Vuldb Updates

A vulnerability has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. The affected element is the function geneve_changelink of the component geneve. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2026-68142. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. The impacted element is the function pep_get_sb of the component phonet. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-68144. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.150/6.12.100/6.18.41/7.1.5/7.2-rc4. It has been classified as critical. This affects an unknown function of the component gve. Performing a manipulation results in allocation of resources. This vulnerability was named CVE-2026-68129. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This affects the function message_receive of the file net/iucv/af_iucv.c of the component iucv. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-68140. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This vulnerability affects the function afiucv_hs_callback_syn of the component af_iucv. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-68141. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This issue affects the function sl_realloc_bufs/slip_receive_buf of the component slip. Executing a manipulation can lead to out-of-bounds write. This vulnerability is registered as CVE-2026-68143. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. Affected is the function fscrypt_get_devices of the component fscrypt. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-2026-68147. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. Impacted is the function find_or_insert_direct_key of the component fscrypt. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2026-68148. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability labeled as problematic has been found in Apple watchOS up to 9.0.2. Affected is an unknown function of the component AppleMobileFileIntegrity. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2022-42825. The attack requires local access. There is no available exploit. The affected component should be upgraded.

A vulnerability has been found in Apache CloudStack up to 4.20.3.0/4.22.1.0 and classified as very critical. This affects an unknown function of the component UI. The manipulation leads to encoding error. This vulnerability is documented as CVE-2026-61398. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability categorized as problematic has been discovered in Apache CloudStack up to 4.20.3.0/4.22.1.0. This affects an unknown part of the component OAuth2 Authentication Plugin. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2026-61397. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical has been found in Apache CloudStack up to 4.20.3.0/4.22.1.0. The impacted element is an unknown function of the component Two-factor Authentication. Performing a manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-59799. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Apache CloudStack up to 4.20.3.0/4.22.1.0. The impacted element is an unknown function of the component AsyncJob. Executing a manipulation can lead to cleartext storage of sensitive information. This vulnerability is registered as CVE-2026-59657. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Apache CloudStack up to 4.20.3.0/4.22.1.0. This issue affects some unknown processing of the component Webhook Module. The manipulation results in server-side request forgery. This vulnerability was named CVE-2026-59085. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in Apache CloudStack up to 4.20.3.0/4.22.1.0. Impacted is an unknown function of the component OAuth authentication plugin. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-59655. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Apache CloudStack up to 4.20.3.0/4.22.1.0. The affected element is an unknown function of the component LDAP authentication plugin. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-59780. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Apache CloudStack up to 4.20.3.0/4.22.1.0. This affects an unknown part of the component KVM Agent. The manipulation leads to server-side request forgery. This vulnerability is referenced as CVE-2026-50112. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as very critical has been identified in Apache CloudStack up to 4.20.3.0/4.22.1.0. This vulnerability affects the function deleteUserData/linkUserDataToTemplate/resetUserDataForVirtualMachine/deployVirtualMachine/updateVirtualMachine/deleteCniConfiguration of the component Userdata Reference APIs. The manipulation results in missing authentication. This vulnerability is identified as CVE-2026-50222. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in PTC Windchill PDMLink and FlexPLM and classified as critical. The impacted element is an unknown function. Such manipulation leads to server-side request forgery. This vulnerability is referenced as CVE-2026-77646. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as very critical has been detected in Apache CloudStack up to 4.20.3.0/4.22.1.0. This vulnerability affects unknown code of the component NAS backup provider plugin. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2026-47359. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.