Vuldb Updates

A vulnerability identified as problematic has been detected in Linux Kernel up to 7.0.11. This vulnerability affects unknown code of the file drivers/usb/serial/mct_u232.c of the component MCT U232 Serial Driver. Performing a manipulation results in information disclosure. This vulnerability is identified as CVE-2026-63897. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.94/6.18.37/7.1.2. This vulnerability affects the function i2c_get_adapter of the component I2C Core. The manipulation results in use after free. This vulnerability is known as CVE-2026-53400. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.142/6.12.93/6.18.35/7.0.12. It has been declared as critical. The affected element is the function mvebu_pwm_suspend of the component gpio. The manipulation of the argument mvpwm results in null pointer dereference. This vulnerability is cataloged as CVE-2026-53237. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 7.0.9. This issue affects the function hid_post_reset of the component HID. The manipulation leads to deadlock. This vulnerability is documented as CVE-2026-53037. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 7.1-rc1. Affected by this issue is the function nvmet_tcp_release_queue_work of the component nvmet. Performing a manipulation of the argument async_event_work results in deadlock. This vulnerability is cataloged as CVE-2026-46304. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Red Hat Enterprise Linux 6/7/8/9/10. This issue affects some unknown processing of the component SoupServer. Such manipulation leads to http request smuggling. This vulnerability is listed as CVE-2026-103399. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Red Hat Enterprise Linux and classified as problematic. Affected is an unknown function of the component libsoup. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-66339. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. This affects an unknown function of the component SoupAuthManager. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-12547. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability has been found in Red Hat Linux 3.6.6 and classified as critical. This issue affects some unknown processing of the component WebSocket Frame Handler. This manipulation causes integer overflow. This vulnerability appears as CVE-2026-12478. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as very critical has been found in Red Hat Enterprise Linux 6/7/8/9/10. This affects the function chown of the component gvfsd-admin. The manipulation leads to time-of-check time-of-use. This vulnerability is uniquely identified as CVE-2026-88924. Local access is required to approach this attack. No exploit exists.

A vulnerability labeled as very critical has been found in podman-container-tools Podman up to 5.8.7/6.1.2. This affects the function run of the component Checkpoint. Executing a manipulation of the argument io.podman.annotations.checkpoint.runtime.name can lead to sandbox issue. This vulnerability is handled as CVE-2026-94603. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability described as critical has been identified in meum Kirki Plugin up to 6.3.2 on WordPress. The impacted element is an unknown function of the component Import Endpoint. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2026-104734. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Hippooo Hippoo Mobile App Plugin up to 1.12.0 on WordPress and classified as problematic. This affects an unknown part. Such manipulation of the argument token_id leads to cross site scripting. This vulnerability is traded as CVE-2026-111601. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress. Affected is the function verifyOTP. The manipulation leads to time-of-check time-of-use. This vulnerability is documented as CVE-2026-110653. The attack can be initiated remotely. There is not any exploit available.

A vulnerability has been found in ThimPress LearnPress Plugin up to 4.4.10 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Guest Checkout. This manipulation of the argument quantity/order_comments causes cross site scripting. This vulnerability appears as CVE-2026-109208. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress. Affected by this vulnerability is the function steps__load_step of the component AJAX Endpoint. The manipulation of the argument customer[uuid] results in information disclosure. This vulnerability is reported as CVE-2026-111602. The attack can be launched remotely. No exploit exists.

A vulnerability described as problematic has been identified in wpazleen Post Export Import with Media Plugin up to 1.17.2 on WordPress. Affected is an unknown function. Executing a manipulation of the argument theme_slug can lead to path traversal. This vulnerability is tracked as CVE-2026-110268. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in wpdevteam xSpeed Cache Plugin up to 1.4.2 on WordPress and classified as problematic. This issue affects some unknown processing. Performing a manipulation of the argument content results in cross site scripting. This vulnerability is reported as CVE-2026-109985. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 and classified as critical. This affects the function atmel_aes_buff_init of the component crypto. The manipulation results in memory leak. This vulnerability was named CVE-2026-46019. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.0.3. Affected by this vulnerability is the function migrate_folio_move of the component mm. Executing a manipulation can lead to race condition. This vulnerability is handled as CVE-2026-46017. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.