439 affects Free5GC v.4.2.2 , a 5G core network open-source implementation. A remote, unauthenticated attacker can cause a denial of service via the UPF (User Plane Function) component, requiring no user interaction. The CVSS 3.1 score is 7.5 (High) with vector AV:N/AC:L/PR:N/UI:N/S:U/...

CVE-2026-71620

CVE-2026-71620 is a file upload vulnerability in Zhao-github ApiAdmin v5.0.1 that allows a remote attacker with low privileges to execute arbitrary code by uploading a crafted .php file. The CVSS 3.1 score is 8.1 (HIGH) , reflecting network reachability, low attack complexity, and high impact on ...

Linux Distros Unpatched Vulnerability : CVE-2026-80765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor follow...

PT-2026-86243

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

PT-2026-85606

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTH HID INITIAL DEVICE INFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsc on receive device inf...

DEBIAN-CVE-2026-52295

FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamfwriter.c...

CVE-2026-52022

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components...

CVE-2026-52295

FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamfwriter.c...

CVE-2026-18630

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

EUVD-2026-69284

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

CVE-2026-18780 CSRF in TMT Machine's Talassoft Industrial Management Software

Cross-Site request forgery CSRF vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...