PT-2026-94771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the RDMA/rxe component. The function rxe odp mr init user assigns a memory reference to mr-umem before calling rxe odp init pages. If rxe odp init...

PT-2026-94263

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

PT-2026-94454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge network component regarding the ARP/ND proxy. The system reads the neighbor hardware address directly, which can lead to torn or partial reads if the neighb...

PT-2026-94163

Name of the Vulnerable Software and Affected Versions Private Feed Key versions prior to 0.2 Description The Private Feed Key WordPress plugin fails to verify that the key used to authenticate a feed request was actually issued by the plugin. Instead, it matches the key against any stored user...

PT-2026-95103

Name of the Vulnerable Software and Affected Versions Speakr versions prior to 0.8.21-alpha Description An issue exists where the csrf exempt for api tokens before request hook in src/app.py calls csrf.exemptview func, which permanently adds the selected view to the process-global exemption set o...

PT-2026-94408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA control LED state layer where the system assumes all associated kcontrol elements are readable. If a write-only element is created without a get callback, it...

PT-2026-94896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fs/resctrl component. The problem occurs due to a race condition between the fallback freer in the rdtgroup kn put function and the primary bulk...

PT-2026-95123

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description A buffer overflow exists in PDFium, a PDF rendering engine, within Google Chrome on Windows. A remote attacker could use social engineering to trick a user into opening a specially...

PT-2026-94745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the qcom SCM driver during the probe process. In qcom scm probe, the function devm request threaded irq is called before the scm variable is publishe...

PT-2026-94456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SMC LLC Shared Memory Communications Local LLC implementation. When the smc llc event handler function transitions a local LLC flow from SMC LLC FLOW REQ ADD...

PT-2026-94560

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 EFI implementation where a bad kernel memory access can occur on machines supporting EFI runtime services when using software PAN CONFIG ARM64 SW TTBR0 PAN=y...

PT-2026-94815

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA core component. When accessing a Protection Domain PD via the netlink path, the synchronization relies on rdma restrack get. Because rdma restra...

PT-2026-95062

Name of the Vulnerable Software and Affected Versions Traccar versions prior to 6.14.0 Description An authenticated user with permissions to manage groups and request reports can create a cyclic group-parent hierarchy. When a trips or stops report is requested for a device within this hierarchy,...

PT-2026-94549

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the net: page pool component. The problem occurs due to a race condition during xa cmpxchg when page pool destroy executes page pool scrub concurrent...

PT-2026-94526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the coretemp driver within the hwmon subsystem on CPUs that do not support Package Thermal Sensor PTS. The pdata-core data array is allocated in the init temp dat...

PT-2026-94151

Memory Corruption when validating large data buffers from external sources using addition to check buffer length...

PT-2026-94471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the irqchip/ast2700-intc component where the irq domain activate callback is called from setup irq while desc-lock is held and interrupts are disabled. The functions...

PT-2026-94920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the asus-wireless platform driver where the asus wireless probe function returns success even when acpi match acpi device finds no match. This occurs because platform...

PT-2026-94335

Name of the Vulnerable Software and Affected Versions HUBzero CMS versions prior to 2.2.33 Description A path traversal issue exists in project file upload handlers. This allows authenticated project members to write arbitrary files outside the project repository by supplying traversal sequences ...

PT-2026-94388

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.18 Description The save file endpoint in the File Manager, used by the Query Tool and ERD, contains a race condition. While the system validates the requested path using the check access permission function, it...

PT-2026-94406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network scheduler where the qdisc get stab function accepts a user-supplied size table. The qdisc calculate pkt len function can amplify the qdisc pkt len value...

PT-2026-94422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow occurs in the fq pie init function when the default quantum is set using psched mtu without clamping. On devices with an exceptionally large Maximum Transmission Unit...

PT-2026-94420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow issue exists in the Stochastic Fairness Queueing sfq scheduler. When sfq init sets the q-quantum value using psched mtu, a device with an excessively large Maximum...

PT-2026-94423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq codel init function where the q-quantum and q-cparams.mtu values are set using psched mtu without proper clamping. When a device is configured with an excessive...

PT-2026-95145

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.5 Description An issue exists where the getThemeFolder function in admin/controller/editor/revisions.php returns the theme parameter without proper sanitization. The backupFolder function then concatenates this...

