MINI-J7V7-H34H-C2V3

Bulletin has no description...

ECHO-7B9B-6AD3-42A3

Bulletin has no description...

ECHO-5D2A-964F-F3DD

Bulletin has no description...

ECHO-BDBC-88CA-0CC5

Bulletin has no description...

CVE-2026-55573 e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain

e107 is a content management system CMS. Prior to 2.3.7, install.php decodes the attacker-controlled previoussteps POST parameter and passes it to unserialize at file scope and again in the einstall constructor without restricting allowed classes. The installer remains accessible after a normal...

DEBIAN-CVE-2026-100236

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. ...

CVE-2026-53614 util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass

util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility reads the attacker-controlled LIBMOUNTFORCEMOUNT2 environment variable with getenv, allowing a local low-privileged user to force the non-atomic legacy...

CVE-2026-100394 Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later dereferenced pointer-valued serviceStatusToday and...

ECHO-5468-DB83-D97C

Bulletin has no description...

ECHO-3FF0-D6F3-934C

Bulletin has no description...

ECHO-CB02-17CA-0675

Bulletin has no description...

ECHO-F860-EC46-FA89

Bulletin has no description...

ECHO-FD0A-96A9-C0B5

Bulletin has no description...

ECHO-8383-C2E9-2629

Bulletin has no description...

ECHO-6591-D874-9EA7

Bulletin has no description...

ECHO-1EB0-92C7-E6C8

Bulletin has no description...

ECHO-85BE-0AC1-D736

Bulletin has no description...

CVE-2026-101897 Angular DevTools (Local DoS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools background service worker accepts chrome.runtime.sendMessage runtime messages from untrusted web pages or third-party...

CVE-2026-110716 unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range filetableoffset or large file counts to...

ECHO-6029-10C5-854F

Bulletin has no description...

ECHO-82A6-442F-DF96

Bulletin has no description...

ECHO-EB29-0852-FA5C

Bulletin has no description...

CVE-2026-73804 Gitea API token scope escalation through HTTP signatures

Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...

DEBIAN-CVE-2026-98422

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the APVLAN tailroom counter on ifdown On ifup, APVLAN interfaces get cryptotxtailroomneededcnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the...

DEBIAN-CVE-2026-98410

In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HWRUNNING watchdog da9063wdtsuspend and da9063wdtresume only check watchdogactive, when the watchdog is left running by the driver sets WDOGHWRUNNING in da9063wdtprobe but userspac...

DEBIAN-CVE-2026-98414

In the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root memcg from objcgroupchargepages objcgroupchargepages resolves the objcg to its memcg and calls trychargememcg, which does not short circuit the root memcg. That memcg can be the root memcg:...

DEBIAN-CVE-2026-98408

In the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division by zero clkgetrate could return 0. Avoid a division by zero panic...

DEBIAN-CVE-2026-98399

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dumpreipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through osinfo, the stand-alone dump passes it through the IPL parm block address and checksum in lowcore. Some...

DEBIAN-CVE-2026-98394

In the Linux kernel, the following vulnerability has been resolved: afunix: Return immediately when manageoob returns NULL for 0-length buffer. Fahad Alharbi reported that recv0, MSGPEEK triggers busy-wait in unixstreamreadgeneric if recv is blocking and the last skb in the queue is MSGOOB skb. I...

DEBIAN-CVE-2026-98397

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

DEBIAN-CVE-2026-98393

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork-base.fragsize to IPMAXMTU to avoid a possible overflow of UDP length that triggers a WARN in udpsetlenshort when setsockopt IPMTUDISCOVER i...

DEBIAN-CVE-2026-98391

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the VM's runtime PM reference is dropped asynchronously, allowing the device to autosuspend while stale page faults belonging to the now-dead VM are still...

DEBIAN-CVE-2026-98390

In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Avoid divide by zero on virtualized systems On a virtualized system, the number of nodes does not have a relationship to the number of roots. A Xen PVH dom0 can calculate rootspernode as 0, which crashes with a divid...

CVE-2026-110644 nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $ command substitution or closing quotes, which are interpolated into an...

CVE-2026-110261 OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES

OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTEFRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames fix point algorithm converge slowly,...

CGA-WC5F-WXPR-243R

Bulletin has no description...

ECHO-570C-3850-3C71

Bulletin has no description...

ECHO-D5AA-0961-19B4

Bulletin has no description...

ECHO-0D5C-D2FD-3D77

Bulletin has no description...

ECHO-3792-9B28-4867

Bulletin has no description...

CVE-2026-98425 wifi: mac80211: don't warn when an IBSS has no channel to scan

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan ieee80211requestibssscan warns when regulatory leaves no allowed channel, but that can happen as the regdomain can change while IBSS is operating, and it can continue...

CVE-2026-98407 wifi: rsi: fix heap OOB write on key removal

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed data == NULL, rsihalloadkey runs: memset&setkeyFRAMEDESCSZ, 0, framelen - FRAMEDESCSZ; setkey is a struct rsisetkey , so the subscript is scaled by sizeofstruct...

ROOT-APP-PYPI-CVE-2026-107378 CVE-2026-107378 in cairosvg - Patched by Root

Root has patched CVE-2026-107378 in the cairosvg package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-102266 CVE-2026-102266 in pyjwt - Patched by Root

Root has patched CVE-2026-102266 in the pyjwt package for Root:PyPI. Multiple fixed versions available...

RLSA-2026:82041 Important: python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RUSTSEC-2026-0350 Guests can send absolute-form HTTP requests to different hosts

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5qpp-g3j2-8frx For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0363 Component-model handle tables are capped only per instance and charged to no limit

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q554-3cjc-rx7p For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0347 Buffered application data sent to outer server after ECH rejection

When a server rejects Encrypted Client Hello ECH, the client completes the handshake using the outer ClientHello and authenticates the server against the ECH config's publicname. At the end of that handshake, rustls encrypted and queued any application data buffered via ClientConnection::writer...

RUSTSEC-2026-0349 Unauthenticated ServerHello can downgrade later connections to classical key exchange

The client recorded the server-selected key exchange group for each server name when processing the ServerHello, before the server was authenticated. This record is used to predict which key share to send in future ClientHellos to that server name. A network attacker can answer one connection...

SUSE-SU-2026:4661-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283672. Changes for google-osconfig-agent: Update to version...