2026

In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release

In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LE

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl818

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iomm

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error ch

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_ne

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_st

In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain

An integer underflow vulnerability in the Silicon Labs Z-Wave Protocol Controller can lead to out of bounds memory reads

Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dn

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticate

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. Th

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware.

Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to she

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows cont

An attacker with access to the system's internal network can cause a denial of service on the system by making two concu

An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured

The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate pri

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files c

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is n

An attacker with a network connection could detect credentials in clear text.

As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could ob

OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a

A vulnerability in the handling of verify_mode = CERT_REQUIRED in the wolfssl Python package (wolfssl-py) causes client

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sec

Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging t

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via s

A Improper Authorization vulnerability in Foomuuri llows arbitrary users to influence the firewall configuration.This is

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall co

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the p

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the t

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all route

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the m

This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the u

AccessAlly WordPress plugin versions prior to 3.3.2 contain an unauthenticated arbitrary PHP code execution vulnerabilit

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) expose a command execution service on TCP port 2

The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 (GA) contain hardcoded credentials for an operating s

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's HRMGo, consisting of a lack of proper validation of user inp

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's TicketGo, consisting of a lack of proper validation of user

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack o

Imaster's Patient Record Management System contains a stored Cross-Site Scripting (XSS) vulnerability in the endpoint ‘/

Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/com

Imaster's MEMS Events CRM contains an SQL injection vulnerability in‘keyword’ parameter in ‘/memsdemo/exchange_offers.ph

Imaster's MEMS Events CRM contains an SQL injection vulnerability in ‘phone’ parameter in ‘/memsdemo/login.php’.

TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility