CVE-2026-1066
published 2026-01-17CVE-2026-1066: A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component…
PriorityP270high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
5.04%
91.2th percentile
A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kalcaddle | kodbox | — | — |
| kodcloud | kodbox | <= 1.61.10 | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.02.1LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-998w-jcr6-gwpq: A vulnerability was detected in kalcaddle kodbox up to 1
ghsa_unreviewed·2026-01-17
CVE-2026-1066 [MEDIUM] CWE-74 GHSA-998w-jcr6-gwpq: A vulnerability was detected in kalcaddle kodbox up to 1
A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Red Hat
kernel: iommu/amd: serialize sequence allocation under concurrent TLB invalidations
vendor_redhat·2026-05-06
CVE-2026-43220 CWE-1066 kernel: iommu/amd: serialize sequence allocation under concurrent TLB invalidations
kernel: iommu/amd: serialize sequence allocation under concurrent TLB invalidations
A flaw was found in the Linux kernel, specifically within the `iommu/amd` component responsible for managing memory access. This vulnerability arises from an issue in how commands are processed during concurrent memory invalidations, causing them to be queued out of sequence. This can lead to system instability and timeouts, potentially allowing an attacker to trigger a Denial of Service (DoS) condition, rendering the system unavailable.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-01-17
Published