PT-2026-95257

Name of the Vulnerable Software and Affected Versions WordPress versions 4.7 through 7.1 Description An unauthenticated stored cross-site scripting XSS issue, dubbed Comment2Shell, exists in the WordPress core. The flaw occurs in the wpautop function, which converts line breaks into paragraphs. A...

PT-2026-94716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver within the mt76 wifi subsystem. When the mt76 wcid alloc function fails, the mt7915 add interface function returns without clearing the vif mask and...

PT-2026-94556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Samsung PWM timer used as a clock source on legacy systems. When PREEMPT RT a real-time patch for the Linux kernel is enabled on ARM architectures, regular spinloc...

PT-2026-94728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mt76 rx poll complete function due to a race condition. This occurs when a Station STA has been removed, but the rx status still maintains a pointer ...

PT-2026-94703

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the mt7996 driver within the mt76 wifi subsystem. During a full chip reset, the mt7996 vif link add function fails to re-create necessary records in the firmware and doe...

PT-2026-94482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Compressed I/O paths in the NTFS driver incorrectly handle memory mapping by discarding the address returned by the kmap local page function and subsequently accessing or unmapping the...

PT-2026-94162

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.4.7 Description The plugin fails to restrict the correctness flags returned during the quiz answer verification process. This allows unauthenticated attackers to retrieve the correct answers for all options of a...

PT-2026-94171

Name of the Vulnerable Software and Affected Versions wpShopGermany IT-RECHT KANZLEI versions prior to 2.4 Description The plugin fails to generate API authentication tokens securely. The token is derived from data controlled by the requester and is created as a side effect of the validation chec...

PT-2026-94237

Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description An authentication bypass exists in the PGP second factor verification of the LoginControl component. The issue occurs because challenge responses are compared using loose equality against an...

PT-2026-94355

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.14.0 through 4.14.x ash authentication versions 5.0.0-rc.10 through 5.0.0-rc.13 Description An improper authentication issue allows an attacker to sign in as another user by linking an OAuth2 identity to an accoun...

PT-2026-94886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi channels setup function can fail after the common BASE channel or earlier protocol channels have been registered in the...

PT-2026-95087

Name of the Vulnerable Software and Affected Versions dd-trace-cpp versions prior to 2.1.0 Description The library parses incoming W3C baggage headers without enforcing the DD TRACE BAGGAGE MAX ITEMS or DD TRACE BAGGAGE MAX BYTES limits during the extraction path. A remote unauthenticated attacke...

PT-2026-94557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur when unregistering an s390dbf debug area while an associated debugfs file is being written to. This happens because the debug unregister function attempts to acquire...

PT-2026-94628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm runtime...

PT-2026-94751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtlwifi PCI component where the rtl pci probe function contains an incorrect goto label in its final error path. This causes the system to skip necessary cleanup...

PT-2026-94799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the scmi protocol table register function fails to properly roll back registrations. When a later entry in an ID table fails,...

PT-2026-94910

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the san probe function when installing the GSBUS address space handler. This happens because the function dereferences the result of ACPI COMPANION...

PT-2026-94525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding atomic Read-Modify-Write RMW verification. The system only records the instruction pointer type when the destination...

PT-2026-94622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An underflow issue exists in the coresight etm4x component. The problem occurs during the initialization or setting of TRCSEQEVR when the TRCIDR5.NUMSEQSTATE is 0b000, as the code uses...

PT-2026-94632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firmware loader where fw load sysfs fallback calls device add before adding fw priv to pending fw head. This allows a userspace helper to complete the request via...

PT-2026-94714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7996 driver where the mt7996 mcu beacon cntdwn function emits two bss bcn cntdwn tlv entries during an active CSA countdown, but the MT7996 BEACON UPDATE SIZE on...

PT-2026-94854

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f uac1 legacy USB gadget driver where the UAC1 STR ATTRIBUTE macro defines configfs show/store handlers for the fn play, fn cap, and fn cntl string options. The...

PT-2026-94478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpa sim component where the vdpasim create function leaves vdpasim-worker as an ERR PTR an error pointer if kthread run worker fails. The subsequent error path...

PT-2026-94627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the raid5 bitmap sector map function where the array range is incorrectly aligned to full RAID5 stripe widths before conversion to component sectors. This occurs becau...

PT-2026-94675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pep getsockopt function where the system fails to properly bound the amount of data written to the user buffer. While the function uses min t to clamp the reported...