CVEinfo

The Extended CVE DB collects official CVE entries and enriches them with additional datapoints and extended analysis. The associated VulDB entries contain additional technical details for in-depth analysis.

2026

CVEDescriptionSubmissionModerationEntry
CVE-2026-97163Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5 ...09/26/202609/26/2026410742
CVE-2026-97162Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, ...09/26/202609/26/2026410745
CVE-2026-97161Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extensi ...09/26/202609/26/2026410744
CVE-2026-97160Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin exte ...09/26/202609/26/2026410743
CVE-2026-94132Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action featur ...09/26/202609/26/2026410740
CVE-2026-94131Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterp ...09/26/202609/26/2026410741
CVE-2026-100720Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the ...09/26/202609/26/2026410661
CVE-2026-100719Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtectio ...09/26/202609/26/2026410697
CVE-2026-100718Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSende ...09/26/202609/26/2026410696
CVE-2026-100717froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl ...09/26/202609/26/2026410664
CVE-2026-100716Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-expo ...09/26/202609/26/2026410663
CVE-2026-100715Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP ...09/26/202609/26/2026410665
CVE-2026-100714Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: u ...09/26/202609/26/2026410662
CVE-2026-100713Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SS ...09/26/202609/26/2026410668
CVE-2026-100712froxlor through 2.3.10 disables a user's two-factor authentication immediately upon an unauthent ...09/26/202609/26/2026410672
CVE-2026-100711froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA tru ...09/26/202609/26/2026410722
CVE-2026-100710Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(), Dom ...09/26/202609/26/2026410693
CVE-2026-100709Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens) ...09/26/202609/26/2026410719
CVE-2026-100708Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key ...09/26/202609/26/2026410692
CVE-2026-100707Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of name ...09/26/202609/26/2026410711
CVE-2026-100706kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall url ...09/26/202609/26/2026410710
CVE-2026-100705Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist ...09/26/202609/26/2026410695
CVE-2026-100704Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatin ...09/26/202609/26/2026410690
CVE-2026-100703Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environm ...09/26/202609/26/2026410708
CVE-2026-100702Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such ...09/26/202609/26/2026410721
CVE-2026-100701Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by th ...09/26/202609/26/2026410707
CVE-2026-100700nodemailer before 10.0.6 contains a denial of service vulnerability in the addressparser free-te ...09/26/202609/26/2026410720
CVE-2026-100699Nodemailer is a Node.js email-sending library. In versions >= 9.1.0 and < 10.0.9, the address pa ...09/26/202609/26/2026410732
CVE-2026-100698Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port() funct ...09/26/202609/26/2026410658
CVE-2026-100697Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickho ...09/26/202609/26/2026410670
CVE-2026-100696Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vul ...09/26/202609/26/2026410660
CVE-2026-100695Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() dat ...09/26/202609/26/2026410671
CVE-2026-100694Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped ...09/26/202609/26/2026410737
CVE-2026-100693Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive validation flaw in the secu ...09/26/202609/26/2026410729
CVE-2026-100692Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink ...09/26/202609/26/2026410727
CVE-2026-100691Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the sy ...09/26/202609/26/2026410733
CVE-2026-100690Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js ...09/26/202609/26/2026410726
CVE-2026-100689GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules fi ...09/26/202609/26/2026410666
CVE-2026-100688Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in th ...09/26/202609/26/2026410725
CVE-2026-100687Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasti ...09/26/202609/26/2026410667
CVE-2026-100686Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/g ...09/26/202609/26/2026410717
CVE-2026-100685Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, al ...09/26/202609/26/2026410718
CVE-2026-100684Budibase versions 3.41.0 before 3.45.0 contain an authentication bypass in the OIDC/SSO login pa ...09/26/202609/26/2026410709
CVE-2026-100683Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/b ...09/26/202609/26/2026410691
CVE-2026-100682Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon upl ...09/26/202609/26/2026410677
CVE-2026-100681Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential ex ...09/26/202609/26/2026410669
CVE-2026-100680Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAP ...09/26/202609/26/2026410734
CVE-2026-100679stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, all ...09/26/202609/26/2026410706
CVE-2026-100678stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, a ...09/26/202609/26/2026410689
CVE-2026-100677stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that ...09/26/202609/26/2026410705
CVE-2026-100676January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 ...09/26/202609/26/2026410694
CVE-2026-100675stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgemen ...09/26/202609/26/2026410715
CVE-2026-100674stoatchat before 0.15.5 fails to revalidate usernames after Unicode sanitization, allowing attac ...09/26/202609/26/2026410703
CVE-2026-100673The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 rend ...09/26/202609/26/2026410678
CVE-2026-100672The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers ...09/26/202609/26/2026410738
CVE-2026-100671Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1.7 ...09/26/202609/26/2026410731
CVE-2026-100670Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and ac ...09/26/202609/26/2026410735
CVE-2026-100669Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are ma ...09/26/202609/26/2026410659
CVE-2026-100668Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The `array` filter (and its ide ...09/26/202609/26/2026410730
CVE-2026-100667grav-plugin-login (the Grav CMS Login plugin) versions >= 3.8.7 and < 3.9.7 allow the two-factor ...09/26/202609/26/2026410736
CVE-2026-100666Netty's HttpServerCodec (io.netty:netty-codec-http) in versions 4.2.0.Final through 4.2.16.Final ...09/26/202609/26/2026410716
CVE-2026-100665Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification ...09/26/202609/26/2026410704
CVE-2026-100664Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.2.Final through 4.2.17.Final buil ...09/26/202609/26/2026410688
CVE-2026-100663Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.2.Final through 4.2.17.Final does not ...09/26/202609/26/2026410687
CVE-2026-100662Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final cont ...09/26/202609/26/2026410675
CVE-2026-100661Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final cont ...09/26/202609/26/2026410702
CVE-2026-100660Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains ...09/26/202609/26/2026410686
CVE-2026-100659Netty's HTTP/3 codec (io.netty:netty-codec-http3) in versions 4.2.0.Final through 4.2.17.Final d ...09/26/202609/26/2026410685
CVE-2026-100658Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue in WebSocketServerE ...09/26/202609/26/2026410684
CVE-2026-100657Netty's STOMP codec (io.netty:netty-codec-stomp) contains a ByteBuf leak in StompSubframeDecoder ...09/26/202609/26/2026410701
CVE-2026-100656Netty (io.netty:netty-codec-http) contains an unbounded per-connection queue growth flaw in Http ...09/26/202609/26/2026410683
CVE-2026-100655Netty (io.netty:netty-codec-http) versions up to and including 4.1.137.Final and from 4.2.0.Fina ...09/26/202609/26/2026410724
CVE-2026-100654vLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST /v1/comp ...09/26/202609/26/2026410700
CVE-2026-100653vLLM is an inference and serving engine for large language models. In versions from 0.22.1 throu ...09/26/202609/26/2026410676
CVE-2026-100652vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in ...09/26/202609/26/2026410699
CVE-2026-100651vLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated servin ...09/26/202609/26/2026410682
CVE-2026-100650vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its d ...09/26/202609/26/2026410674
CVE-2026-100649vLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder allo ...09/26/202609/26/2026410680
CVE-2026-100648vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat aud ...09/26/202609/26/2026410679
CVE-2026-100647vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt paramete ...09/26/202609/26/2026410714
CVE-2026-100646SiYuan is a self-hosted personal knowledge management system. In versions up to and including 3. ...09/26/202609/26/2026410673
CVE-2026-100645SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in galler ...09/26/202609/26/2026410739
CVE-2026-100644SiYuan before v3.8.4 contains a SQL injection vulnerability in the graph query endpoint where th ...09/26/202609/26/2026410712
CVE-2026-100643SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in texta ...09/26/202609/26/2026410728
CVE-2026-100642SiYuan versions from v2.1.0 before v3.8.4 contain a cross-site request forgery vulnerability in ...09/26/202609/26/2026410723
CVE-2026-100641SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it ...09/26/202609/26/2026410698
CVE-2026-100640SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allow ...09/26/202609/26/2026410713
CVE-2026-100639SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button mark ...09/26/202609/26/2026410681
CVE-2026-100638SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endp ...09/26/202609/26/2026410647
CVE-2026-100637SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoin ...09/26/202609/26/2026410646
CVE-2026-100636SiYuan versions before v3.8.4 contain a path traversal vulnerability in the exportBrowserHTML en ...09/26/202609/26/2026410655
CVE-2026-100635SiYuan before v3.8.4 contains an authentication bypass vulnerability in the publish service wher ...09/26/202609/26/2026410651
CVE-2026-100634SiYuan before v3.8.4 does not validate the sender or restrict recipients in the 'siyuan-send-win ...09/26/202609/26/2026410648
CVE-2026-100633SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, t ...09/26/202609/26/2026410641
CVE-2026-100632Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in ...09/26/202609/26/2026410645
CVE-2026-100631Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from ...09/26/202609/26/2026410639
CVE-2026-100630AVideo contains a stored cross-site scripting vulnerability in the video trailer1 field rendered ...09/26/202609/26/2026410657
CVE-2026-100629Capgo (capgo.app backend) before 12.127.5 contains an authorization flaw in the PATCH /private/r ...09/26/202609/26/2026410649
CVE-2026-100628capgo.app before 12.128.12 fails to enforce an organization's API key expiration policy when cre ...09/26/202609/26/2026410654
CVE-2026-100627Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization fl ...09/26/202609/26/2026410640
CVE-2026-100625Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/bu ...09/26/202609/26/2026410644
CVE-2026-100624Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/ ...09/26/202609/26/2026410653
CVE-2026-100623Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase ...09/26/202609/26/2026410652
CVE-2026-100622capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts ...09/26/202609/26/2026410650
CVE-2026-100621Capgo (capgo.app) contains an incomplete access-control/content-lock enforcement issue affecting ...09/26/202609/26/2026410643
CVE-2026-100620Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service ac ...09/26/202609/26/2026410638
CVE-2026-100626capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /ap ...09/26/202609/26/2026410656
CVE-2026-94130Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < ...09/26/202609/26/2026410642
CVE-2026-100619Capgo (capgo.app) blocks direct user inserts into the public.manifest table with a RESTRICTIVE r ...09/26/202609/26/2026410637
CVE-2026-100618Capgo (capgo.app) is affected by an authorization flaw in the app icon update path. The PUT /app ...09/26/202609/26/2026410634
CVE-2026-100617Cap-go capgo.app fails to validate that principals in channel_permission_overrides belong to the ...09/26/202609/26/2026410633
CVE-2026-100616capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, ...09/26/202609/26/2026410623
CVE-2026-100615Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, all ...09/26/202609/26/2026410632
CVE-2026-100614Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning w ...09/26/202609/26/2026410631
CVE-2026-100613capgo.app is an over-the-air (OTA) update platform for Capacitor apps. In all versions up to and ...09/26/202609/26/2026410635
CVE-2026-100612Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the pub ...09/26/202609/26/2026410618
CVE-2026-100611Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the apikey_manag ...09/26/202609/26/2026410624
