CVE Vulnerabilities - 2 March 2026

Red Hat Go Toolset for RHEL 8: Security Flaw in Go Packages

RHSA-2026:3489

7.5

Red Hat Linux Kernel Update Fixes Critical Security Flaw

RHSA-2026:3488

7.5

Go Language Security Update for Red Hat Platforms

RHSA-2026:3473

7.5

Go Programming Language Updated to Fix Security Flaw

RHSA-2026:3472

7.5

Red Hat Go Toolset for RHEL 8: Critical Security Update Needed

RHSA-2026:3470

7.5

Red Hat Go Toolset for RHEL 8: Critical Security Update Needed

RHSA-2026:3471

7.5

GoLang Software Updated to Fix Security Flaw

RHSA-2026:3469

7.5

Go Toolset Installed on RHEL 8 Exposes Sensitive Data

RHSA-2026:3468

7.5

Unsecured Modem Allows Rogue Base Station to Gain Elevated Access

CVE-2026-20434

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connec...

7.5

Lockscreen Bypass Possible on Some Devices

CVE-2025-48568

In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additio...

7.4

Red Hat Linux Kernel Security Update: Unauthorized Access Risk

RHSA-2026:3464

7.3

Red Hat Linux Kernel: Privilege Escalation Vulnerability

RHSA-2026:3463

7.3

Eosphoros-AI DB-GPT 0.7.5 Allows Remote Code Injection

CVE-2026-3409

A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFileLoader.exec_module of the fil...

6.9

Weak Wi-Fi Calling Configuration Puts Data at Risk

CVE-2025-47383

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE....

7.2

PHP File Inclusion Vulnerability in Personnel Property Equipment System

CVE-2026-26699

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php....

7.2

Chamilo Learning Management System: Malicious Command Execution

CVE-2025-50197

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/admin/sub_language_ajax.inc...

7.1

Chamilo Learning Management System: Malicious Database Modification

CVE-2025-50196

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinstan...

7.1

Chamilo Learning Management System: Malicious Code Execution

CVE-2025-50195

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.con...

7.1

Chamilo Learning Management System: Unrestricted Command Execution

CVE-2025-50194

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/cron/lang/check_parse_lang....

7.1

Chamilo Learning Management System: Malicious Database Upload

CVE-2025-50193

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /plugin/vchamilo/views/import.php...

7.1

Chamilo Learning Management System: SQL Injection in Hotpotatoes Script

CVE-2025-50191

Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via POST userFile with the /main/exercise/hot...

7.0

Chamilo Learning Management System SQL Injection Risk

CVE-2025-50188

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from ...

7.0

Chamilo Learning Management System: Unsecured Code Execution by Administrator

CVE-2024-47886

Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) w...

8.7

PCIe: Missing Bounds Check Triggers Local Privilege Escalation

CVE-2026-20416

In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ...

7.2

OpenClaw Canvas Tool Allows File Access with Invalid Path

GHSA-jq4x-98m3-ggq6

ZDI-CAN-29312: OpenClaw Canvas Path Traversal Information Disclosure Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Z...

7.1