Vuldb Updates

A vulnerability was found in Linux Kernel up to 6.16.1. It has been classified as critical. Affected by this issue is the function lpfc_sli4_read_rev. The manipulation leads to improper initialization. This vulnerability is referenced as CVE-2025-38695. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Linux Kernel up to 6.16.1. This vulnerability affects the function stack_top. Performing a manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-38696. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.16.1. The affected element is an unknown function of the component jfs. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2025-38697. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.16.1. Affected by this issue is the function az6027_i2c_xfer of the component media. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2025-38693. The attacker needs to be present on the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.16.1. This affects the function dib7090p_rw_on_apb of the component media. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2025-38694. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability has been found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 and classified as critical. This issue affects the function exfat_count_dir_entries of the component exfat. The manipulation leads to infinite loop. This vulnerability is referenced as CVE-2025-38692. The attack needs to be initiated within the local network. No exploit is available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes stack-based buffer overflow. This vulnerability is registered as CVE-2026-2069. The attack needs to be launched locally. Furthermore, an exploit is available. To fix this issue, it is recommended to deploy a patch.

A vulnerability was found in GLPI up to 11.0.4. It has been rated as critical. This affects an unknown part of the component Webhook Feature. Performing a manipulation results in server-side request forgery. This vulnerability is cataloged as CVE-2026-22247. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in D-Link DCS-931L up to 1.13.0 and classified as critical. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is identified as CVE-2026-2260. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.16.1/6.17-rc1. Affected by this vulnerability is an unknown functionality. The manipulation results in uncontrolled recursion. This vulnerability is reported as CVE-2025-38690. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability has been found in Linux Kernel up to 6.16.1 and classified as critical. The impacted element is the function ext_tree_prepare_commit. This manipulation causes uninitialized pointer. The identification of this vulnerability is CVE-2025-38691. The attack needs to be done within the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. The impacted element is an unknown function of the component iommufd. The manipulation results in privilege escalation. This vulnerability is known as CVE-2025-38688. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Linux Kernel up to 6.16.1/6.17-rc1. Affected by this vulnerability is the function avx512_status. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2025-38689. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.42/6.15.10/6.16.1/6.17-rc1. It has been classified as critical. The affected element is the function split_huge_pmd of the component userfaultfd. This manipulation causes denial of service. This vulnerability is tracked as CVE-2025-38686. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability described as critical has been identified in Linux Kernel up to 6.16.1. Impacted is the function vc_do_resize of the component fbdev. Executing a manipulation can lead to out-of-bounds write. This vulnerability appears as CVE-2025-38685. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.16.1. This issue affects the function comedi_device_detach of the component comedi. Such manipulation leads to use after free. This vulnerability is listed as CVE-2025-38687. The attack must be carried out from within the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.17-rc1 and classified as critical. Impacted is the function ets_class_qlen_notify. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2025-38684. The attack can only be performed from the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in WCFM Plugin up to 6.7.24 on WordPress and classified as critical. This impacts the function WCFM_Settings_Controller::processing of the component Setting Handler. Performing a manipulation results in missing authorization. This vulnerability is identified as CVE-2026-0845. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in WCFM Membership Plugin up to 2.11.8 on WordPress and classified as problematic. Affected is the function WCFMvm_Memberships_Payment_Controller::processing. Executing a manipulation can lead to improper control of resource identifiers. This vulnerability is tracked as CVE-2025-15147. The attack can be launched remotely. No exploit exists.

A vulnerability was found in AprilRobotics apriltag up to 3.4.5. It has been classified as problematic. Affected by this vulnerability is the function apriltag_detector_detect of the file apriltag.c. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-2246. The attack must be carried out locally. In addition, an exploit is available. It is suggested to install a patch to address this issue.