Vuldb Updates

A vulnerability labeled as critical has been found in Fortinet FortiOS, FortiProxy and FortiPAM up to 7.6.4/7.4/7.2. This impacts an unknown function of the component HTTP Handler. Such manipulation leads to http response splitting. This vulnerability is uniquely identified as CVE-2025-62826. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic was found in Fortinet FortiAuthenticator up to 6.3.5/6.4.11/6.5.7/6.6.2. This affects an unknown part. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2025-53379. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in Fortinet FortiOS, FortiPAM and FortiProxy. This impacts an unknown function of the component HTTP Response Handler. Performing a manipulation results in http response splitting. This vulnerability is reported as CVE-2025-62675. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability marked as problematic has been reported in apolloconfig Apollo up to 2.4.x. This vulnerability affects unknown code of the component Portal. This manipulation causes permission issues. This vulnerability is tracked as CVE-2025-32781. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in stoatchat up to 0.8.2. This vulnerability affects unknown code of the component Query Messages Route. Such manipulation of the argument limit leads to resource consumption. This vulnerability is traded as CVE-2025-71377. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in stoatchat up to 0.8.1. It has been classified as problematic. The affected element is an unknown function of the component Webhook Fetch Endpoint. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2025-71388. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in Rockwell Automation CompactLogix 5380 Recovery Image Compact GuardLogix 5380 Recovery Image CompactLogix 5480 Recovery Image ControlLogix 5580 Recovery Image GuardLogix 5580 Recovery Image 1.072. Affected is an unknown function. Executing a manipulation can lead to buffer overflow. This vulnerability appears as CVE-2025-11698. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Linux Kernel up to 6.18.33/7.0.10 and classified as very critical. This vulnerability affects the function iwl_mld_remove_link of the component iwlwifi. Such manipulation leads to use after free. This vulnerability is documented as CVE-2026-64212. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.174/6.6.141/6.12.91/6.18.33/7.0.10. It has been rated as problematic. The affected element is the function arch_irq_work_raise of the component powerpc time. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-64214. An attack has to be approached locally. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical was found in Linux Kernel up to 7.0.10. Affected is the function call_srcu/synchronize_srcu/synchronize_srcu_expedited of the component srcu. Executing a manipulation can lead to race condition. This vulnerability is tracked as CVE-2026-64211. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.10. This impacts the function mlx5e_trigger_irq of the file drivers/net/ethernet/mellanox/mlx5/core/en_rx.c of the component xsk. Performing a manipulation of the argument pc results in improper locking. This vulnerability is identified as CVE-2026-64210. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.33/7.0.10. Affected by this issue is some unknown functionality of the component Crypto/Krb5/Rxrpc. The manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2026-64208. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel and classified as problematic. This affects an unknown part of the component qmp-usbc. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-64209. The attack needs to be launched locally. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability was found in Linux Kernel and classified as very critical. The impacted element is an unknown function of the component nexthop. Such manipulation of the argument weight/resvd1 leads to allocation of resources. This vulnerability is traded as CVE-2024-14040. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability categorized as critical has been discovered in Xen. Impacted is an unknown function of the component XenCons. Executing a manipulation can lead to permission issues. This vulnerability is tracked as CVE-2025-27462. The attack is restricted to local execution. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability identified as critical has been detected in Xen. The affected element is an unknown function of the component XenIface. The manipulation leads to permission issues. This vulnerability is listed as CVE-2025-27463. The attack must be carried out locally. There is no available exploit. Applying a patch is the recommended action to fix this issue.

A vulnerability labeled as critical has been found in Xen. The impacted element is an unknown function of the component XenBus. The manipulation results in permission issues. This vulnerability is cataloged as CVE-2025-27464. The attack must be initiated from a local position. There is no exploit available. It is best practice to apply a patch to resolve this issue.

A vulnerability identified as problematic has been detected in Xen. The impacted element is an unknown function of the component XAPI. This manipulation causes improper input validation. This vulnerability is registered as CVE-2025-58146. The attack requires access to the local network. No exploit is available. Applying a patch is the recommended action to fix this issue.

A vulnerability marked as critical has been reported in Xen. The affected element is an unknown function of the component varstored. This manipulation causes time-of-check time-of-use. This vulnerability is tracked as CVE-2025-58151. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

A vulnerability labeled as problematic has been found in GitLab up to 18.11.6/19.0.3/19.1.1. This affects an unknown part of the component Git Reference Name Resolver. The manipulation results in incorrectly-resolved name. This vulnerability is identified as CVE-2025-12506. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.