CVE-2026-100610Flowise through 3.1.4 exposes GET /api/v1/upsert-history/:id and PATCH /api/v1/upsert-history wi ...09/26/202609/26/2026410629
CVE-2026-100609Flowise (npm packages `flowise` and `flowise-components`) through 3.1.4 looks up credentials by ...09/26/202609/26/2026410630
CVE-2026-100608Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the ser ...09/26/202609/26/2026410621
CVE-2026-100607Flowise through 3.1.4 resolves SSO and local-password users solely by email without storing prov ...09/26/202609/26/2026410636
CVE-2026-100606Flowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication byp ...09/26/202609/26/2026410628
CVE-2026-100605Flowise through 3.1.4 contains missing route-level RBAC checks on chat message endpoints that al ...09/26/202609/26/2026410626
CVE-2026-100604ClawHub (openclaw/clawhub) contains an incorrect authorization vulnerability in the ClawHub appl ...09/26/202609/26/2026410625
CVE-2026-100603ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill report moderation fl ...09/26/202609/26/2026410627
CVE-2026-100602ClawHub (openclaw/clawhub application/backend) contains a missing authorization check in the cha ...09/26/202609/26/2026410619
CVE-2026-100601ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerabil ...09/26/202609/26/2026410622
CVE-2026-100600ClawHub (the openclaw/clawhub application/backend) does not bind anonymous HTTP API requests to ...09/26/202609/26/2026410620
CVE-2026-100315A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300 ...09/26/202609/26/2026410443
CVE-2026-100314A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dad ...09/26/202609/26/2026410442
CVE-2026-100313A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf33 ...09/26/202609/26/2026410441
CVE-2026-100312A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bf ...09/26/202609/26/2026410440
CVE-2026-98163In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of d ...09/26/202609/26/2026410613
CVE-2026-100311A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf33 ...09/26/202609/26/2026410439
CVE-2026-18143The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload ...09/26/202609/26/2026410611
CVE-2026-96533The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL bef ...09/26/202609/26/2026410608
CVE-2026-96532The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownershi ...09/26/202609/26/2026410607
CVE-2026-96531The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video ...09/26/202609/26/2026410606
CVE-2026-96526The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level auth ...09/26/202609/26/2026410598
CVE-2026-96525The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an ownership or suff ...09/26/202609/26/2026410605
CVE-2026-96524The MCP Server for WordPress WordPress plugin before 1.8.2 does not correctly verify the WordPre ...09/26/202609/26/2026410604
CVE-2026-92411The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name ta ...09/26/202609/26/2026410603
CVE-2026-89237The Bluff Post WordPress plugin through 1.1.1 does not sanitise and escape parameters before usi ...09/26/202609/26/2026410602
CVE-2026-85081The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, Fil ...09/26/202609/26/2026410601
CVE-2026-84097The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored throug ...09/26/202609/26/2026410600
CVE-2026-84096The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on ...09/26/202609/26/2026410612
CVE-2026-84095The wp-review-slider-pro WordPress plugin before 12.7.12 does not perform a capability check on ...09/26/202609/26/2026410610
CVE-2026-19708The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downl ...09/26/202609/26/2026410599
CVE-2026-16591The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its cate ...09/26/202609/26/2026410609
CVE-2026-11871The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility c ...09/26/202609/26/2026410597
CVE-2026-100599OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to G ...09/26/202609/26/2026410582
CVE-2026-100598OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approval reactions. In ...09/26/202609/26/2026410591
CVE-2026-100597OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use r ...09/26/202609/26/2026410592
CVE-2026-100596OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP confi ...09/26/202609/26/2026410590
CVE-2026-100595OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the diagnosti ...09/26/202609/26/2026410589
CVE-2026-100594OpenClaw versions before 2026.7.1 contain an authorization bypass vulnerability in the /export-t ...09/26/202609/26/2026410594
CVE-2026-100593OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documented owner-only req ...09/26/202609/26/2026410587
CVE-2026-100592OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persi ...09/26/202609/26/2026410586
CVE-2026-100591OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Mem ...09/26/202609/26/2026410585
CVE-2026-100590OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set comman ...09/26/202609/26/2026410588
CVE-2026-100589OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool tha ...09/26/202609/26/2026410584
CVE-2026-100588OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administrator scope requi ...09/26/202609/26/2026410580
CVE-2026-100587OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex com ...09/26/202609/26/2026410593
CVE-2026-100586OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating nativ ...09/26/202609/26/2026410583
CVE-2026-100585OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization ...09/26/202609/26/2026410581
CVE-2026-100584OpenClaw is an npm-distributed agent runtime. In versions >= 2026.2.26 and < 2026.7.1, PowerShel ...09/26/202609/26/2026410577
CVE-2026-100583OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild ...09/26/202609/26/2026410567
CVE-2026-100582OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/g ...09/26/202609/26/2026410568
CVE-2026-100581OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group User ...09/26/202609/26/2026410595
CVE-2026-100580OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the mod ...09/26/202609/26/2026410566
CVE-2026-100579OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester provenance in mes ...09/26/202609/26/2026410573
CVE-2026-100578OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only infrastructure to ...09/26/202609/26/2026410572
CVE-2026-100577OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allow ...09/26/202609/26/2026410576
CVE-2026-100576OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser ...09/26/202609/26/2026410579
CVE-2026-100575OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-pers ...09/26/202609/26/2026410571
CVE-2026-100574OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnera ...09/26/202609/26/2026410578
CVE-2026-100573OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopb ...09/26/202609/26/2026410570
CVE-2026-100572OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Cha ...09/26/202609/26/2026410569
CVE-2026-100571OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook inva ...09/26/202609/26/2026410565
CVE-2026-100570OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted worksp ...09/26/202609/26/2026410562
CVE-2026-100569OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspa ...09/26/202609/26/2026410564
CVE-2026-100568OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs ...09/26/202609/26/2026410563
CVE-2026-100567OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 ...09/26/202609/26/2026410561
CVE-2026-100566OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allow ...09/26/202609/26/2026410575
CVE-2026-100564OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participa ...09/26/202609/26/2026410574
CVE-2026-100563OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that sp ...09/26/202609/26/2026410553
CVE-2026-100562OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions. ...09/26/202609/26/2026410552
CVE-2026-100561OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypas ...09/26/202609/26/2026410551
CVE-2026-100560OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Alwa ...09/26/202609/26/2026410550
CVE-2026-100559OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines ...09/26/202609/26/2026410559
CVE-2026-100558OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway lis ...09/26/202609/26/2026410549
CVE-2026-100557OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool di ...09/26/202609/26/2026410558
CVE-2026-100556OpenClaw (npm package openclaw) versions >= 2026.5.2 and command to reset the shared group sessi ...09/26/202609/26/2026410544
CVE-2026-100555OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Syno ...09/26/202609/26/2026410560
CVE-2026-100554OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invali ...09/26/202609/26/2026410557
CVE-2026-100553OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a del ...09/26/202609/26/2026410548
CVE-2026-100552OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool polic ...09/26/202609/26/2026410547
CVE-2026-100551OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in t ...09/26/202609/26/2026410542
CVE-2026-100550OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Micro ...09/26/202609/26/2026410541
CVE-2026-100549OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachme ...09/26/202609/26/2026410556
CVE-2026-100548OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a credential expo ...09/26/202609/26/2026410543
CVE-2026-100547OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026 ...09/26/202609/26/2026410554
CVE-2026-100546OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition i ...09/26/202609/26/2026410546
CVE-2026-100545OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectly enforces sender tool policies duri ...09/26/202609/26/2026410545
CVE-2026-15273The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_ ...09/26/202609/26/2026410555
CVE-2026-100544openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classi ...09/26/202609/26/2026410526
CVE-2026-100543OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over ...09/26/202609/26/2026410525
CVE-2026-100542OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listing ...09/26/202609/26/2026410524
CVE-2026-100541OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 ...09/26/202609/26/2026410540
CVE-2026-100540OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabl ...09/26/202609/26/2026410523
CVE-2026-100539OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an ope ...09/26/202609/26/2026410536
CVE-2026-100538OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global ...09/26/202609/26/2026410539
CVE-2026-100537OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's eff ...09/26/202609/26/2026410535
CVE-2026-100536OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attac ...09/26/202609/26/2026410534
CVE-2026-100535OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating r ...09/26/202609/26/2026410533
CVE-2026-100534OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskF ...09/26/202609/26/2026410538
CVE-2026-100533OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspa ...09/26/202609/26/2026410532
CVE-2026-100532@openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic cha ...09/26/202609/26/2026410521
CVE-2026-100531The @openclaw/slack npm package before 2026.8.1 contains an authorization flaw in its Slack down ...09/26/202609/26/2026410531
CVE-2026-100530OpenClaw versions before 2026.8.1 fail to bind working directory context to reusable exec approv ...09/26/202609/26/2026410537
CVE-2026-100529OpenClaw versions before 2026.8.1 contain an authorization scope widening vulnerability in file- ...09/26/202609/26/2026410530
CVE-2026-100528OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to ...09/26/202609/26/2026410522
CVE-2026-100527OpenClaw before 2026.8.2 contains a denial of service vulnerability in the Browser extension rel ...09/26/202609/26/2026410529
CVE-2026-100526OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could los ...09/26/202609/26/2026410528
CVE-2026-100525The OpenClaw Prometheus diagnostics plugin (@openclaw/diagnostics-prometheus) before version 202 ...09/26/202609/26/2026410527
CVE-2026-75432An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/ ...09/26/202609/26/2026408719
CVE-2026-100524Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions mana ...09/26/202609/26/2026410500
CVE-2026-100523Cotonti through 1.0.0 contains an open redirect vulnerability in message.php that base64-decodes ...09/26/202609/26/2026410494
CVE-2026-100522Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php whe ...09/26/202609/26/2026410496
CVE-2026-100521Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plug ...09/26/202609/26/2026410501
CVE-2026-100520Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/u ...09/26/202609/26/2026410495
CVE-2026-100505Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringMan ...09/26/202609/26/2026410499
CVE-2026-100504Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the de ...09/26/202609/26/2026410498
CVE-2026-100503Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's F ...09/26/202609/26/2026410497
CVE-2026-96795Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/ ...09/26/202609/26/2026410491
CVE-2026-86066Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /atten ...09/26/202609/26/2026410492
CVE-2026-57449Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy ...09/26/202609/26/2026410493
CVE-2026-71483Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-fi ...09/26/202609/26/2026410490
CVE-2026-63432Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handle ...09/26/202609/26/2026410488
CVE-2026-100502Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpo ...09/26/202609/26/2026410489
CVE-2026-100501Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulner ...09/26/202609/26/2026410486
CVE-2026-100419gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree ch ...09/26/202609/26/2026410485
CVE-2026-100418Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /a ...09/26/202609/26/2026410487
CVE-2026-63431Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py doe ...09/26/202609/26/2026410484
CVE-2026-9655This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-9652This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-88003InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410483
CVE-2026-92842The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode s ...09/25/202609/25/2026410482
CVE-2026-91768The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte ...09/25/202609/25/2026410481
CVE-2026-7800This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-7799This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-53973This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-53972This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-53971This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-49118This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-49117This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45241This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45240This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45239This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45238This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45237This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45236This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45235This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-45234This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-100383Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vuln ...09/25/202609/25/2026410480
CVE-2026-100382Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulne ...09/25/202609/25/2026410478
CVE-2026-100381Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vuln ...09/25/202609/25/2026410479
CVE-2026-91767php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passe ...09/25/202609/25/2026410470
CVE-2026-10758Esri LERC is an open-source image or raster format which supports rapid encoding and decoding fo ...09/25/202609/25/2026410472
CVE-2026-100379Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation ...09/25/202609/25/2026410475
CVE-2026-100378Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allo ...09/25/202609/25/2026410474
CVE-2026-100376Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vuln ...09/25/202609/25/2026410477
CVE-2026-91769PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and ...09/25/202609/25/2026410471
CVE-2026-100380Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vuln ...09/25/202609/25/2026410476
CVE-2026-91766When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, ...09/25/202609/25/2026410469
CVE-2026-91765cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limi ...09/25/202609/25/2026410466
CVE-2026-57443SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0. ...09/25/202609/25/2026410467
CVE-2026-100377Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation ...09/25/202609/25/2026410468
CVE-2026-100417RustDesk before 1.5.0 on Windows fails to enforce the one-way file transfer option against peer ...09/25/202609/25/2026410463
CVE-2026-100369CliInvoke and its formerly named `AlastairLundy.CliInvoke` package are .NET libraries for invoki ...09/25/202609/25/2026410464
CVE-2026-9313This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-96879Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia ...09/25/202609/25/2026410462
CVE-2026-6103phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow c ...09/25/202609/25/2026410460
CVE-2026-57864This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-17545On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PR ...09/25/202609/25/2026410456
CVE-2026-100391MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy ...09/25/202609/25/2026410461
CVE-2026-100390Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr fiel ...09/25/202609/25/2026410459
CVE-2026-100389GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP c ...09/25/202609/25/2026410455
CVE-2026-100388RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming f ...09/25/202609/25/2026410458
CVE-2026-100387pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch ...09/25/202609/25/2026410457
CVE-2026-100368CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializatio ...09/25/202609/25/2026410454
CVE-2026-93682When the HTTP stream wrapper follows a redirect and the response carries a Location header with ...09/25/202609/25/2026410453
CVE-2026-57861This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-53990This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-96878Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...09/25/202609/25/2026410452
CVE-2026-96877Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...09/25/202609/25/2026410451
CVE-2026-100373OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValida ...09/25/202609/25/2026410449
CVE-2026-100372ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template ed ...09/25/202609/25/2026410448
CVE-2026-100310GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXT ...09/25/202609/25/2026410450
CVE-2026-100208Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to ex ...09/25/202609/25/2026410447
CVE-2026-96876Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...09/25/202609/25/2026410446
CVE-2026-96875Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...09/25/202609/25/2026410445
CVE-2026-5267Ciena Navigator Network Control Suite (NCS) contains an information exposure vulnerability in an ...09/25/202609/25/2026410444
CVE-2026-97895A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part o ...09/25/202609/25/2026409907
CVE-2026-97064X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 ena ...09/25/202609/25/2026410431
CVE-2026-97063X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated ...09/25/202609/25/2026410436
CVE-2026-97896A vulnerability was identified in krayin laravel-crm up to 2.2.5. This vulnerability affects the ...09/25/202609/25/2026409908
CVE-2026-55217GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a l ...09/25/202609/25/2026410435
CVE-2026-55214GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authentica ...09/25/202609/25/2026410438
CVE-2026-53629GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an ...09/25/202609/25/2026410430
CVE-2026-53626GLPI is a free asset and IT management software package. From 11.0.5 until 11.0.8, under certain ...09/25/202609/25/2026410428
CVE-2026-53625GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a t ...09/25/202609/25/2026410434
CVE-2026-53610GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, an attacker c ...09/25/202609/25/2026410437
CVE-2026-49470GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, the time-base ...09/25/202609/25/2026410426
CVE-2026-48482GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a form admini ...09/25/202609/25/2026410429
CVE-2026-47679GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, a ...09/25/202609/25/2026410433
CVE-2026-97897A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some u ...09/25/202609/25/2026409909
CVE-2026-100306TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforci ...09/25/202609/25/2026410425
CVE-2026-100305TDuck survey form through 6.0 fails to enforce form fill-in restrictions on the authenticated su ...09/25/202609/25/2026410424
CVE-2026-100304TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermi ...09/25/202609/25/2026410427
CVE-2026-100303TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints ...09/25/202609/25/2026410432
CVE-2026-97060X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing ...09/25/202609/25/2026410423
CVE-2026-84465Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when Zammad ...09/25/202609/25/2026410421
CVE-2026-84464Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's Ext ...09/25/202609/25/2026410420
CVE-2026-84463Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with ...09/25/202609/25/2026410419
CVE-2026-84461Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-fact ...09/25/202609/25/2026410410
CVE-2026-84460Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, any authenti ...09/25/202609/25/2026410418
CVE-2026-84458Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Au ...09/25/202609/25/2026410406
CVE-2026-63216Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized ...09/25/202609/25/2026410417
CVE-2026-63208Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Micro ...09/25/202609/25/2026410404
CVE-2026-63207Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, an authe ...09/25/202609/25/2026410415
CVE-2026-63206Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTM ...09/25/202609/25/2026410408
CVE-2026-63205Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creatin ...09/25/202609/25/2026410405
CVE-2026-63204Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authentic ...09/25/202609/25/2026410407
CVE-2026-63006Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, attacker-con ...09/25/202609/25/2026410416
CVE-2026-61855Zammad is a web based open source helpdesk/customer support system. In 7.0.3 and 7.1.1, under ce ...09/25/202609/25/2026410414
CVE-2026-53628GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an ...09/25/202609/25/2026410413
CVE-2026-53627GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privile ...09/25/202609/25/2026410409
CVE-2026-49469GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an ...09/25/202609/25/2026410412
CVE-2026-45801GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an ...09/25/202609/25/2026410411
CVE-2026-100192X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manage ...09/25/202609/25/2026410422
CVE-2026-97886A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf33 ...09/25/202609/25/2026409905
CVE-2026-91841A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged u ...09/25/202609/25/2026410403
CVE-2026-91840A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to ...09/25/202609/25/2026410401
CVE-2026-91839A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The n ...09/25/202609/25/2026410402
CVE-2026-97884A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300 ...09/25/202609/25/2026409903
CVE-2026-84462Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security f ...09/25/202609/25/2026410399
CVE-2026-97885A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c349 ...09/25/202609/25/2026409904
CVE-2026-91838A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivi ...09/25/202609/25/2026410400
CVE-2026-65828Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy d ...09/25/202609/25/2026410398
CVE-2026-97883A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dad ...09/25/202609/25/2026409902
CVE-2026-97882A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf33 ...09/25/202609/25/2026409901
CVE-2026-93366Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticat ...09/25/202609/25/2026410395
CVE-2026-61525Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's ...09/25/202609/25/2026410388
CVE-2026-56735Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, za ...09/25/202609/25/2026410385
CVE-2026-56734Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during feder ...09/25/202609/25/2026410394
CVE-2026-56733Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, th ...09/25/202609/25/2026410387
CVE-2026-56732Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerabilit ...09/25/202609/25/2026410393
CVE-2026-56731Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privil ...09/25/202609/25/2026410392
CVE-2026-56730Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, an authoriza ...09/25/202609/25/2026410391
CVE-2026-56728Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken acc ...09/25/202609/25/2026410390
CVE-2026-56727Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary In Z ...09/25/202609/25/2026410386
CVE-2026-56726Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnera ...09/25/202609/25/2026410389
CVE-2026-56725Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An u ...09/25/202609/25/2026410396
CVE-2026-97878A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function ...09/25/202609/25/2026409899
CVE-2026-95835Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allo ...09/25/202609/25/2026410380
CVE-2026-95834Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before ...09/25/202609/25/2026410381
CVE-2026-93363The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access cont ...09/25/202609/25/2026410382
CVE-2026-56723Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer w ...09/25/202609/25/2026410379
CVE-2026-100237Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...09/25/202609/25/2026410383
CVE-2026-93365Bludit CMS through 3.22.0 contains a missing authorization vulnerability that allows authenticat ...09/25/202609/25/2026410378
CVE-2026-93364Bludit CMS through 3.22.0 contains a mass assignment vulnerability that allows authenticated use ...09/25/202609/25/2026410376
CVE-2026-56729Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, when multipl ...09/25/202609/25/2026410377
CVE-2026-80432Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47 ...09/25/202609/25/2026410361
CVE-2026-67415RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel param ...09/25/202609/25/2026410371
CVE-2026-67413RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, ...09/25/202609/25/2026410367
CVE-2026-67411RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, ...09/25/202609/25/2026410366
CVE-2026-67410RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Se ...09/25/202609/25/2026410384
CVE-2026-67408RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream ...09/25/202609/25/2026410360
CVE-2026-67407RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4. ...09/25/202609/25/2026410365
CVE-2026-67406RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, ...09/25/202609/25/2026410369
CVE-2026-67227RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4 ...09/25/202609/25/2026410370
CVE-2026-67226RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7, Admi ...09/25/202609/25/2026410363
CVE-2026-61837RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, ...09/25/202609/25/2026410359
CVE-2026-18320Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SV ...09/25/202609/25/2026410372
CVE-2026-18312Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata wi ...09/25/202609/25/2026410374
CVE-2026-18311Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sa ...09/25/202609/25/2026410373
CVE-2026-97879A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element ...09/25/202609/25/2026409900
CVE-2026-94445A malicious txtar could escape the intended execution context and force arbitrary writes to the ...09/25/202609/25/2026410357
CVE-2026-67421RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, ...09/25/202609/25/2026410364
CVE-2026-67420RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, ...09/25/202609/25/2026410362
CVE-2026-67419RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind ...09/25/202609/25/2026410368
CVE-2026-56724Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An i ...09/25/202609/25/2026410358
CVE-2026-97877A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the fu ...09/25/202609/25/2026409898
CVE-2026-97871A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the funct ...09/25/202609/25/2026409887
CVE-2026-91837A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unp ...09/25/202609/25/2026408016
CVE-2026-89032BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the sema ...09/25/202609/25/2026410345
CVE-2026-67412RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, a ...09/25/202609/25/2026410349
CVE-2026-67409RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9, 4.1.14, 4.0.23, an ...09/25/202609/25/2026410352
CVE-2026-67242RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger ...09/25/202609/25/2026410344
CVE-2026-67241RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 managem ...09/25/202609/25/2026410343
CVE-2026-67239RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 an ...09/25/202609/25/2026410353
CVE-2026-67237RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 ...09/25/202609/25/2026410351
CVE-2026-67234RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, get_auth_mechani ...09/25/202609/25/2026410342
CVE-2026-67230RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2 ...09/25/202609/25/2026410397
CVE-2026-67225RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2 ...09/25/202609/25/2026410355
CVE-2026-67223RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, ...09/25/202609/25/2026410350
CVE-2026-67222RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2 ...09/25/202609/25/2026410354
CVE-2026-66078RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 an ...09/25/202609/25/2026410348
CVE-2026-66073RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 an ...09/25/202609/25/2026410347
CVE-2026-66071RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 an ...09/25/202609/25/2026410346
CVE-2026-100248The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended valu ...09/25/202609/25/2026410356
CVE-2026-92161FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other ...09/25/202609/25/2026410340
CVE-2026-44642Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, ch ...09/25/202609/25/2026410339
CVE-2026-42324Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, ad ...09/25/202609/25/2026410338
CVE-2026-42322Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, ad ...09/25/202609/25/2026410337
CVE-2026-67236RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POS ...09/25/202609/25/2026410341
CVE-2026-97469PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeated ...09/25/202609/25/2026410333
CVE-2026-50547InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410332
CVE-2026-49850InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410336
CVE-2026-42323Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, ad ...09/25/202609/25/2026410330
CVE-2026-33639InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410335
CVE-2026-100230Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is use ...09/25/202609/25/2026410334
CVE-2026-62262Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and ...09/25/202609/25/2026410331
CVE-2026-85293InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410327
CVE-2026-85292InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410321
CVE-2026-85291InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410326
CVE-2026-85290InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410325
CVE-2026-85289InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410328
CVE-2026-85274InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410329
CVE-2026-54790InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410324
CVE-2026-39372InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410323
CVE-2026-39353InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymen ...09/25/202609/25/2026410322
CVE-2026-97869A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulne ...09/25/202609/25/2026409886
CVE-2026-97868A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue ...09/25/202609/25/2026409884
CVE-2026-96874Improper neutralization of input during web page generation ('cross-site scripting') vulnerabili ...09/25/202609/25/2026410320
CVE-2026-96812Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor p ...09/25/202609/25/2026410319
CVE-2026-93030FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to a ...09/25/202609/25/2026410318
CVE-2026-60101This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-60100This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-60099This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-60098This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-60097This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-60096This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.09/25/202609/25/2026
 
CVE-2026-97866A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an un ...09/25/202609/25/2026409883
CVE-2026-93306IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through ...09/25/202609/25/2026410315
CVE-2026-88389Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawStr ...09/25/202609/25/2026410316
CVE-2026-84882IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Ora ...09/25/202609/25/2026410313
CVE-2026-84862IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC j ...09/25/202609/25/2026410314
CVE-2026-97222A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook ...09/25/202609/25/2026410268
CVE-2026-93641An unauthenticated sender can forge a share notification that triggers stored XSS when a signed- ...09/25/202609/25/2026410272
CVE-2026-85750Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image up ...09/25/202609/25/2026410274
CVE-2026-85542IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bu ...09/25/202609/25/2026410267
CVE-2026-100190The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-sit ...09/25/202609/25/2026410273
CVE-2026-93647An unauthenticated calendar sender can place active markup in a COUNTER message's RFC From addre ...09/25/202609/25/2026410271
CVE-2026-93643When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to ...09/25/202609/25/2026410269
CVE-2026-93642An unauthenticated sender can forge a share notification that triggers stored XSS when a signed- ...09/25/202609/25/2026410270
CVE-2026-85029IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, ...09/25/202609/25/2026410264
CVE-2026-84893IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authent ...09/25/202609/25/2026410266
CVE-2026-84884IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible ...09/25/202609/25/2026410265
CVE-2026-93834A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the ...09/25/202609/25/2026410242
CVE-2026-100187The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic t ...09/25/202609/25/2026410241
CVE-2026-100177The AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient aut ...09/25/202609/25/2026410243
CVE-2026-97865A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function ...09/25/202609/25/2026409882
CVE-2026-80431Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 ...09/25/202609/25/2026410217
CVE-2026-100176The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting (XSS) ...09/25/202609/25/2026410219
CVE-2026-100174The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cro ...09/25/202609/25/2026410218
CVE-2026-98162In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connect ...09/25/202609/25/2026410192
CVE-2026-98161In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH ...09/25/202609/25/2026410191
CVE-2026-98160In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mism ...09/25/202609/25/2026410198
CVE-2026-97864A vulnerability has been found in GibbonEdu Gibbon up to 30.0.01. The affected element is the fu ...09/25/202609/25/2026409878
CVE-2026-80430Improper Link Resolution Before File Access in the drag source staging path of the drag and drop ...09/25/202609/25/2026410202
CVE-2026-100172The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulne ...09/25/202609/25/2026410203
CVE-2026-100079In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister ...09/25/202609/25/2026410190
CVE-2026-100078In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass cor ...09/25/202609/25/2026410197
CVE-2026-100077In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before r ...09/25/202609/25/2026410189
CVE-2026-100076In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit ...09/25/202609/25/2026410188
CVE-2026-100075In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw ...09/25/202609/25/2026410196
CVE-2026-100074In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field ...09/25/202609/25/2026410194
CVE-2026-100073In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overfl ...09/25/202609/25/2026410187
CVE-2026-100072In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus ...09/25/202609/25/2026410201
CVE-2026-100071In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes ...09/25/202609/25/2026410195
CVE-2026-100070In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewin ...09/25/202609/25/2026410193
CVE-2026-95832Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colo ...09/25/202609/25/2026410168
CVE-2026-88421Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2 ...09/25/202609/25/2026410170
CVE-2026-79153Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability ...09/25/202609/25/2026410171
CVE-2026-88420A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of AP ...09/25/202609/25/2026410146
CVE-2026-78902Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to exec ...09/25/202609/25/2026410147
CVE-2026-52622An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, ...09/25/202609/25/2026410144
CVE-2026-51773An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacke ...09/25/202609/25/2026410143
CVE-2026-51772A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Gla ...09/25/202609/25/2026410145
CVE-2026-97622** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-62062. Reason: This candidat ...09/25/202609/25/2026
 
CVE-2026-92164Streamlink is a CLI utility which pipes video streams from various services into a video player. ...09/25/202609/25/2026408996
CVE-2026-98159In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate ...09/25/202609/25/2026409995
CVE-2026-98158In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored ...09/25/202609/25/2026409981
CVE-2026-98157In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrt ...09/25/202609/25/2026409994
CVE-2026-98156In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API ...09/25/202609/25/2026409977
CVE-2026-98155In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potentia ...09/25/202609/25/2026409987
CVE-2026-98154In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup ...09/25/202609/25/2026409993
CVE-2026-98153In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP ...09/25/202609/25/2026409992
CVE-2026-98152In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak w ...09/25/202609/25/2026409978
CVE-2026-98151In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOL ...09/25/202609/25/2026409991
CVE-2026-98150In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validatio ...09/25/202609/25/2026409986
CVE-2026-98149In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update i ...09/25/202609/25/2026409985
CVE-2026-98148In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATI ...09/25/202609/25/2026409983
CVE-2026-98147In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthrea ...09/25/202609/25/2026409990
CVE-2026-98146In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __coun ...09/25/202609/25/2026409989
CVE-2026-98145In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a comm ...09/25/202609/25/2026409984
CVE-2026-98144In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chain ...09/25/202609/25/2026409982
CVE-2026-98143In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read th ...09/25/202609/25/2026409980
CVE-2026-98142In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BA ...09/25/202609/25/2026409979
CVE-2026-98141In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse inde ...09/25/202609/25/2026409988
CVE-2026-98140In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in ...09/25/202609/25/2026409996
CVE-2026-98099In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_ ...09/25/202609/25/2026410306
CVE-2026-98098In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc ...09/25/202609/25/2026410312
CVE-2026-98097In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad b ...09/25/202609/25/2026410305
CVE-2026-98096In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network he ...09/25/202609/25/2026410311
CVE-2026-98095In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacke ...09/25/202609/25/2026410307
CVE-2026-98094In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_l ...09/25/202609/25/2026410317
CVE-2026-98093In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mc ...09/25/202609/25/2026410310
CVE-2026-98092In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory le ...09/25/202609/25/2026410308
CVE-2026-98091In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout ...09/25/202609/25/2026410303
CVE-2026-98090In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device ...09/25/202609/25/2026410309
CVE-2026-98089In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitiali ...09/25/202609/25/2026410304
CVE-2026-98088In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of- ...09/25/202609/25/2026410288
CVE-2026-98087In the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-di ...09/25/202609/25/2026410301
CVE-2026-98086In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: do not touch lega ...09/25/202609/25/2026410287
CVE-2026-98085In the Linux kernel, the following vulnerability has been resolved: bpf: backtrack_insn(): Handl ...09/25/202609/25/2026410286
CVE-2026-98084In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't ...09/25/202609/25/2026410222
CVE-2026-98083In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-a ...09/25/202609/25/2026410285
CVE-2026-98082In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc ...09/25/202609/25/2026410284
CVE-2026-98081In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active ...09/25/202609/25/2026410283
CVE-2026-98080In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc ro ...09/25/202609/25/2026410001
CVE-2026-98079In the Linux kernel, the following vulnerability has been resolved: btrfs: zstd: fix lost wakeup ...09/25/202609/25/2026410281
CVE-2026-98078In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence ...09/25/202609/25/2026410080
CVE-2026-98077In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: ...09/25/202609/25/2026410211
CVE-2026-98076In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix use-afte ...09/25/202609/25/2026410282
CVE-2026-98075In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPF_PSEUDO_FUNC ...09/25/202609/25/2026410280
CVE-2026-98074In the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curr_a ...09/25/202609/25/2026410300
CVE-2026-98073In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altn ...09/25/202609/25/2026409997
CVE-2026-98072In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper( ...09/25/202609/25/2026410081
CVE-2026-98071In the Linux kernel, the following vulnerability has been resolved: net/rds: clear cp_flags bits ...09/25/202609/25/2026409972
CVE-2026-98070In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT ...09/25/202609/25/2026410079
CVE-2026-98069In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpat ...09/25/202609/25/2026409971
CVE-2026-98068In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let rds_conn_ ...09/25/202609/25/2026410212
CVE-2026-98067In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling d ...09/25/202609/25/2026410078
CVE-2026-98066In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential d ...09/25/202609/25/2026410210
CVE-2026-98065In the Linux kernel, the following vulnerability has been resolved: bpf: Reject key-less BTF for ...09/25/202609/25/2026410077
CVE-2026-98064In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref when ...09/25/202609/25/2026410209
CVE-2026-98063In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref in b ...09/25/202609/25/2026410279
CVE-2026-98062In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint ...09/25/202609/25/2026410278
CVE-2026-98061In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls direc ...09/25/202609/25/2026410208
CVE-2026-98060In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock o ...09/25/202609/25/2026409999
CVE-2026-98059In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait ...09/25/202609/25/2026410277
CVE-2026-98058In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as ...09/25/202609/25/2026410207
CVE-2026-98057In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nr ...09/25/202609/25/2026410276
CVE-2026-98056In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespace ...09/25/202609/25/2026410275
CVE-2026-98055In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Clean up t ...09/25/202609/25/2026410263
CVE-2026-98054In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbala ...09/25/202609/25/2026410206
CVE-2026-98053In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor a ...09/25/202609/25/2026410205
CVE-2026-98052In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->las ...09/25/202609/25/2026410204
CVE-2026-98051In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix tx_spb_ring ...09/25/202609/25/2026410262
CVE-2026-98050In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ptp: Fix nap ...09/25/202609/25/2026410299
CVE-2026-98049In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result ...09/25/202609/25/2026410076
CVE-2026-98048In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpf_fastc ...09/25/202609/25/2026410261
CVE-2026-98047In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames f ...09/25/202609/25/2026410075
CVE-2026-98046In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_na ...09/25/202609/25/2026410260
CVE-2026-98045In the Linux kernel, the following vulnerability has been resolved: bpf: Mark faultable stack he ...09/25/202609/25/2026410259
CVE-2026-98044In the Linux kernel, the following vulnerability has been resolved: bpf: Reject legacy packet lo ...09/25/202609/25/2026410186
CVE-2026-98043In the Linux kernel, the following vulnerability has been resolved: bpf: Don't infer non-NULL fr ...09/25/202609/25/2026410258
CVE-2026-98042In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scala ...09/25/202609/25/2026410257
CVE-2026-98041In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 poi ...09/25/202609/25/2026410256
CVE-2026-98040In the Linux kernel, the following vulnerability has been resolved: bpf: Mark the zero register ...09/25/202609/25/2026410255
CVE-2026-98039In the Linux kernel, the following vulnerability has been resolved: bpf: Require MEM_PERCPU for ...09/25/202609/25/2026410055
CVE-2026-98038In the Linux kernel, the following vulnerability has been resolved: bpf: Keep refcount_acquire n ...09/25/202609/25/2026410298
CVE-2026-98037In the Linux kernel, the following vulnerability has been resolved: bpf: Reject untrusted alloca ...09/25/202609/25/2026410297
CVE-2026-98036In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve special fields ...09/25/202609/25/2026410185
CVE-2026-98035In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields w ...09/25/202609/25/2026410054
CVE-2026-98034In the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores p ...09/25/202609/25/2026410053
CVE-2026-98033In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map iden ...09/25/202609/25/2026410254
CVE-2026-98032In the Linux kernel, the following vulnerability has been resolved: tracing: Fix subbuf resize r ...09/25/202609/25/2026410184
CVE-2026-98031In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack i ...09/25/202609/25/2026410183
CVE-2026-98030In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: bound the ...09/25/202609/25/2026410253
CVE-2026-98029In the Linux kernel, the following vulnerability has been resolved: eth: nfp: bound the ntuple r ...09/25/202609/25/2026410252
CVE-2026-98028In the Linux kernel, the following vulnerability has been resolved: eth: nfp: drop the replaced ...09/25/202609/25/2026410251
CVE-2026-98027In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound t ...09/25/202609/25/2026410296
CVE-2026-98026In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: properly ...09/25/202609/25/2026410250
CVE-2026-98025In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310_eth: drop ...09/25/202609/25/2026410249
CVE-2026-98024In the Linux kernel, the following vulnerability has been resolved: s390/ism: folio_put() after ...09/25/202609/25/2026410248
CVE-2026-98023In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb en ...09/25/202609/25/2026410182
CVE-2026-98022In the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16 ...09/25/202609/25/2026410052
CVE-2026-98021In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx_que ...09/25/202609/25/2026410180
CVE-2026-98020In the Linux kernel, the following vulnerability has been resolved: pds_core: fix cmd_regs acces ...09/25/202609/25/2026410247
CVE-2026-98019In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argume ...09/25/202609/25/2026410295
CVE-2026-98018In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize pr ...09/25/202609/25/2026410246
CVE-2026-98017In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freei ...09/25/202609/25/2026409976
CVE-2026-98016In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-fre ...09/25/202609/25/2026410245
CVE-2026-98015In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use- ...09/25/202609/25/2026410302
CVE-2026-98014In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent ...09/25/202609/25/2026410294
CVE-2026-98013In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: clamp qua ...09/25/202609/25/2026410293
CVE-2026-98012In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantu ...09/25/202609/25/2026410292
CVE-2026-98011In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantu ...09/25/202609/25/2026410291
CVE-2026-98010In the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantu ...09/25/202609/25/2026410290
CVE-2026-98009In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: clamp quantu ...09/25/202609/25/2026410289
CVE-2026-98008In the Linux kernel, the following vulnerability has been resolved: net: macb: fix NULL pointer ...09/25/202609/25/2026410244
CVE-2026-98007In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpf_l ...09/25/202609/25/2026409974
CVE-2026-98006In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Decoupling ep1_ ...09/25/202609/25/2026410181
CVE-2026-98005In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inode_share c ...09/25/202609/25/2026410179
CVE-2026-98004In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Serialize comma ...09/25/202609/25/2026410178
CVE-2026-98003In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate ...09/25/202609/25/2026410177
CVE-2026-98002In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective e ...09/25/202609/25/2026410176
CVE-2026-98001In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Make sure c ...09/25/202609/25/2026410240
CVE-2026-98000In the Linux kernel, the following vulnerability has been resolved: hwmon: Fix potential UAF in ...09/25/202609/25/2026410175
CVE-2026-97998In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: co ...09/25/202609/25/2026410051
CVE-2026-97997In the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descr ...09/25/202609/25/2026410174
CVE-2026-97996In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free i ...09/25/202609/25/2026410173
CVE-2026-97995In the Linux kernel, the following vulnerability has been resolved: virtio_console: do not free ...09/25/202609/25/2026410238
CVE-2026-97994In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: reject VRING_NUM ...09/25/202609/25/2026410172
CVE-2026-97993In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: don't install th ...09/25/202609/25/2026410160
CVE-2026-97992In the Linux kernel, the following vulnerability has been resolved: vhost-vdpa: protect config_c ...09/25/202609/25/2026410050
CVE-2026-97991In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: reject out-of- ...09/25/202609/25/2026410237
CVE-2026-97990In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_net: check TX pull ...09/25/202609/25/2026410236
CVE-2026-97989In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue al ...09/25/202609/25/2026410235
CVE-2026-97988In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring acce ...09/25/202609/25/2026410234
CVE-2026-97987In the Linux kernel, the following vulnerability has been resolved: virtio_input: reset device i ...09/25/202609/25/2026410233
CVE-2026-97986In the Linux kernel, the following vulnerability has been resolved: virtio_input: stop callbacks ...09/25/202609/25/2026410232
CVE-2026-97985In the Linux kernel, the following vulnerability has been resolved: af_unix: Update last skb mar ...09/25/202609/25/2026410231
CVE-2026-97984In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length ov ...09/25/202609/25/2026410049
CVE-2026-97983In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl r ...09/25/202609/25/2026410230
