Vuldb Updates

A vulnerability classified as critical has been found in Linux Kernel up to 7.0.9. This issue affects the function hid_post_reset of the component HID. The manipulation leads to deadlock. This vulnerability is documented as CVE-2026-53037. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 7.1-rc1. Affected by this issue is the function nvmet_tcp_release_queue_work of the component nvmet. Performing a manipulation of the argument async_event_work results in deadlock. This vulnerability is cataloged as CVE-2026-46304. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Red Hat Enterprise Linux 6/7/8/9/10. This issue affects some unknown processing of the component SoupServer. Such manipulation leads to http request smuggling. This vulnerability is listed as CVE-2026-103399. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Red Hat Enterprise Linux and classified as problematic. Affected is an unknown function of the component libsoup. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-66339. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. This affects an unknown function of the component SoupAuthManager. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-12547. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability has been found in Red Hat Linux 3.6.6 and classified as critical. This issue affects some unknown processing of the component WebSocket Frame Handler. This manipulation causes integer overflow. This vulnerability appears as CVE-2026-12478. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as very critical has been found in Red Hat Enterprise Linux 6/7/8/9/10. This affects the function chown of the component gvfsd-admin. The manipulation leads to time-of-check time-of-use. This vulnerability is uniquely identified as CVE-2026-88924. Local access is required to approach this attack. No exploit exists.

A vulnerability labeled as very critical has been found in podman-container-tools Podman up to 5.8.7/6.1.2. This affects the function run of the component Checkpoint. Executing a manipulation of the argument io.podman.annotations.checkpoint.runtime.name can lead to sandbox issue. This vulnerability is handled as CVE-2026-94603. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability described as critical has been identified in meum Kirki Plugin up to 6.3.2 on WordPress. The impacted element is an unknown function of the component Import Endpoint. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2026-104734. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Hippooo Hippoo Mobile App Plugin up to 1.12.0 on WordPress and classified as problematic. This affects an unknown part. Such manipulation of the argument token_id leads to cross site scripting. This vulnerability is traded as CVE-2026-111601. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress. Affected is the function verifyOTP. The manipulation leads to time-of-check time-of-use. This vulnerability is documented as CVE-2026-110653. The attack can be initiated remotely. There is not any exploit available.

A vulnerability has been found in ThimPress LearnPress Plugin up to 4.4.10 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Guest Checkout. This manipulation of the argument quantity/order_comments causes cross site scripting. This vulnerability appears as CVE-2026-109208. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress. Affected by this vulnerability is the function steps__load_step of the component AJAX Endpoint. The manipulation of the argument customer[uuid] results in information disclosure. This vulnerability is reported as CVE-2026-111602. The attack can be launched remotely. No exploit exists.

A vulnerability described as problematic has been identified in wpazleen Post Export Import with Media Plugin up to 1.17.2 on WordPress. Affected is an unknown function. Executing a manipulation of the argument theme_slug can lead to path traversal. This vulnerability is tracked as CVE-2026-110268. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in wpdevteam xSpeed Cache Plugin up to 1.4.2 on WordPress and classified as problematic. This issue affects some unknown processing. Performing a manipulation of the argument content results in cross site scripting. This vulnerability is reported as CVE-2026-109985. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 and classified as critical. This affects the function atmel_aes_buff_init of the component crypto. The manipulation results in memory leak. This vulnerability was named CVE-2026-46019. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.0.3. Affected by this vulnerability is the function migrate_folio_move of the component mm. Executing a manipulation can lead to race condition. This vulnerability is handled as CVE-2026-46017. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 and classified as critical. Affected by this issue is the function parse_uac2_sample_rate_range of the component ALSA. The manipulation leads to infinite loop. This vulnerability is uniquely identified as CVE-2026-46018. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. This affects an unknown function of the component remoteproc. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-46016. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. Affected is the function sk_data_ready of the component tcp. Performing a manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-46015. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.