CVE-2026-103254: Improper Limitation of a Pathname to a Restricted Directory

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait approvals. Attackers with workflow creation permissions can mint valid approval URLs for gates in projects they cannot...

CVE-2026-97985

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by triggering an infinite busy-wait loop on the system. When processing local Unix domain sockets AFUNIX containing out-of-band OOB data, the kernel fails to update internal queue markers during certain receive...

CVE-2026-97530

A flaw was found in the Linux kernel's qla2xxx Fibre Channel driver. A remote entity on the Fibre Channel network can cause a Denial of Service DoS by transmitting frames containing specific payload data. The driver misinterprets matching data bytes within received frames as an indicator that...

CVE-2026-77791

A flaw was found in Apache Tomcat. An uncontrolled resource consumption vulnerability occurs when sending a WebSocket close message, which can lead to a busy wait condition. A remote attacker could exploit this to cause a Denial of Service DoS by making the server unresponsive. Mitigation Red Hat...

CVE-2026-100576

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

CVE-2026-100576 OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

CVE-2026-100576 OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

EUVD-2026-87475

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

CVE-2026-100576

Versions of OpenClaw prior to 2026.8.1 are vulnerable to a server-side request forgery (SSRF) vulnerability within browser wait predicates. The root cause is that the wait --fn function can be used against an existing browser session to request loopback or private destinations . This allows attac...

CVE-2026-100576 OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

CVE-2026-100576: Server-Side Request Forgery (SSRF)

OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or...

PT-2026-99212

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description An issue exists in browser wait predicates that allows attackers to bypass server-side request forgery SSRF protections. By using the wait --fn function against an existing browser session, an...

AZL-104352 CVE-2026-97985 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

EUVD-2026-86639

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

PT-2026-98722

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the sched process wait tracepoint does not correctly mark its first argument as nullable. When do wait passes wo-wo pid ...

PT-2026-98528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 crypto subsystem where the hardware may persistently return an -EBUSY error after exhausting retries. This error propagates to the crypto finalize request...

CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

PT-2026-98015

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the au1000 close function where free irq is called while the aup-lock is held via spin lock irqsave. Because free irq can sleep while acquiring the IRQ descriptor...

PT-2026-98110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang occurs during the teardown of ib network configurations. This issue is caused by the shutdown worker thread sleeping on the wait event call, which subsequently blocks other work...