CVE-2026-97982In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix ...09/25/202609/25/2026410229
CVE-2026-97981In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Coun ...09/25/202609/25/2026410228
CVE-2026-97980In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer ...09/25/202609/25/2026410159
CVE-2026-97979In the Linux kernel, the following vulnerability has been resolved: ice: add missing xa_destroy ...09/25/202609/25/2026410158
CVE-2026-97978In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference ...09/25/202609/25/2026410048
CVE-2026-97977In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of ...09/25/202609/25/2026410157
CVE-2026-97976In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: val ...09/25/202609/25/2026410156
CVE-2026-97975In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix NU ...09/25/202609/25/2026410155
CVE-2026-97974In the Linux kernel, the following vulnerability has been resolved: ipv6: null-check fib6_node b ...09/25/202609/25/2026410027
CVE-2026-97973In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phyli ...09/25/202609/25/2026410227
CVE-2026-97972In the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" ch ...09/25/202609/25/2026410226
CVE-2026-97971In the Linux kernel, the following vulnerability has been resolved: nstree: check listing permis ...09/25/202609/25/2026410154
CVE-2026-97970In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Avoid div ...09/25/202609/25/2026410239
CVE-2026-97969In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix clock ...09/25/202609/25/2026410225
CVE-2026-97968In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Create ...09/25/202609/25/2026410224
CVE-2026-97967In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Remove ...09/25/202609/25/2026410223
CVE-2026-97966In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: reset HTB sche ...09/25/202609/25/2026410221
CVE-2026-97965In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize _md in vxl ...09/25/202609/25/2026410153
CVE-2026-97964In the Linux kernel, the following vulnerability has been resolved: ppp_synctty: ensure a writea ...09/25/202609/25/2026410152
CVE-2026-97963In the Linux kernel, the following vulnerability has been resolved: net: stmmac: initialize ptp_ ...09/25/202609/25/2026410220
CVE-2026-97962In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor ...09/25/202609/25/2026410216
CVE-2026-97961In the Linux kernel, the following vulnerability has been resolved: perf/core: Allow list_del du ...09/25/202609/25/2026410151
CVE-2026-97960In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drai ...09/25/202609/25/2026410215
CVE-2026-97959In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: free e ...09/25/202609/25/2026410150
CVE-2026-97958In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Don't re ...09/25/202609/25/2026410026
CVE-2026-97957In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix mailbox segm ...09/25/202609/25/2026410214
CVE-2026-97956In the Linux kernel, the following vulnerability has been resolved: net: net_failover: Fix the d ...09/25/202609/25/2026410149
CVE-2026-97955In the Linux kernel, the following vulnerability has been resolved: net: mana: restore the XDP p ...09/25/202609/25/2026410213
CVE-2026-97954In the Linux kernel, the following vulnerability has been resolved: net/rds: fix tcp stream corr ...09/25/202609/25/2026410148
CVE-2026-97953In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descript ...09/25/202609/25/2026410134
CVE-2026-97952In the Linux kernel, the following vulnerability has been resolved: sunvdc: unmap LDC cookies wh ...09/25/202609/25/2026410135
CVE-2026-97951In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix han ...09/25/202609/25/2026410133
CVE-2026-97950In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink ta ...09/25/202609/25/2026410200
CVE-2026-97949In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry ...09/25/202609/25/2026410199
CVE-2026-97948In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Fix recursive l ...09/25/202609/25/2026410132
CVE-2026-97947In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix potential ...09/25/202609/25/2026410025
CVE-2026-97946In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix PCI device ...09/25/202609/25/2026410166
CVE-2026-97945In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix user-space data ...09/25/202609/25/2026409998
CVE-2026-97944In the Linux kernel, the following vulnerability has been resolved: x86/cfi: Fix FineIBT hash of ...09/25/202609/25/2026410162
CVE-2026-97943In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm ...09/25/202609/25/2026410024
CVE-2026-97942In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude te ...09/25/202609/25/2026409975
CVE-2026-97941In the Linux kernel, the following vulnerability has been resolved: mm/slab: take n->list_lock i ...09/25/202609/25/2026410131
CVE-2026-97940In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on ...09/25/202609/25/2026410130
CVE-2026-97939In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast tabl ...09/25/202609/25/2026410128
CVE-2026-97938In the Linux kernel, the following vulnerability has been resolved: reboot: fix cad_pid use-afte ...09/25/202609/25/2026410161
CVE-2026-97937In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize fun ...09/25/202609/25/2026409973
CVE-2026-97936In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corrupti ...09/25/202609/25/2026410129
CVE-2026-97935In the Linux kernel, the following vulnerability has been resolved: tracing: Set the trace clock ...09/25/202609/25/2026410127
CVE-2026-97934In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory corrupti ...09/25/202609/25/2026410167
CVE-2026-97933In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array re ...09/25/202609/25/2026410165
CVE-2026-97932In the Linux kernel, the following vulnerability has been resolved: tracing: Don't dereference t ...09/25/202609/25/2026410163
CVE-2026-97931In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write ...09/25/202609/25/2026410164
CVE-2026-97930In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: fix in04_las ...09/25/202609/25/2026410126
CVE-2026-97929In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB ...09/25/202609/25/2026410107
CVE-2026-97928In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 ...09/25/202609/25/2026410023
CVE-2026-97927In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry ...09/25/202609/25/2026410022
CVE-2026-97926In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group ...09/25/202609/25/2026410142
CVE-2026-97925In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockev ...09/25/202609/25/2026410108
CVE-2026-97924In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't d ...09/25/202609/25/2026410106
CVE-2026-97923In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the ...09/25/202609/25/2026410104
CVE-2026-97922In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var ...09/25/202609/25/2026410137
CVE-2026-97921In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the ...09/25/202609/25/2026410105
CVE-2026-97920In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry coun ...09/25/202609/25/2026410138
CVE-2026-97919In the Linux kernel, the following vulnerability has been resolved: tracing: Take the reference ...09/25/202609/25/2026410141
CVE-2026-97918In the Linux kernel, the following vulnerability has been resolved: tracing: Undo the registrati ...09/25/202609/25/2026410136
CVE-2026-97917In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full bu ...09/25/202609/25/2026410140
CVE-2026-97916In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate firmwar ...09/25/202609/25/2026410139
CVE-2026-97915In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware l ...09/25/202609/25/2026410083
CVE-2026-97914In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosu_jo ...09/25/202609/25/2026410115
CVE-2026-97913In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd st ...09/25/202609/25/2026410123
CVE-2026-97912In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM s ...09/25/202609/25/2026410124
CVE-2026-97911In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM r ...09/25/202609/25/2026410122
CVE-2026-97910In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compres ...09/25/202609/25/2026410125
CVE-2026-97909In the Linux kernel, the following vulnerability has been resolved: ASoC: sti: initialize IRQ lo ...09/25/202609/25/2026410121
CVE-2026-97908In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btqcomsmd: destro ...09/25/202609/25/2026410114
CVE-2026-97907In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Don't leak ...09/25/202609/25/2026410120
CVE-2026-97906In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer over ...09/25/202609/25/2026410119
CVE-2026-97905In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize pol ...09/25/202609/25/2026410118
CVE-2026-97904In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy r ...09/25/202609/25/2026410117
CVE-2026-97903In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to th ...09/25/202609/25/2026410084
CVE-2026-97902In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for ...09/25/202609/25/2026410113
CVE-2026-97901In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module ...09/25/202609/25/2026410112
CVE-2026-97900In the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contend ...09/25/202609/25/2026410116
CVE-2026-97899In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in ...09/25/202609/25/2026410111
CVE-2026-97621In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: f ...09/25/202609/25/2026410110
CVE-2026-97620In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 ...09/25/202609/25/2026410082
CVE-2026-97619In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: end write accou ...09/25/202609/25/2026410109
CVE-2026-97618In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overcons ...09/25/202609/25/2026410101
CVE-2026-97617In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_di ...09/25/202609/25/2026410102
CVE-2026-97616In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release ...09/25/202609/25/2026410100
CVE-2026-97615In the Linux kernel, the following vulnerability has been resolved: net: bridge: use option bits ...09/25/202609/25/2026410099
CVE-2026-97614In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_brcm: legacy F ...09/25/202609/25/2026410090
CVE-2026-97613In the Linux kernel, the following vulnerability has been resolved: net: mana: Reserve extra CQ ...09/25/202609/25/2026410098
CVE-2026-97612In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_proto ...09/25/202609/25/2026410000
CVE-2026-97611In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-af ...09/25/202609/25/2026410088
CVE-2026-97610In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized ret ...09/25/202609/25/2026410097
CVE-2026-97609In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: preven ...09/25/202609/25/2026410087
CVE-2026-97608In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: unregiste ...09/25/202609/25/2026410086
CVE-2026-97607In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on u ...09/25/202609/25/2026410096
CVE-2026-97606In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak ...09/25/202609/25/2026410085
CVE-2026-97605In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoder ...09/25/202609/25/2026410095
CVE-2026-97604In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb: defer cleanup un ...09/25/202609/25/2026410094
CVE-2026-97603In the Linux kernel, the following vulnerability has been resolved: idpf: disable DIM work befor ...09/25/202609/25/2026410093
CVE-2026-97602In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queu ...09/25/202609/25/2026410103
CVE-2026-97601In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NUL ...09/25/202609/25/2026410092
CVE-2026-97600In the Linux kernel, the following vulnerability has been resolved: ieee802154: cc2520: fix FIFO ...09/25/202609/25/2026410091
CVE-2026-97599In the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize ...09/25/202609/25/2026410089
CVE-2026-97598In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic t ...09/25/202609/25/2026410073
CVE-2026-97597In the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplica ...09/25/202609/25/2026410062
CVE-2026-97596In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states ...09/25/202609/25/2026410072
CVE-2026-97595In the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-fre ...09/25/202609/25/2026410074
CVE-2026-97594In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free ...09/25/202609/25/2026410060
CVE-2026-97593In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL derefer ...09/25/202609/25/2026410071
CVE-2026-97592In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scr ...09/25/202609/25/2026410070
CVE-2026-97591In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of ...09/25/202609/25/2026410069
CVE-2026-97590In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scr ...09/25/202609/25/2026410068
CVE-2026-97589In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong retur ...09/25/202609/25/2026410067
CVE-2026-97588In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EI ...09/25/202609/25/2026410066
CVE-2026-97587In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store availabl ...09/25/202609/25/2026410061
CVE-2026-97586In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing kunmap in a ...09/25/202609/25/2026410065
CVE-2026-97585In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of dir ...09/25/202609/25/2026410064
