First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-48178

HighCVSS 8.8/10Last modified Nov 10, 2026

Description

Out of bound access in PPC due to race condition in global variable access

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Samsung Semiconductor	Exynos 2200	< October 2026
Samsung Semiconductor	Exynos 2400	< October 2026
Samsung Semiconductor	Exynos 2500	< October 2026
Samsung Semiconductor	Exynos 2600	< October 2026

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Timeline

Published: Nov 5, 2026
Last modified: Nov 10, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-481797.5In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service CVE-2026-48188.1In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute so CVE-2026-481839.1Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions CVE-2026-481869.1Improper handling of messages before AS security activation can cause unexpected behavior CVE-2026-481875.7An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may le CVE-2026-481889.1An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injecti CVE-2026-481895.7An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to oth CVE-2026-48196.5In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.CVE-2026-481903.5An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the CVE-2026-481913.5An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules al CVE-2026-481925.4A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro 10.12 (All versions), Mendix Studio Pro 10.CVE-2026-481938.1Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

CVE-2026-48178: High severity, CVSS 8.8 | Vulnix