Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31637)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkaddecryptticket decrypts the RXKAD response ticket and then parses the buffer as plaintext without checking whether cryptoskcipherdecrypt succeeded. A malformed RESPONSE can...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-23310)

In the Linux kernel, the following vulnerability has been resolved: bpf/bonding: reject vlan+srcmac xmithashpolicy change when XDP is loaded bondoptionmodeset already rejects mode changes that would make a loaded XDP program incompatible via bondxdpcheck. However, bondoptionxmithashpolicyset has ...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58079)

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46243)

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcalltarget that cifs.upcall treats as kernel-originating inputs. However,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46003)

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the total number of nodes Currently, the nameserver doesn't limit the number of nodes it handles. This can be an attack vector if a malicious client starts registering random nodes, leading to memory...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-21830)

In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem e.g. bcachefs might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files. This plugin only works with Tenable.ot. Plea...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46044)

In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If an error occurs after the ssif kthread is created, but before the main IPMI code starts the ssif interface, the ssif kthread will not be stopped. So make sure the kthread is stopped on an...

JFrog Artifactory < 7.146.27 Privilege Escalation

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.146.27. It is, therefore, affected by a privilege escalation vulnerability in the refresh-token signature due to incorrect validation. An authenticated, remote attacker can...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46018)

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing UAC2 rates at MAXNRRATES parseuac2sampleraterange caps the number of enumerated rates at MAXNRRATES, but it only breaks out of the current rate loop. A malformed UAC2 RANGE response with additional...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46128)

In the Linux kernel, the following vulnerability has been resolved: ipmi: Check event message buffer response for bad data The event message buffer response data size got checked later when processing, but check it right after the response comes back. It appears some BMCs may return an empty...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53150)

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46177)

In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages until the BMC said it was done. To avoid issues with BMCs that never say they are done, add a limit of 10 fetches at a...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-43110)

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmffwehhandleifevent validates the firmware-provided interface index before it touches drvr-iflist, but it still uses the raw bsscfgidx field as an array index without a...

JFrog Artifactory 7.94.x < 7.117.10 XSS

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.94.x prior to 7.117.10. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An...

PT-2026-118759

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in an API allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-118786

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the PrintPreview component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to open a crafted HTML...

PT-2026-118928

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in Extensions allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-118932

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the Passwords component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

Google Chrome Vulnerability: CVE-2026-113020

Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-119003

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the Network component allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update...