CVE-2026-97584In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in c ...09/25/202609/25/2026410063
CVE-2026-97583In the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app da ...09/25/202609/25/2026410059
CVE-2026-97582In the Linux kernel, the following vulnerability has been resolved: hwmon: (gpio-fan) Fix use-af ...09/25/202609/25/2026410058
CVE-2026-97581In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: ...09/25/202609/25/2026410057
CVE-2026-97580In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC ti ...09/25/202609/25/2026410056
CVE-2026-97579In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bou ...09/25/202609/25/2026410045
CVE-2026-97578In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip ...09/25/202609/25/2026410037
CVE-2026-97577In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip ...09/25/202609/25/2026410032
CVE-2026-97576In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate ...09/25/202609/25/2026410044
CVE-2026-97575In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate ...09/25/202609/25/2026410036
CVE-2026-97574In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Don't free the live ...09/25/202609/25/2026410043
CVE-2026-97573In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle buffer alloc ...09/25/202609/25/2026410042
CVE-2026-97572In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate RX ring i ...09/25/202609/25/2026410035
CVE-2026-97571In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate TPA buffe ...09/25/202609/25/2026410034
CVE-2026-97570In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Bound SW TPA IDs to ...09/25/202609/25/2026410033
CVE-2026-97569In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Prevent queue stop ...09/25/202609/25/2026410041
CVE-2026-97568In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember ...09/25/202609/25/2026410040
CVE-2026-97567In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between ...09/25/202609/25/2026410031
CVE-2026-97566In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pend ...09/25/202609/25/2026410047
CVE-2026-97565In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short RE ...09/25/202609/25/2026410039
CVE-2026-97564In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspac ...09/25/202609/25/2026410030
CVE-2026-97563In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-b ...09/25/202609/25/2026410029
CVE-2026-97562In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superbl ...09/25/202609/25/2026410038
CVE-2026-97561In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/ ...09/25/202609/25/2026410046
CVE-2026-97560In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OO ...09/25/202609/25/2026410028
CVE-2026-97559In the Linux kernel, the following vulnerability has been resolved: smb: client: fail DACL rewri ...09/25/202609/25/2026410002
CVE-2026-97558In the Linux kernel, the following vulnerability has been resolved: smb: client: fix cifsFileInf ...09/25/202609/25/2026410020
CVE-2026-97557In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking r ...09/25/202609/25/2026410006
CVE-2026-97556In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking r ...09/25/202609/25/2026410019
CVE-2026-97555In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overfl ...09/25/202609/25/2026410018
CVE-2026-97554In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uni ...09/25/202609/25/2026410017
CVE-2026-97553In the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when ...09/25/202609/25/2026410016
CVE-2026-97552In the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfs ...09/25/202609/25/2026410015
CVE-2026-97551In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args->total ...09/25/202609/25/2026410014
CVE-2026-97550In the Linux kernel, the following vulnerability has been resolved: xfs: fix unit conversions in ...09/25/202609/25/2026410013
CVE-2026-97549In the Linux kernel, the following vulnerability has been resolved: xfs: fix under-reservation o ...09/25/202609/25/2026410005
CVE-2026-97548In the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and rtre ...09/25/202609/25/2026410003
CVE-2026-97547In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range refl ...09/25/202609/25/2026410004
CVE-2026-97546In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on z ...09/25/202609/25/2026410012
CVE-2026-97545In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak new_bp if xf ...09/25/202609/25/2026410011
CVE-2026-97544In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak dqacct if rh ...09/25/202609/25/2026410010
CVE-2026-97543In the Linux kernel, the following vulnerability has been resolved: xfs: destroy seen inode bitm ...09/25/202609/25/2026410009
CVE-2026-97542In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap erro ...09/25/202609/25/2026410008
CVE-2026-97541In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: don't store ...09/25/202609/25/2026410007
CVE-2026-27867An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this ...09/25/202609/25/2026410021
CVE-2026-98139In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfull ...09/25/202609/25/2026409969
CVE-2026-98138In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume ...09/25/202609/25/2026409968
CVE-2026-98137In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio ...09/25/202609/25/2026409961
CVE-2026-98136In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table w ...09/25/202609/25/2026409967
CVE-2026-98135In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors ...09/25/202609/25/2026409966
CVE-2026-98134In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): pr ...09/25/202609/25/2026409960
CVE-2026-98133In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untou ...09/25/202609/25/2026409965
CVE-2026-98132In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-de ...09/25/202609/25/2026409959
CVE-2026-98131In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping ...09/25/202609/25/2026409958
CVE-2026-98130In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in S ...09/25/202609/25/2026409957
CVE-2026-98129In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL point ...09/25/202609/25/2026409964
CVE-2026-98128In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target dev ...09/25/202609/25/2026409963
CVE-2026-98127In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF ...09/25/202609/25/2026409956
CVE-2026-98126In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF ...09/25/202609/25/2026409954
CVE-2026-98125In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page c ...09/25/202609/25/2026409953
CVE-2026-98124In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscac ...09/25/202609/25/2026409952
CVE-2026-98123In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from u ...09/25/202609/25/2026409955
CVE-2026-98122In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-fr ...09/25/202609/25/2026409951
CVE-2026-98121In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL ...09/25/202609/25/2026409962
CVE-2026-97875Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making i ...09/25/202609/25/2026409970
CVE-2026-98120In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak F ...09/25/202609/25/2026409947
CVE-2026-98119In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered writ ...09/25/202609/25/2026409939
CVE-2026-98118In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchro ...09/25/202609/25/2026409949
CVE-2026-98117In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UA ...09/25/202609/25/2026409946
CVE-2026-98116In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mma ...09/25/202609/25/2026409950
CVE-2026-98115In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions ...09/25/202609/25/2026409940
CVE-2026-98114In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsin ...09/25/202609/25/2026409945
CVE-2026-98113In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped S ...09/25/202609/25/2026409938
CVE-2026-98112In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lif ...09/25/202609/25/2026409944
CVE-2026-98111In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate ...09/25/202609/25/2026409943
CVE-2026-98110In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound fi ...09/25/202609/25/2026409936
CVE-2026-98109In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix rac ...09/25/202609/25/2026409937
CVE-2026-98108In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan m ...09/25/202609/25/2026409935
CVE-2026-98107In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix out-of ...09/25/202609/25/2026409933
CVE-2026-98106In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: Prevent double ...09/25/202609/25/2026409948
CVE-2026-98105In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: Impro ...09/25/202609/25/2026409941
CVE-2026-98104In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix dupl ...09/25/202609/25/2026409942
CVE-2026-98103In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ip_sf_l ...09/25/202609/25/2026409930
CVE-2026-98102In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list di ...09/25/202609/25/2026409934
CVE-2026-98101In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-wri ...09/25/202609/25/2026409932
CVE-2026-97540In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rel ...09/25/202609/25/2026409919
CVE-2026-97539In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on ...09/25/202609/25/2026409918
CVE-2026-97538In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Val ...09/25/202609/25/2026409929
CVE-2026-97537In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue tea ...09/25/202609/25/2026409927
CVE-2026-97536In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after ...09/25/202609/25/2026409913
CVE-2026-97535In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound VP inde ...09/25/202609/25/2026409928
CVE-2026-97534In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust free ...09/25/202609/25/2026409926
CVE-2026-97533In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm ...09/25/202609/25/2026409912
CVE-2026-97532In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out free ...09/25/202609/25/2026409924
CVE-2026-97531In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip vport un ...09/25/202609/25/2026409925
CVE-2026-97530In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix soft lock ...09/25/202609/25/2026409922
CVE-2026-97529In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG ...09/25/202609/25/2026409917
CVE-2026-97528In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Unlink NVMe u ...09/25/202609/25/2026409916
CVE-2026-97527In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize NVM ...09/25/202609/25/2026409923
CVE-2026-97526In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplu ...09/25/202609/25/2026409911
CVE-2026-97525In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split p ...09/25/202609/25/2026409915
CVE-2026-97524In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded action ...09/25/202609/25/2026409921
CVE-2026-97523In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between sc ...09/25/202609/25/2026409914
CVE-2026-97522In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in ...09/25/202609/25/2026409920
CVE-2026-97228Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue ...09/25/202609/25/2026409931
CVE-2026-97898Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry ...09/25/202609/25/2026409910
CVE-2026-92106Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabili ...09/25/202609/25/2026409906
CVE-2026-88848The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a memb ...09/25/202609/25/2026409894
CVE-2026-86837The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before up ...09/25/202609/25/2026409895
CVE-2026-80514The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-s ...09/25/202609/25/2026409893
CVE-2026-6088Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409897
CVE-2026-6087Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409896
CVE-2026-6086Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409891
CVE-2026-6085Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409892
CVE-2026-6084Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409889
CVE-2026-6083Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409890
CVE-2026-6082Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vuln ...09/25/202609/25/2026409888
CVE-2026-97863The cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh ...09/25/202609/25/2026409885
CVE-2026-92573Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 ...09/25/202609/25/2026409811
CVE-2026-92564A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentia ...09/25/202609/25/2026409816
CVE-2026-92560A pre-authentication attacker could leverage type size/count handling to cause excessive allocat ...09/25/202609/25/2026409814
CVE-2026-92550A pre-authentication attacker could leverage type size/count handling to cause excessive allocat ...09/25/202609/25/2026409812
CVE-2026-96752The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi ...09/25/202609/25/2026409880
CVE-2026-96568The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Sc ...09/25/202609/25/2026409881
CVE-2026-96448A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identit ...09/25/202609/25/2026409879
CVE-2026-95866The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor p ...09/25/202609/25/2026409876
CVE-2026-95864The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[f ...09/25/202609/25/2026409877
CVE-2026-94573The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site ...09/25/202609/25/2026409875
CVE-2026-93901The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all version ...09/25/202609/25/2026409861
CVE-2026-93747The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tele ...09/25/202609/25/2026409865
CVE-2026-93656The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor p ...09/25/202609/25/2026409863
CVE-2026-93654The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stor ...09/25/202609/25/2026409874
CVE-2026-92713The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbi ...09/25/202609/25/2026409868
CVE-2026-92609Session fixation in HTTP management authentication allows remote attackers to gain unauthorized ...09/25/202609/25/2026409813
CVE-2026-92608Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion al ...09/25/202609/25/2026409815
CVE-2026-89426The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable ...09/25/202609/25/2026409866
CVE-2026-89406The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unau ...09/25/202609/25/2026409864
CVE-2026-88996The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & ...09/25/202609/25/2026409873
CVE-2026-84280The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...09/25/202609/25/2026409871
CVE-2026-19804The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Acc ...09/25/202609/25/2026409862
CVE-2026-17602The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to ...09/25/202609/25/2026409867
CVE-2026-17577The SSL Zen plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'uri' ( ...09/25/202609/25/2026409870
CVE-2026-13456The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin ...09/25/202609/25/2026409860
CVE-2026-13179The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin ...09/25/202609/25/2026409872
CVE-2026-12037The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Server-Side Request ...09/25/202609/25/2026409869
CVE-2026-93477Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ...09/25/202609/25/2026409859
CVE-2026-96766The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for Wor ...09/25/202609/25/2026409857
CVE-2026-96039The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via fir ...09/25/202609/25/2026409856
CVE-2026-94376The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPre ...09/25/202609/25/2026409855
CVE-2026-93899The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPre ...09/25/202609/25/2026409849
CVE-2026-93897The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for Wor ...09/25/202609/25/2026409854
CVE-2026-93399The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up ...09/25/202609/25/2026409846
CVE-2026-93303The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable ...09/25/202609/25/2026409853
CVE-2026-92829The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to author ...09/25/202609/25/2026409842
CVE-2026-92799The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable ...09/25/202609/25/2026409844
CVE-2026-92746The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable ...09/25/202609/25/2026409845
CVE-2026-92212The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected ...09/25/202609/25/2026409858
CVE-2026-89055The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass ...09/25/202609/25/2026409847
CVE-2026-84281The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...09/25/202609/25/2026409851
CVE-2026-84279The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...09/25/202609/25/2026409852
CVE-2026-83591The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Sit ...09/25/202609/25/2026409850
CVE-2026-19775The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is ...09/25/202609/25/2026409848
CVE-2026-14281The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugi ...09/25/202609/25/2026409843
CVE-2026-97846Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can onl ...09/25/202609/25/2026409836
CVE-2026-78397The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-suppl ...09/25/202609/25/2026409837
CVE-2026-78394The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination fol ...09/25/202609/25/2026409838
CVE-2026-78393The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before o ...09/25/202609/25/2026409841
CVE-2026-75553Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key ...09/25/202609/25/2026409839
CVE-2026-62062Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site R ...09/25/202609/25/2026409840
CVE-2026-97721A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects ...09/25/202609/25/2026409820
CVE-2026-97818phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controll ...09/25/202609/25/2026409835
CVE-2026-97764django-allauth before 65.19.4 does not have the expected limits on failed login attempts because ...09/25/202609/25/2026409834
CVE-2026-97737In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintende ...09/25/202609/25/2026409833
CVE-2026-97736tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by ...09/25/202609/25/2026409832
CVE-2026-97735ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser. ...09/25/202609/25/2026409831
CVE-2026-97732IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executa ...09/25/202609/25/2026409830
CVE-2026-97731MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appear ...09/25/202609/25/2026409828
CVE-2026-97730In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) v ...09/25/202609/25/2026409827
CVE-2026-97724A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allo ...09/25/202609/25/2026409826
CVE-2026-97650A vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4a ...09/25/202609/25/2026409752
CVE-2026-97723madpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the c ...09/25/202609/25/2026409825
CVE-2026-97649A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e2 ...09/25/202609/25/2026409751
CVE-2026-97648A vulnerability was detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adc ...09/25/202609/25/2026409750
CVE-2026-97647A security vulnerability has been detected in ningzichun student-management-system up to 98760f5 ...09/25/202609/25/2026409749
CVE-2026-95811Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22. ...09/25/202609/25/2026409824
CVE-2026-97646A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4a ...09/25/202609/25/2026409748
CVE-2026-92289Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public ...09/25/202609/25/2026409819
CVE-2026-92288Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl all ...09/25/202609/25/2026409823
CVE-2026-85417Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and priv ...09/25/202609/25/2026409822
CVE-2026-53493containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, ...09/25/202609/25/2026409821
CVE-2026-84283Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in ...09/25/202609/25/2026409817
CVE-2026-85082Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system ...09/25/202609/25/2026409818
CVE-2026-97387This CVE is a duplicate of another CVE.09/25/202609/25/2026
 
CVE-2026-97230IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python c ...09/25/202609/25/2026409810
CVE-2026-97636Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be ...09/25/202609/25/2026409807
CVE-2026-85491Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a late ...09/25/202609/25/2026409808
CVE-2026-87722Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search query predicates (such as ...09/25/202609/25/2026409805
CVE-2026-87721Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryP ...09/25/202609/25/2026409806
CVE-2026-87720Incorrect Authorization (CWE-863) in project name normalization (ProjectUtil.stripGitSuffix) and ...09/25/202609/25/2026409809
CVE-2026-14441A logic flaw in Java cache key handling object comparison handling could lead to improper identi ...09/24/202609/24/2026409804
CVE-2026-95699Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users ...09/24/202609/24/2026409799
CVE-2026-88388Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaS ...09/24/202609/24/2026409800
CVE-2026-88387LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parse_tiff_ifd() ...09/24/202609/24/2026409801
CVE-2026-88386libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsin ...09/24/202609/24/2026409802
CVE-2026-14442An information exposure vulnerability in the job scheduling component of SANnav allows sensitive ...09/24/202609/24/2026409803
CVE-2026-97368A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function ...09/24/202609/24/2026409352
CVE-2026-93353copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows a ...09/24/202609/24/2026409796
CVE-2026-82585The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and ...09/24/202609/24/2026409798
CVE-2026-79959The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot b ...09/24/202609/24/2026409797
CVE-2026-97366A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted ...09/24/202609/24/2026409351
CVE-2026-87118The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its comm ...09/24/202609/24/2026409792
CVE-2026-84403The Botslab G980H dash camera firmware does not require authenticated pairing or client binding ...09/24/202609/24/2026409790
CVE-2026-82716The Botslab G980H dash camera firmware includes sensitive configuration information, including W ...09/24/202609/24/2026409795
CVE-2026-82708The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP serve ...09/24/202609/24/2026409793
CVE-2026-81630The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware u ...09/24/202609/24/2026409789
CVE-2026-75558The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization ve ...09/24/202609/24/2026409794
CVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions befor ...09/24/202609/24/2026409791
CVE-2026-77967The Botslab G980H dash camera firmware accepts a reusable authentication value without adequatel ...09/24/202609/24/2026409786
CVE-2026-97365A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandb ...09/24/202609/24/2026409349
CVE-2026-93354Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows una ...09/24/202609/24/2026409787
CVE-2026-88956The Botslab G980H dash camera firmware contains an authentication vulnerability in the root acco ...09/24/202609/24/2026409788
CVE-2026-88761The Botslab G980H dash camera firmware generates the default WiFi password using predictable dev ...09/24/202609/24/2026409785
CVE-2026-97326A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637 ...09/24/202609/24/2026409334
CVE-2026-85496The Botslab G980H dash camera firmware generates session identifiers using a small sequential va ...09/24/202609/24/2026409784
CVE-2026-93291Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-t ...09/24/202609/24/2026409783
CVE-2026-93290Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain ...09/24/202609/24/2026409781
CVE-2026-93289The affected products are vulnerable to command injection attack that could allow an unauthentic ...09/24/202609/24/2026409782
CVE-2026-84399The Botslab G980H dash camera firmware contains an authorization vulnerability in its session ba ...09/24/202609/24/2026409775
CVE-2026-48540Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that all ...09/24/202609/24/2026409780
CVE-2026-97325A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affecte ...09/24/202609/24/2026409333
CVE-2026-82566The Botslab G980H dash camera firmware contains a session management vulnerability in which auth ...09/24/202609/24/2026409779
CVE-2026-48543Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that all ...09/24/202609/24/2026409778
CVE-2026-48542Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that all ...09/24/202609/24/2026409776
CVE-2026-48541Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that all ...09/24/202609/24/2026409777
CVE-2026-97324A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is ...09/24/202609/24/2026409332
CVE-2026-96883pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollecti ...09/24/202609/24/2026409772
CVE-2026-82372Improper handling of sensitive data during IPsec policy creation and modification in Brocade SAN ...09/24/202609/24/2026409774
CVE-2026-82164Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignm ...09/24/202609/24/2026409773
CVE-2026-86859ServiceNow has remediated an authorization bypass security issue that was identified in the Serv ...09/24/202609/24/2026409767
CVE-2026-81473Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization v ...09/24/202609/24/2026409770
CVE-2026-97323A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts ...09/24/202609/24/2026409331
CVE-2026-89325An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on W ...09/24/202609/24/2026409771
CVE-2026-86860ServiceNow has remediated a missing authorization vulnerability that was identified in the Servi ...09/24/202609/24/2026409768
CVE-2026-56792Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization v ...09/24/202609/24/2026409769
CVE-2026-97321A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted ...09/24/202609/24/2026409329
CVE-2026-86857ServiceNow has remediated an authorization bypass security issue that was identified in the Serv ...09/24/202609/24/2026409759

2025

CVEDescriptionSubmissionModerationEntry
CVE-2025-1218The mysqlnd wire protocol parser reads fields out of server packets before checking that the pac ...09/25/202609/25/2026410473
CVE-2025-14181The SOAP HTTP client guards its response buffer growth with a check that relies on signed intege ...09/25/202609/25/2026410465
CVE-2025-51457D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability with ...09/25/202609/25/2026410169
CVE-2025-14814The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting v ...09/25/202609/25/2026409829

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!