2026

XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence

In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its

In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that nev

In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the cl

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electro

In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psx

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_m

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_nod

In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read

In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder fu

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype lengt

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_s

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNEG voltage selector t

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: suppress WARN_ON_ONCE

In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to i

In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte data in tpacket_snd

In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message le

In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiri

In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaen

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexi

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref s

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached in

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from sk_mc_loop() sk_mc

In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-f

In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_valid

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERR_PTR to kthread_s

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state before

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" dev

In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI disco

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 1

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who ca

An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical acces

Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue af

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used i

Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4

Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-

Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.2

Joomla Extension - j2commerce.com - Reflected XSS via `filter_tag`, `pricefrom` and `priceto` in J2Store 1.0.0-3.3.21, 4

Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Sto

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al

A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of the endpoint /ocsreports

Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of th

SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input prov

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The a

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the RES

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability