CVEs published September 16, 2026
871 CVEs were published on September 16, 2026: 97 critical, 396 high. 1 is now in CISA KEV.
- Published
- 871
- Critical
- 97
- High
- 396
- Medium
- 231
- Low
- 23
- Unrated
- 124
- Now in CISA KEV
- 1
- Fix available
- 581
Most affected products
- Linux
- 276
- Cisco Identity Services Engine Software · Cisco ISE Passive…
- 26
- Arista Networks EOS
- 24
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- 20
- Cisco Identity Services Engine Software
- 16
- Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- 15
- ISC BIND
- 14
- djust-org djust · djust
- 12
- GitLab
- 11
- Cisco Secure Firewall Management Center
- 10
Critical 97
- CVE-2026-61594djust has an authorization bypass on the WebSocket/SSE mount pathdjust-org djust · djust
- CVE-2026-92578WWBN AVideo through 29.0 Authentication Bypass via Stored Password HashWWBN AVideo
- CVE-2026-92576HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchToolHKUDS nanobot
- CVE-2026-75513Marten: SQL injection in Marten's LINQ provider via unescaped string literalsJasperFx marten · Marten
- CVE-2026-92812Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matchingdecaporg decap-cms
- CVE-2026-92805UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizarduvdesk community-skeleton
- CVE-2026-92787Feast through 0.66.0 Authentication Bypass via Unverified Tokenfeast-dev feast
- CVE-2026-92785Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary ClassesAngel-ML angel
- CVE-2026-92749SafeLine through 9.4.1 Authentication Bypass via Weak Session Secretchaitin SafeLine
- CVE-2026-20284Cisco Identity Search Engine SXP REST API SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20332Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76460Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20176Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20341Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20242Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20237Cisco Identity Services Engine Hardening Release - Input Validation VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76423Cisco ISE API Authentication Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20130Cisco Identity Services Engine Hardening Release - Improper Neutralization VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20192Cisco Identity Services Engine Hardening Release - Access Control VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20324Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20325Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a CommandCisco Nexus Dashboard
- CVE-2026-92808Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System CompromiseAltium Enterprise Server
- CVE-2026-20194Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20211Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20330Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
Show all 97 entriesShow fewer entries
- CVE-2026-20322Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access ControlCisco Nexus Dashboard
- CVE-2026-20329Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20326Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical FunctionCisco Nexus Dashboard
- CVE-2026-89083HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File WriteHP AC Print & Scan · HP Output Central
- CVE-2026-89082HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File WriteHP AC Print & Scan · HP Output Central
- CVE-2026-91106HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-73456Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an…Arista Networks EOS
- CVE-2026-91104HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-68536Apache MyFaces: Server-Side Request Forgery / Local File Inclusion VulnerabilityApache Software Foundation org.apache.myfaces.core:myfaces-…
- CVE-2026-92720Kubero through 3.1.1 Unauthenticated Notifications API Accesskubero-dev kubero
- CVE-2026-92717Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hubcobbr Covenant
- CVE-2026-20234Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20331Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76420Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20307Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20305Cisco Identity Services Engine Command Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20306Cisco Identity Services Engine Command Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-92398Ruijie RG-EW3000GX user_list_note admin os command injectionRuijie RG-EW3000GX
- CVE-2026-90999Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environmentFunctional Software Sentry Seer
- CVE-2026-92397Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injectionRuijie RG-EW3000GX
- CVE-2025-59953LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployInternLM lmdeploy · lmdeploy
- CVE-2026-70416Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability.Dell ObjectScale
- CVE-2026-77411RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstrrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77405RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parserrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-92395@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet@fastify/proxy-addr
- CVE-2026-77408RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflowrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-91843Stack overflow in login process to the Security Management and Log Serverscheckpoint Quantum Security Management
- CVE-2026-73172Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-58147Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-58146Unauthorized remote code execution in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-40855Command Injection in T-Mobile 5G Box IDU router via ping functionalityWNC T-Mobile 5G Box IDU
- CVE-2026-90049net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()Linux
- CVE-2026-90048fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()Linux
- CVE-2026-90042ceph: properly decrypt filenames in vmalloc() buffersLinux
- CVE-2026-90038NFSD: Prevent client use-after-free during export state revocationLinux
- CVE-2026-90037NFSD: Prevent client use-after-free during close_lru reapingLinux
- CVE-2026-90036NFSD: Prevent client use-after-free during blocked-lock reapingLinux
- CVE-2026-90012spi: Fix DMA mapping ownership on partial map failureLinux
- CVE-2026-90011scsi: target: iscsi: Reserve a terminator byte for the login payloadLinux
- CVE-2026-89990ceph: lock mutex in ceph_mds_check_access()Linux
- CVE-2026-89972nvme: add missing SRCU grace period in error pathLinux
- CVE-2026-89970nvmet-auth: Synchronize timeout work during SQ teardownLinux
- CVE-2026-89969nvmet-tcp: fix out-of-bounds write when receiving an over-long PDULinux
- CVE-2026-89930KVM: nVMX: Service local TLB flushes on failed nested VM-EnterLinux
- CVE-2026-89918KVM: arm64: Correctly handle end of VA space TLBI invalidationLinux
- CVE-2026-89916KVM: arm64: Make VNCR invalidation participate in MMU invalidation retryLinux
- CVE-2026-89915KVM: arm64: Remove VM-wide VNCR mapping counterLinux
- CVE-2026-89914KVM: arm64: Sign-extend VA for range-based TLBI invalidationLinux
- CVE-2026-89857scsi: qla2xxx: Hold qpair lock when sending NVMe LS rejectLinux
- CVE-2026-89847scsi: qla2xxx: Avoid double completion in async IOCB timeoutLinux
- CVE-2026-89846scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data readLinux
- CVE-2026-86106Security Advisory 0179Arista Networks VeloCloud Edge
- CVE-2026-73453Security Advisory 0174Arista Networks EOS
- CVE-2026-76187Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWTApache Software Foundation apache-airflow-providers-keycloak
- CVE-2026-76186Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identityApache Software Foundation apache-airflow-providers-keycloak
- CVE-2026-86462Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessionsApache Software Foundation apache-airflow-providers-fab
- CVE-2026-82311Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always falseApache Software Foundation apache-airflow-providers-fab
- CVE-2026-89788ksmbd: fix tree connection use-after-free in smb2_tree_connect()Linux
- CVE-2026-89786ext4: fix out-of-bounds read in ext4_read_inline_dir()Linux
- CVE-2026-89783xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is fullLinux
- CVE-2026-89779fs/ntfs3: validate ef->size covers the record's name and valueLinux
- CVE-2026-89778isofs: fix out-of-bounds page array access on empty zisofs blockLinux
- CVE-2026-89775KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluationLinux
- CVE-2026-81642Heap buffer overflow and possible Remote Code Execution when digesting DNSKEYNLnet Labs Unbound
- CVE-2026-27565Remote code execution via uploading a malicious IODD filePepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27546Authentication Bypass in _account_logPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-73447Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate RequestArista Networks EOS
- CVE-2026-12793JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameterjetmonsters JetFormBuilder — Dynamic Blocks Form Builder
- CVE-2026-14349TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Actionthemetechmount TrueBooker – Appointment Booking and Schedul…
- CVE-2025-56563A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.
- CVE-2026-51990An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the…
- CVE-2026-88592kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).
High 396
- CVE-2026-65388A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and…Apple containerization
- CVE-2026-61599djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount pathdjust-org djust · djust
- CVE-2026-61596djust has broken object-level access control (IDOR)djust-org djust · djust
- CVE-2026-61591djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)djust-org djust · djust
- CVE-2026-61592djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session…djust-org djust · djust
- CVE-2026-92599Joi before 17.13.7 and 18.2.6 ReDoS via isoDatehapijs joi · joi
- CVE-2026-92598Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypassnodemailer
- CVE-2026-92597Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Commentnodemailer
- CVE-2026-92596Nodemailer before 9.1.0 Denial of Service via addressparsernodemailer
- CVE-2026-92594Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQLcraftcms cms
- CVE-2026-92593Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Executioncraftcms cms
- CVE-2026-92592Craft CMS before 4.18.6 Remote Code Execution via signed cookiecraftcms cms
- CVE-2026-92591Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installercraftcms cms
- CVE-2026-92582AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF BypassWWBN AVideo
- CVE-2026-92580AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFWWBN AVideo
- CVE-2026-92577AVideo through 29.0 API get_api_video Broken Access Control via clean_titleWWBN AVideo
- CVE-2026-89034TCH QRing R20_B006 Unauthenticated BLE AccessTCH QRing
- CVE-2026-85469Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopeRed Hat Quay
- CVE-2026-62997Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load`kedro-org kedro-plugins
- CVE-2026-92816ComfyUI before 0.30.0 Path Traversal via dataset save nodesComfy-Org ComfyUI
- CVE-2026-92815changedetection.io through 0.60.6 SSRF via browser-step Goto URLdgtlmoon changedetection.io
- CVE-2026-92811browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypassbrowserless
- CVE-2026-92806phpList before 3.6.17 Cross-Site Request Forgery via massremove.phpphpList
- CVE-2026-92804Nango through 0.70.4 Server-Side Request Forgery via ConfigurationNangoHQ Nango
- CVE-2026-92801cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actionschenhg5 cc-connect
Show all 396 entriesShow fewer entries
- CVE-2026-92800Docs before 5.4.1 Stale Collaboration Session After Access Revocationsuitenumerique Docs
- CVE-2026-92796Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypassmanticoresoftware Manticore Search
- CVE-2026-92795Coze Studio through 0.5.1 Server-Side Request Forgery via Plugincoze-dev coze-studio
- CVE-2026-92794OpenSign through 2.41.3 Information Disclosure via getDocumentOpenSignLabs OpenSign
- CVE-2026-92793GoAdmin through 1.2.26 Authorization Bypass via Query ParameterGoAdminGroup go-admin
- CVE-2026-92792OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifieropennhp
- CVE-2026-92791Uber Kraken through 0.1.29 Path Traversal via tag parameteruber kraken
- CVE-2026-92789Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirectgraylog2-server
- CVE-2026-92788Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Nodecoze-dev coze-studio
- CVE-2026-92786LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Modellightgbm-org LightGBM
- CVE-2026-92784@refinedev/inferencer through 7.0.0 Code Injection via API Field Names@refinedev/inferencer
- CVE-2026-92783Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletionyeti-platform yeti
- CVE-2026-92782Chroma through 1.5.9 Authorization Bypass via Collection Identifierchroma-core chroma
- CVE-2026-92780KnowStreaming through 3.4.1 Missing Authorization on the REST APIdidi KnowStreaming
- CVE-2026-92779Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via BindingsBuilderIO @builder.io/sdk-react · BuilderIO @builder.io/… +5
- CVE-2026-92776Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypassrequarks Wiki.js
- CVE-2026-92775Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetchrequarks Wiki.js
- CVE-2026-92773Trigger.dev before 4.6.0 GitHub App Installation Takeovertriggerdotdev trigger.dev
- CVE-2026-92772Leantime before 3.9.6 Unauthorized Plugin Installation via HTMXleantime
- CVE-2026-92771Twenty before 2.35.0 Permission Bypass via groupBy-with-records Querytwentyhq twenty
- CVE-2026-92770Harbor through 2.15.2 Scanner Credential Disclosure via Query Parametergoharbor harbor
- CVE-2026-92765ArcherySec through 2.0.6 Information Disclosure via WebScanVulnListarcherysec
- CVE-2026-92763Rundeck through 6.2.1 Authorization Bypass via Project Importrundeck
- CVE-2026-92762Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startuppelican panel
- CVE-2026-92761WebVirtCloud Missing Authorization on Instance Control Actionsretspen webvirtcloud
- CVE-2026-92760Shlink through 5.1.6 Mercure Token Authorization Bypassshlinkio shlink
- CVE-2026-92759SecObserve before 1.59.1 Information Disclosure via API ConfigurationSecObserve
- CVE-2026-92753PatrowlManager through 1.8.4 Authorization Bypass via Events APIPatrowlManager
- CVE-2026-92752metasfresh Unauthorized Access via Document Attachments and Comments Endpointsmetasfresh
- CVE-2026-92751CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filteryahoo CMAK
- CVE-2026-92750Harness through 3.3.0 Missing Access Control via infraproviders endpointharness
- CVE-2026-92748BC Security Empire before 6.7.1 Path Traversal File Upload RCEBC-SECURITY Empire
- CVE-2026-63506Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted sitetinacms · @tinacms auth +2
- CVE-2026-20300Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20342Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20323Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass…Cisco Secure Firewall Management Center · Cisco Secure Fire…
- CVE-2026-76412Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20333Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76425Cisco ISE SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20334Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76424Cisco ISE Arbitrary File Access VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20344Cisco Secure Firewall Management Center Software SQL Injection VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20154Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of ServiceCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20360Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure HandlingCisco Nexus Dashboard
- CVE-2026-20343Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20222Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20247Cisco Identity Services Engine Unauthenticated SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20135Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service VulnerabilityCisco Secure Firewall Threat Defense (FTD) Software
- CVE-2026-20352Cisco Identity Services Engine RADIUS Denial of Service VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76413Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20336Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20249Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20340Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-76409Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a PathnameCisco Nexus Dashboard
- CVE-2026-20335Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software…Cisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20295Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service…Cisco Secure Firewall Management Center · Cisco Secure Fire…
- CVE-2026-20250Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20361Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL InjectionCisco Nexus Dashboard
- CVE-2026-89084HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File WriteHP AC Print & Scan · HP Output Central
- CVE-2026-86831Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKSaws-network-policy-agent · AWS amazon-vpc-cni-k8s
- CVE-2026-87105Tanium addressed a SQL injection vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87024Tanium addressed a SQL injection vulnerability in Asset.Tanium Asset
- CVE-2026-86865Tanium addressed a SQL injection vulnerability in Asset.Tanium Asset
- CVE-2026-70469Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP RequestsApache Software Foundation org.apache.nifi:nifi-jetty
- CVE-2026-87976Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension BundlesApache Software Foundation org.apache.nifi.registry:nifi-re…
- CVE-2026-76646Apache MyFaces: Denial of Service via Unbounded Request ParsingApache Software Foundation Apache MyFaces
- CVE-2026-63325Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`redocly-cli
- CVE-2026-91105HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-86043Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)zalando skipper · github.com/zalando/skipper
- CVE-2026-91102HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-81876HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of servicehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +2
- CVE-2026-81875HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of servicehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +2
- CVE-2026-91098HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-86003CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPcoredns · github.com/coredns/coredns
- CVE-2026-91097HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-82399CoreDNS: Unauthenticated memory exhaustion in custom transportscoredns · github.com/coredns/coredns
- CVE-2026-92729SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpointssignoz
- CVE-2026-75516RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-46352Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockOISF suricata
- CVE-2026-63126Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)square wire · com.squareup.wire:wire-runtime
- CVE-2026-92417Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceOpen5GS
- CVE-2026-47094SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}SIMAC MyPHR
- CVE-2026-92719Quickwit through 0.9.0 SSRF via SQS queue_url Parameterquickwit-oss quickwit
- CVE-2026-92718Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cacheprojectdiscovery nuclei
- CVE-2026-92716Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege EscalationShuffle
- CVE-2026-92605IRIS through 2.4.29 Unauthorized Comment Access via Object IDdfir-iris iris-web
- CVE-2026-92604Scirius through 3.8.0 Arbitrary File Write via PCAP UploadStamusNetworks scirius
- CVE-2026-42784Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionRed Hat Ansible Automation Platform 2.6 for RHEL · Red H… +7
- CVE-2026-85386Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form BlockConcrete CMS
- CVE-2026-85756SSH.NET: ScpClient allows server-side RCE via default SCP path handlingsshnet SSH.NET · SSH.NET
- CVE-2026-85385Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone FieldConcrete CMS
- CVE-2026-86359Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability.Dell Repository Manager
- CVE-2026-85731oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)oras-project oras-go · oras.land/oras-go/v2
- CVE-2026-68904node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustionnode-opcua · node-opcua-transport +1
- CVE-2026-71180Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability.Dell Update Package Framework
- CVE-2026-59974Stanza: Zip Slip Path Traversal in Model/Resource Extractionstanfordnlp stanza
- CVE-2026-71179Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command…Dell Update Package Framework
- CVE-2026-92603ContiNew Admin through 4.1.0 Unauthorized Message Deletion via UserMessageControllercontinew-org continew-admin
- CVE-2026-92602TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URLTDuckCloud tduck-survey-form
- CVE-2026-92601Guns through 8.3.5 Improper Access Control via SysNoticeControllerstylefeng Guns
- CVE-2026-92600Guns through 8.3.5 Information Disclosure via Missing Permission Checkstylefeng Guns
- CVE-2026-61593djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE sessiondjust-org djust · djust
- CVE-2026-17526Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accountsRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-61595djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' datadjust-org djust · djust
- CVE-2026-92626Control iD iDSecure Unauthenticated Denial of ServiceControl iD iDSecure
- CVE-2026-92625Control iD iDSecure Unauthenticated Denial of ServiceControl iD iDSecure
- CVE-2025-43936Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.Dell ObjectScale
- CVE-2026-82410Pocketbase: Unhandled panic in worker goroutinespocketbase · github.com/pocketbase/pocketbase
- CVE-2026-79651Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale cachingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-74909Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segmentsRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-18212Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib stateRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-84860Scada-LTS DWR Authorization Bypass - SystemicScada-LTS
- CVE-2026-84858Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox BypassScada-LTS
- CVE-2026-63127RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoverymodelcontextprotocol rust-sdk · rmcp
- CVE-2026-63128RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-servicemodelcontextprotocol rust-sdk · rmcp
- CVE-2026-77409RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blockingrabbitmq amqp091-go
- CVE-2026-77412RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Clientrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77404RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injectionrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-92570reNgine through 2.2.0 Unauthorized Configuration File Readyogeshojha rengine
- CVE-2026-92567TDuck survey form through 5.0 Unauthorized Data ModificationTDuckCloud tduck-survey-form
- CVE-2026-92566DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Previewdatageartech datagear
- CVE-2026-77410RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocationrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-92616FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritanceerror311 FileRise
- CVE-2026-77406RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configurationrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77403RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiationrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77407RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fieldsrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-63671@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configurationnuxt-content mdc · @nuxtjs/mdc
- CVE-2026-92087@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth@fastify/auth
- CVE-2026-88064Backstage: Improper input validation in TechDocs MkDocs configurationbackstage
- CVE-2026-76825RestrictedPython: Sandbox escape via string.Formatter field resolutionzopefoundation RestrictedPython · restrictedpython
- CVE-2026-84997react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUreactphp http · react/http
- CVE-2026-80274Validating resolver can abort while caching a mismatched NOQNAME proofISC BIND
- CVE-2026-76163named aborts on a TKEY query when the user configuration has no global options statementISC BIND
- CVE-2026-19666Use-after-free in query_addnoqnameproof() via the DNS64 filter64 pathISC BIND
- CVE-2026-82964Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sysGen Digital Avast Free Antivirus, Avast One, Avast Premi… +1
- CVE-2026-81563SVCB AliasMode additional-data error leaks qpcache referencesISC BIND
- CVE-2026-61598Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerdjust-org djust · djust
- CVE-2026-77692Unauthenticated remote crash of named via a single DoH SIG(0) requestISC BIND
- CVE-2026-92137Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is…Jenkins Project Jenkins Robot Framework Plugin
- CVE-2026-92136Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI…Jenkins Project Jenkins OWASP Dependency-Check Plugin
- CVE-2026-92135Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted…Jenkins Project Jenkins Coverage Plugin
- CVE-2026-92134Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is…Jenkins Project Jenkins Warnings Plugin
- CVE-2026-92129Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92128Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92127Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92126Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92125Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92124Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92123Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92122Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a…Jenkins Project Jenkins Script Security Plugin
- CVE-2026-61590djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only…djust-org djust · djust
- CVE-2026-19667Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`ISC BIND
- CVE-2026-81736Remote CPU denial of service through cached SVCB/HTTPS AliasMode treesISC BIND
- CVE-2026-92469microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Checkzlt2000 microservices-platform
- CVE-2026-92468microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerzlt2000 microservices-platform
- CVE-2026-92467microservices-platform through 6.0.0 Unverified Password Change via /users/passwordzlt2000 microservices-platform
- CVE-2026-92466microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checkingzlt2000 microservices-platform
- CVE-2026-89028MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXMikroTik RouterOS
- CVE-2026-73177Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73176Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73175Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73174Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73173Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73171Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73170Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73167Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73166Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73165Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73164Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73163Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-19535Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-88817Privilege escalation via legacy access group creation endpointCuriosity Workspace
- CVE-2026-92465WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerabilityThemeum WP Mega Menu
- CVE-2026-40857CSRF token bypass in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-40856Config disclosure in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-40854Session auth bypass via cookie value in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-92463yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listingguchengwuyue yshop-crm
- CVE-2026-92462yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStepguchengwuyue yshop-crm
- CVE-2026-92460yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listingguchengwuyue yshop-crm
- CVE-2026-92459yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpointguchengwuyue yshop-crm
- CVE-2026-92457yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoiceguchengwuyue yshop-crm
- CVE-2026-92456yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpointsguchengwuyue yshop-crm
- CVE-2026-90047drm/xe: Don't hand out the flat CCS storage as usable VRAMLinux
- CVE-2026-90046mm/page_alloc: don't spin_trylock() in NMI on UPLinux
- CVE-2026-90045USB: gadget: ffs: fix mm lifetime handlingLinux
- CVE-2026-90044usb: gadget: f_fs: Fix Use-After-Free in AIO error pathLinux
- CVE-2026-90043zram: fix slot lock bit position on big-endian 64-bitLinux
- CVE-2026-90041HID: sony: clean up device list on probe failureLinux
- CVE-2026-90032media: usbtv: keep device alive while ALSA card existsLinux
- CVE-2026-90030usb: dwc3: clear forceRM when issuing EndTransferLinux
- CVE-2026-90027usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stopLinux
- CVE-2026-90026usb: typec: qcom-pmic: cancel reset_work on stopLinux
- CVE-2026-90025usb: typec: ucsi: displayport: Fix OOB altmode array indexLinux
- CVE-2026-90022usb: gadget: f_midi2: fix use-after-free in string attribute show pathLinux
- CVE-2026-90018staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()Linux
- CVE-2026-90017staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()Linux
- CVE-2026-90016staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()Linux
- CVE-2026-90014tracing: Have show_event_filters/triggers files take trace array refLinux
- CVE-2026-90013tracing: Take trace_array reference when opening options fileLinux
- CVE-2026-90010scsi: bsg: Cap io_uring sense copy to max_response_lenLinux
- CVE-2026-90009scsi: bsg: Fix TOCTOU in io_uring passthrough command setupLinux
- CVE-2026-90008scsi: megaraid_sas: Limit NVMe request size to the PRP chain frameLinux
- CVE-2026-90007scsi: pm8001: Use rollback index when freeing MSI-X vectorsLinux
- CVE-2026-90003futex: Prevent rcuwait use-after-free during requeue PILinux
- CVE-2026-90002ftrace: Take trace_array reference before accessing its ftrace_opsLinux
- CVE-2026-90001HID: bpf: serialize device reference release in struct_ops destroy pathLinux
- CVE-2026-90000HID: rmi: fix OOB access with undersized RMI reportsLinux
- CVE-2026-89999HID: wacom: validate report length in wacom_intuos_pro2_bt_irqLinux
- CVE-2026-89998dm: fix race when loading and unloading a tableLinux
- CVE-2026-89997dm: fix resume-vs-remove raceLinux
- CVE-2026-89995dma-direct: return struct page from dma_direct_alloc_from_pool()Linux
- CVE-2026-89994dmaengine: fsl-edma: tracing: no ptr dereference during log outputLinux
- CVE-2026-89992cpuidle: dt_idle_genpd: kfree() the original name allocationLinux
- CVE-2026-89988kprobes: Protect kprobe_blacklist with RCULinux
- CVE-2026-89986mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()Linux
- CVE-2026-89985memcg: keep folio's objcg same as its nodeLinux
- CVE-2026-89980ALSA: harmony: initialize locks before requesting IRQLinux
- CVE-2026-89979ALSA: pcm: Fix race between non-atomic ops and trigger-startLinux
- CVE-2026-89974nvme-fc: fix double free of fabrics options when nvme_add_ctrl() failsLinux
- CVE-2026-89973nvme-tcp: check the data direction of a C2HData PDULinux
- CVE-2026-89971nvme: skip the zoned limits update if the zone info query failedLinux
- CVE-2026-89968nvmet-tcp: reject unsolicited H2CData PDUsLinux
- CVE-2026-89967mm/migrate_device: avoid out-of-bounds writes for compound foliosLinux
- CVE-2026-89965nvdimm/btt: reject an arena whose nfree is below the lane countLinux
- CVE-2026-89961powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap populationLinux
- CVE-2026-89960s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()Linux
- CVE-2026-89959s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_removeLinux
- CVE-2026-89957s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removedLinux
- CVE-2026-89954mtd: afs: validate v2 image info boundsLinux
- CVE-2026-89951batman-adv: fix stale receive device on merged fragmentsLinux
- CVE-2026-89947clk: meson: align gxbb_32k_clk_sel number of parents with actual countLinux
- CVE-2026-89943ASoC: loongson: Fix error handling in ACPI property parsingLinux
- CVE-2026-89942iio: buffer: Fix potential use-after-free in anonymous buffer releaseLinux
- CVE-2026-89941iio: buffer: Make IIO DMA fence release RCU-safeLinux
- CVE-2026-89940iio: buffer: Tie IIO dma fence lock lifetime to the fenceLinux
- CVE-2026-89938iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAFLinux
- CVE-2026-89932KVM: nVMX: Always flush vpid02 on first useLinux
- CVE-2026-89929KVM: nVM: Ensure INVVPID is emulated on the correct physical CPULinux
- CVE-2026-89928KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walkLinux
- CVE-2026-89927KVM: x86: hyper-v: Clamp stimer deadline to avoid livelockLinux
- CVE-2026-89922KVM: s390: Take srcu when importing watchpoint dataLinux
- CVE-2026-89920KVM: s390: Fix memory corruption by not reinjecting CK machine checksLinux
- CVE-2026-89919KVM: s390: keyop: use mmu_lock to read gmap->asceLinux
- CVE-2026-89913KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tablesLinux
- CVE-2026-89912KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT saveLinux
- CVE-2026-89911KVM: arm64: Correctly cap TLBI Range to the architural limitLinux
- CVE-2026-89910LoongArch: KVM: Fix uninitialized stack variable issue with dmsintcLinux
- CVE-2026-89908LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLYLinux
- CVE-2026-89907LoongArch: KVM: Validate MSI data before routing it to EIOINTCLinux
- CVE-2026-89906LoongArch: BPF: Refactor jump offset calculation in tail callLinux
- CVE-2026-89904LoongArch: Fix acpi_package_ids[] array overflowLinux
- CVE-2026-89903LoongArch: Do not save/restore percpu base register in rethook trampolineLinux
- CVE-2026-89902LoongArch: Avoid preempt count underflow without probeLinux
- CVE-2026-89899media: cec: disable delayed work before freeing an interrupted transmitLinux
- CVE-2026-89898media: cec: extron-da-hd-4k-plus: add sanity checkLinux
- CVE-2026-89897media: cec: Serialize exclusive follower deliveryLinux
- CVE-2026-89894media: cx231xx: reject geometry changes while the VBI queue is busyLinux
- CVE-2026-89893media: cx23885: cancel NetUP CI work before teardownLinux
- CVE-2026-89890media: go7007: defer the ALSA v4l2 put until card releaseLinux
- CVE-2026-89888media: i2c: ov02a10: fix endpoint parsing use-after-freeLinux
- CVE-2026-89887media: i2c: ov7740: fix use-after-destroy in removeLinux
- CVE-2026-89885media: platform: mtk-mdp3: Fix SCP device refcountingLinux
- CVE-2026-89883media: rc: sunxi-cir: Unregister rc device on probe failureLinux
- CVE-2026-89882media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflowLinux
- CVE-2026-89880media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failureLinux
- CVE-2026-89877media: saa7164: fix cleanup on resource allocation failureLinux
- CVE-2026-89875media: ti: vpe: quiesce overflow recovery before freeing streamsLinux
- CVE-2026-89873media: v4l2-ctrls: validate HEVC EXT SPS RPS countsLinux
- CVE-2026-89870media: zoran: Avoid freeing a registered video_device twiceLinux
- CVE-2026-89863scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete checkLinux
- CVE-2026-89861scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()Linux
- CVE-2026-89860scsi: qla2xxx: Initialize NVMe abort_work once at submissionLinux
- CVE-2026-89856scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncationLinux
- CVE-2026-89854scsi: qla2xxx: Fix cs84xx use-after-free on host teardownLinux
- CVE-2026-89849scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast pathLinux
- CVE-2026-89848scsi: qla2xxx: Quiesce response IRQ before freeing request queueLinux
- CVE-2026-89844scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisitionLinux
- CVE-2026-89841f2fs: only redirty pinned folios in redirty_blocksLinux
- CVE-2026-89840f2fs: validate MOVE_RANGE destination sizeLinux
- CVE-2026-89838f2fs: limit recovery filename logging to stored lengthLinux
- CVE-2026-89836f2fs: fix folio_nr_pages() race after put in large folio invalidateLinux
- CVE-2026-89832f2fs: fix to clear dirty flag on folio in error pathLinux
- CVE-2026-89829f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()Linux
- CVE-2026-89826drm/panthor: harden firmware build-info bounds checksLinux
- CVE-2026-89825drm/panthor: fix firmware control interface bounds checksLinux
- CVE-2026-89823drm: fix race between partial drm_dev_register() failure and ioctlLinux
- CVE-2026-89819drm/amd/display: validate plane degamma LUT size for private color propLinux
- CVE-2026-89818drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count checkLinux
- CVE-2026-89815drm/ttm: Drop tt->restore after successful restoreLinux
- CVE-2026-89814drm/amdgpu: clamp the isolation index for rings outside a partitionLinux
- CVE-2026-89811drm/amdkfd: Add TLB flush after MES queue eviction/suspensionLinux
- CVE-2026-89810drm/amdkfd: Fix error path at svm_migrate_copy_to_ramLinux
- CVE-2026-89808drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vramLinux
- CVE-2026-89806drm/sysfb: ofdrm: Fix integer overflow in fb_size calculationLinux
- CVE-2026-89805drm/pagemap: Fix folio allocation fallback and use-after-putLinux
- CVE-2026-89804drm/nouveau/dmem: fix mismatched DMA unmap size for large foliosLinux
- CVE-2026-89803drm/nouveau: unsubscribe the channel-kill event before the fence contextLinux
- CVE-2026-89801drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSELinux
- CVE-2026-89799bpf: Disable preemption in bpf_get_stackidLinux
- CVE-2026-89795PCI: Allow per function PCI slots to fix slot reset on s390Linux
- CVE-2026-8462OpenMeter SQL Injection in ClickHouse-backed Meter Definitionsopenmeter · github.com/openmeterio/openmeter
- CVE-2026-86585Improper Verification of the Firmware Signature vulnerabilityFermax Electronica S.A.U. DUOX PLUS monitor firmware
- CVE-2026-14916Kong API Gateway Enterprise: JWT Algorithm-ConfusionKong Enteprise Gateway
- CVE-2026-14917Kong API Gateway Enterprise: SAML Authentication bypassKong Enterprise Gateway
- CVE-2026-86474Improper Certificate Validation in the Firmware Download vulnerabilityFermax Electronica S.A.U. DUOX PLUS monitor firmware
- CVE-2026-89793ublk: clear VM_MAYWRITE on read-only ublk char device mmapLinux
- CVE-2026-73455Security Advisory 0173Arista Networks EOS
- CVE-2026-85628Cleartext Transmission of Sensitive Information in the Pairing Process vulnerabilityFermax Electronica S.A.U. DuoxMe · Fermax Electronica S.A.U…
- CVE-2026-79993Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znodeApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-59969Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS modeApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-59739Apache ZooKeeper: Information disclosure via SetWatches reconnect replayApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-73435Security Advisory 0171Arista Networks EOS
- CVE-2026-86466Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validatedApache Software Foundation apache-airflow-providers-fab
- CVE-2026-82310Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT accessApache Software Foundation apache-airflow-providers-fab
- CVE-2026-86792Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configurationApache Software Foundation apache-airflow-providers-apache-…
- CVE-2026-89792ksmbd: prevent out-of-bounds reads in share config responsesLinux
- CVE-2026-2380Security Advisory 0168Arista Networks EOS
- CVE-2026-89791perf: Fix use-after-free when perf mmap() revival races with the last munmap()Linux
- CVE-2026-89789gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-freeLinux
- CVE-2026-89782fs/ntfs3: reject restart table growth beyond U16_MAX entriesLinux
- CVE-2026-89781fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()Linux
- CVE-2026-89777vfio/pci: clear vdev->msi_perm after freeing it on init failureLinux
- CVE-2026-73464Security Advisory 0166Arista Networks EOS
- CVE-2026-82717CNAME synthesis could lead to heap corruptionNLnet Labs Unbound
- CVE-2026-81634Possible heap buffer overflow during DNSSEC canonicalizationNLnet Labs Unbound
- CVE-2026-89774Bluetooth: SCO: hold sk properly in sco_conn_readyLinux
- CVE-2026-73454Security Advisory 0165Arista Networks EOS
- CVE-2026-73439Security Advisory 0164Arista Networks EOS
- CVE-2026-73461Security Advisory 0163Arista Networks EOS
- CVE-2026-27564Command Injection via PUT in /api/datastorage/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27563Command Injection via GET in /api/datastorage/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27562Command Injection via PUT in /api/iodd/configPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27561Command Injection via GET in /api/iodd/configPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27560Command Injection via DELETE in /api/status/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27559Command Injection via GET in /api/status/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27558Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_filesPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27557Path Traversal in /index.php/view_uploaded_iodd_filePepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27556Local File Inclusion in /index.php/ajax/save_iodd_parametersPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27555Local File Inclusion in /index.php/ajax/get_iodd_port_infoPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27554Command Injection in /index.php/ajax/save_iodd_parametersPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27552Unauthorized IODD File Upload due to Improper AuthorizationPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27551Command Injection in /index.php/ajax/parameterManagePepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27550Command Injection in Field_Shadow_Password ClassPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27549Command Injection in /index.php/attached_devices_tab/do_uploadPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27548Command Injection in /index.php/ajax/get_iodd_port_infoPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27547Command Injection in /index.php/ajax/get_iodd_menu_infoPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-84408QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC…QualitySoft QND Premium · QualitySoft QND Standard +1
- CVE-2026-92355In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw…Octopus Deploy Octopus Server
- CVE-2026-88263XikeStor Layer3 switches miss authentication for downloading configuration data.XikeStor SKS8310-8X · XikeStor SKS8300-8T +1
- CVE-2026-19248Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qtqt
- CVE-2025-14871Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-1168Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-78252Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-79708Incorrect Authorization in GitLabGitLab
- CVE-2026-86444LearnPress < 4.4.7 - Reflected XSS via 'skin' ParameterLearnPress
- CVE-2026-85569Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request MisclassificationTutor LMS
- CVE-2026-85530GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization MismatchGiveWP
- CVE-2026-84829Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor ParameterOptimole
- CVE-2026-78472Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' ParameterNi WooCommerce Sales Report
- CVE-2026-76552WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image ImportWP Import Export Lite
- CVE-2026-76551WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP FunctionWP Import Export Lite
- CVE-2026-76550WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path TraversalWP Import Export Lite
- CVE-2026-74926MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST EndpointMultiVendorX
- CVE-2026-89063Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and…ladela Online Scheduling and Appointment Booking System – B…
- CVE-2026-18595WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Requestwp-lab WP-Lister Lite for eBay
- CVE-2026-78088Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parametercontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2026-86108Security Advisory 0181Arista Networks VeloCloud Edge
- CVE-2026-92299@jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture@jitsi/electron-sdk
- CVE-2025-56565DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within…
- CVE-2026-38999A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows…
- CVE-2026-79298An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute…
Medium, low and unrated 378
- CVE-2026-61589djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on…djust-org djust · djust
- CVE-2026-61588djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute…djust-org djust · djust
- CVE-2026-61597djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tagsdjust-org djust · djust
- CVE-2026-92595Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContentnodemailer
- CVE-2026-92590Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generated Fieldscraftcms cms
- CVE-2026-92589Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reordercraftcms cms
- CVE-2026-92588n8n before 1.123.76 Improper Authorization via Source Control Pushn8n-io n8n
- CVE-2026-92587n8n before 1.123.76 Sandbox Escape via Git Relative URLn8n-io n8n
- CVE-2026-92586AVideo through 29.0 Missing Authorization via comment API endpointWWBN AVideo
- CVE-2026-92585AVideo through 29.0 Missing Authorization Check via API Like EndpointWWBN AVideo
- CVE-2026-92584AVideo through 29.0 Stored Cross-Site Scripting via User-Agent HeaderWWBN AVideo
- CVE-2026-92583AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter IncrementWWBN AVideo
- CVE-2026-92581AVideo through 29.0 Like Counter Desynchronization via Array ParameterWWBN AVideo
- CVE-2026-92579AVideo through 29.0 Broken Access Control via CSRF Exemption Basename CollisionWWBN AVideo
- CVE-2026-64684RMCP: Custom HTTP headers leak to cross-origin redirect targetsmodelcontextprotocol rust-sdk · rmcp
- CVE-2026-81871OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-81872OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-81869OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncationopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-92814changedetection.io through 0.60.6 Cross-Site Scripting via watch_titledgtlmoon changedetection.io
- CVE-2026-92813Metabase through 0.63.18 SSRF via GeoJSON URL validation bypassMetabase
- CVE-2026-92810PrestaShop blockwishlist through 3.0.2 Information DisclosurePrestaShop blockwishlist
- CVE-2026-92809PrestaShop psgdpr through 1.4.3 GDPR Log ForgeryPrestaShop psgdpr
- CVE-2026-92803LibreTranslate through 1.9.6 Missing Access Check on the download_file RouteLibreTranslate
- CVE-2026-92802kan through 0.6.0 Authorization Bypass via GitHub Project Importkanbn kan
- CVE-2026-92790Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Headerhigress-group higress
Show all 378 entriesShow fewer entries
- CVE-2026-92781Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributesBuilderIO @builder.io/sdk-react · BuilderIO @builder.io/… +5
- CVE-2026-92778CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routesyahoo CMAK
- CVE-2026-92774Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omissionrequarks Wiki.js
- CVE-2026-92764OpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scopeopencve
- CVE-2026-92754PatrowlManager through 1.8.4 Improper Access Control via users APIPatrowlManager
- CVE-2026-76426Cisco ISE REST API SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20121CIsco FTD Bypass Access ListCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76431Cisco Identity Services Engine Arbitrary File Deletion VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76427Cisco ISE XML External Entity Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76447Cisco Identity Services Engine Certificate Reload VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20285Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20287Cisco Identity Services Engine Hardening Release - Improper Privlege Management VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20286Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76438Cisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityCisco BroadWorks
- CVE-2026-20072ISE information disclosureCisco Identity Services Engine Software
- CVE-2026-76446Cisco Identity Services Engine External Entity Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20071ISE 802.1x Session Hijack VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76432Cisco Identity Services Engine Arbitrary File Write VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76448Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76434Cisco Identity Services Engine Arbitrary File Read VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20120Cisco FTD ACL bypass vulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76444Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76451Cisco Identity Services Engine Certificate Management SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20290Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCisco Secure Firewall Threat Defense (FTD) Software
- CVE-2026-20235Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76449Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76450Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20309Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76428Cisco ISE Profiler SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76433Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20248Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76439Cisco Identity Services Engine Event Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20282Cisco Identity Services Engine Authenticated Write VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20283Cisco Identity Services Engine IPSec Open API Command Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-92527chatwoot Shopify OAuth callbacks_controller.rb server-side request forgerychatwoot
- CVE-2026-20350Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection VulnerabilityCisco ThousandEyes Enterprise Agent
- CVE-2026-81870OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsopen-telemetry opentelemetry-go · go.opentelemetry.io/ot… +4
- CVE-2026-62949AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONronf asyncssh · asyncssh
- CVE-2026-92526itsourcecode Leave Management System index.php sql injectionitsourcecode Leave Management System
- CVE-2026-92475GPAC downloader.c wait_for_header_and_parse out-of-boundsGPAC
- CVE-2026-87026Tanium addressed an improper access controls vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87113Tanium addressed an improper access controls vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87116Tanium addressed a server-side request forgery vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87076Tanium addressed an information disclosure vulnerability in Discover.Tanium Discover
- CVE-2026-81866Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector ConfigurationApache Software Foundation org.apache.nifi:nifi-web-api
- CVE-2026-82561Apache NiFi: Missing Authorization for Components Referenced in Flow Update MethodsApache Software Foundation org.apache.nifi:nifi-web-api
- CVE-2026-86089Apache NiFi: Missing Process Group Authorization for Connector MigrationApache Software Foundation org.apache.nifi:nifi-web-api
- CVE-2026-92474GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after freeGPAC
- CVE-2026-63225Redocly CLI: Path traversal when using `split` commandredocly-cli · @redocly/cli
- CVE-2026-86071Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction rootjunrar · com.github.junrar:junrar
- CVE-2026-73462On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all…Arista Networks EOS
- CVE-2026-92473GPAC BIFS commands.c gf_sg_command_del use after freeGPAC
- CVE-2026-73457Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to…Arista Networks EOS
- CVE-2026-91103HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-73442On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the…Arista Networks EOS
- CVE-2026-91101HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-91100HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-73443On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2…Arista Networks EOS
- CVE-2026-91099HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-92472GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after freeGPAC
- CVE-2026-77360oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypassmiddleapi orpc · @orpc/server
- CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM ProxyBerriAI litellm · litellm
- CVE-2026-81176Svelte devalue: DoS via malformed inputsveltejs devalue · devalue
- CVE-2026-75025Mattermost Desktop local network access from server-rendered contentMattermost
- CVE-2026-92418ChangeWeDer crm Save Endpoint customer.serve.js cross site scriptingChangeWeDer crm
- CVE-2026-69147vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationvllm-project vllm · vllm
- CVE-2026-92416Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertionOpen5GS
- CVE-2026-92413Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereferenceArtifex MuPDF
- CVE-2026-84397Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-18120Missing Authorization in legacy Express entries search endpoint allows disclosure of Express entry dataConcrete CMS
- CVE-2026-92406SourceCodester Inventory and Monitoring System btn_functions.php add sql injectionSourceCodester Inventory and Monitoring System
- CVE-2026-85387Concrete CMS before 9.5.4 allows a deactivated user to retain OAuth-authenticated REST API accessConcrete CMS
- CVE-2026-92405SourceCodester Inventory and Monitoring System index.php sql injectionSourceCodester Inventory and Monitoring System
- CVE-2026-92402ChangeWeDer crm top.upstudy.crm.controller.UserController UserController.java index authorizationChangeWeDer crm
- CVE-2026-87031Missing authorization in the REST API user creation endpoint in Concrete CMS 9.2.0 through 9.5.3 allows arbitrary account creationConcrete CMS
- CVE-2026-87028Cross-Board IDOR in the Board Custom Slot Preview in Concrete CMS 9.0.0 through 9.5.3 Discloses Restricted Page Summary FieldsConcrete CMS
- CVE-2026-57173vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completionsvllm-project vllm · vllm
- CVE-2026-92401ChangeWeDer crm improper authenticationChangeWeDer crm
- CVE-2026-84993MikroORM: SQL injection via unvalidated order direction in orderBymikro-orm
- CVE-2026-86358Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.Dell Update Package Framework
- CVE-2026-85732oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probingoras-project oras-go · oras.land/oras-go/v2
- CVE-2026-71182Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following')…Dell Update Package Framework
- CVE-2026-71181Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following')…Dell Update Package Framework
- CVE-2026-69200node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086)node-opcua
- CVE-2026-92399GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflowGPAC
- CVE-2026-59944Composer: CVE-2026-59946 fix bypass via symlinked package bin pathcomposer · composer/composer
- CVE-2026-19607Keycloak-services: keycloak-services: broker-originated username collision causes account lockoutRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-92615Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedRed Hat RHEM 1.2 for RHEL · Red Hat Edge Manager +1
- CVE-2026-92627Heap Use-After-Free in H5T__conv_f_fThe HDF Group HDF5
- CVE-2026-92385SourceCodester Online Food Ordering System Category Update update_category.php cross site scriptingSourceCodester Online Food Ordering System
- CVE-2026-76104Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS.Dell ObjectScale
- CVE-2026-26947Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management…Dell ECS
- CVE-2025-36591Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky…Dell Elastic Cloud Storage
- CVE-2026-92383PbootCMS User Management UserController.php mod cross-site request forgeryPbootCMS
- CVE-2026-84859Scada-LTS Authenticated Blind SQL InjectionScada-LTS
- CVE-2026-92381PbootCMS Template Rendering ContentController.php decode_string cross site scriptingPbootCMS
- CVE-2026-92569Hippo4j through 1.5.0 SSRF via clientAddress Parameteropengoofy hippo4j
- CVE-2026-92568MLRun through 1.11.0 Server-Side Request Forgery via Webhookmlrun
- CVE-2026-92565Rallly before 4.15.0 Information Disclosure via polls.getlukevella rallly
- CVE-2026-92380WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgeryWuzhiCMS
- CVE-2026-77401Zope AccessControl: Information disclosure through Python string `format` and `format_map` functionszopefoundation AccessControl · accesscontrol
- CVE-2026-77119NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsetsISC BIND
- CVE-2026-75029Message parser retains every identical singleton RDATA, enabling wire-to-work amplificationISC BIND
- CVE-2026-92366code-projects Matrimonial System Regular Search search.php sql injectioncode-projects Matrimonial System
- CVE-2026-19668Resource Exhaustion via Excessive DNSSEC Cryptographic Material MatchingISC BIND
- CVE-2026-88976@platejs/core HTML deserialization can trigger browser behavior during parsingudecode plate · @platejs/core
- CVE-2026-19033Unauthenticated IXFR deltas are applied to the live zone before TSIG verificationISC BIND
- CVE-2026-61709OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a…openfga · github.com/openfga/openfga
- CVE-2026-89031Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_postAdenion Blog2Social
- CVE-2026-89030Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_userAdenion Blog2Social
- CVE-2026-92365vllm-project vllm thinking_budget_state.py algorithmic complexityvllm-project vllm
- CVE-2026-89029Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX HandlerAdenion Blog2Social
- CVE-2026-78301Out-of-zone database nodes can become authoritative zone cutsISC BIND
- CVE-2026-92141Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform…Jenkins Project Jenkins Keycloak Authentication Plugin
- CVE-2026-92140Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes…Jenkins Project Jenkins Gitee Plugin
- CVE-2026-92139Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs…Jenkins Project Jenkins Bitbucket Push and Pull Request Plu…
- CVE-2026-92138The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the…Jenkins Project Jenkins Bitbucket Server Integration Plugin
- CVE-2026-92133Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials…Jenkins Project Jenkins GitLab Plugin
- CVE-2026-92132Jenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the build scan link detected in the build log…Jenkins Project Jenkins Gradle Plugin
- CVE-2026-92131Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library…Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin
- CVE-2026-92130Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the…Jenkins Project Jenkins Pipeline: Multibranch Plugin
- CVE-2026-19941checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proofISC BIND
- CVE-2026-19662qpcache NOQNAME proof use-after-free crashes recursive resolverISC BIND
- CVE-2026-92364itsourcecode Leave Management System index.php sql injectionitsourcecode Leave Management System
- CVE-2026-85104Brain stimulation parameters can be modified via Bluetooth in SoomaSooma tDCS Home Therapy
- CVE-2026-92363ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumptionag-ui-protocol ag-ui
- CVE-2026-92362ag-ui-protocol ag-ui SSE Frame sse.rs resource consumptionag-ui-protocol ag-ui
- CVE-2026-56719MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndXMikroTik RouterOS
- CVE-2026-92361ag-ui-protocol ag-ui SSE Client client.go resource consumptionag-ui-protocol ag-ui
- CVE-2026-73169Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')…Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-92360ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validationag-ui-protocol ag-ui
- CVE-2026-92359ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policyag-ui-protocol ag-ui
- CVE-2026-92461yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpointguchengwuyue yshop-crm
- CVE-2026-92458yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSaleguchengwuyue yshop-crm
- CVE-2026-92455yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpointsguchengwuyue yshop-crm
- CVE-2026-92357a2ui-project a2ui Model Processor model-processor.ts information disclosurea2ui-project a2ui
- CVE-2026-86107Security Advisory 0180Arista Networks VeloCloud
- CVE-2026-90040KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zappedLinux
- CVE-2026-90039NFSD: Guard admin state-revocation walks with NFSD_NET_UPLinux
- CVE-2026-90035drm/amd/display: fix division by zero in get_estimated_bw()Linux
- CVE-2026-90034usb: image: mdc800: change kmalloc() to kzalloc()Linux
- CVE-2026-90033ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()Linux
- CVE-2026-90031usb-storage: ene_ub6250: fix race between scan work and probeLinux
- CVE-2026-90029usb: storage: realtek_cr: fix use-after-free on disconnectLinux
- CVE-2026-90028usb: typec: hd3ss3220: track VBUS enable state per consumerLinux
- CVE-2026-90024usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqsLinux
- CVE-2026-90023usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()Linux
- CVE-2026-90021usb: gadget: f_midi: initialize work in f_midi_alloc()Linux
- CVE-2026-90020USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()Linux
- CVE-2026-90019usb: gadget: fix null pointer dereference in usb_put_function_instance()Linux
- CVE-2026-90015xhci: fix lost bounce buffers on TDs spanning several ring segmentsLinux
- CVE-2026-90006samples/damon/mtier: handle damon_stop() failureLinux
- CVE-2026-90005samples/damon/wsse: handle damon_start() failureLinux
- CVE-2026-90004mm/damon/core: handle region split failure in apply_min_nr_regions()Linux
- CVE-2026-89996dma-buf: dma-heap: don't publish fd before copy_to_user() succeedsLinux
- CVE-2026-89993dmaengine: dw-edma: Initialize IRQ data before requesting IRQsLinux
- CVE-2026-89991bpf: Fix infinite loop in pcpu_freelist push with one possible CPULinux
- CVE-2026-89989ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()Linux
- CVE-2026-89987mm/huge_memory: transfer the pmd dirty bit to the folio on zapLinux
- CVE-2026-89984perf/x86/intel: Fix kernel address leakages in LBR stackLinux
- CVE-2026-89983i2c: core: fix debugfs UAF on adapter removalLinux
- CVE-2026-89982i2c: mux: Fix channel node leak on adapter add failureLinux
- CVE-2026-89981arm64: Don't read GMID_EL1 when MTE is disabledLinux
- CVE-2026-89978accel/amdxdna: return early from a zero-length flushLinux
- CVE-2026-89977accel/ethosu: check MMIO mapping errors in probeLinux
- CVE-2026-89976accel/ethosu: fix job completion fence cleanupLinux
- CVE-2026-89975nvme-fabrics: fix DHCHAP secret leak on parse failureLinux
- CVE-2026-89966mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folioLinux
- CVE-2026-89964parisc: eisa: Fix infinite loop when parsing invalid IRQ valueLinux
- CVE-2026-89963powerpc/kexec_file: Fix null-ptr-def in extra size calculationLinux
- CVE-2026-89962powerpc/kexec_file: Prevent kexec range truncationLinux
- CVE-2026-89958s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULLLinux
- CVE-2026-89956s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objectsLinux
- CVE-2026-89955s390/vfio-ap: Fix NULL deref in status_show() during queue probeLinux
- CVE-2026-89953mtd: mtdoops: free page bitmap when the backing MTD is removedLinux
- CVE-2026-89952mtd: rawnand: validate ONFI extended parameter page sectionsLinux
- CVE-2026-89950batman-adv: mcast: linearize skbuff for packet generationLinux
- CVE-2026-89949batman-adv: dat: avoid unaligned fault in IP extractionLinux
- CVE-2026-89948batman-adv: bla: fix freeing of claims on meshif deletionLinux
- CVE-2026-89946ASoC: cs35l33: drain threaded IRQ before runtime suspendLinux
- CVE-2026-89945ASoC: cs35l34: drain threaded IRQ before runtime suspendLinux
- CVE-2026-89944ASoC: hdac_hda: Fix hlink refcount leak on component registration failureLinux
- CVE-2026-89939iio: chemical: atlas-sensor: fix PM reference leak in buffer postenableLinux
- CVE-2026-89937iio: chemical: sgp30: Handle IAQ thread creation failureLinux
- CVE-2026-89936iio: dac: m62332: Fix regulator reference count imbalanceLinux
- CVE-2026-89935iio: light: apds9306: fix PM reference leak in apds9306_read_data()Linux
- CVE-2026-89934iio: light: ltrf216a: fix runtime PM reference leak in error pathLinux
- CVE-2026-89933iio: pressure: dps310: fix NULL pointer dereference on ACPI probeLinux
- CVE-2026-89931KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-ExitLinux
- CVE-2026-89926KVM: s390: Fix length check __import_wp_info()Linux
- CVE-2026-89925KVM: s390: Fix memory leak in guest debug handlingLinux
- CVE-2026-89924KVM: s390: Fix old_data leak in guest debug error pathLinux
- CVE-2026-89923KVM: s390: Free guest debug data on vcpu destroyLinux
- CVE-2026-89921KVM: s390: Zero initialize data structures for inject_pfault_tokenLinux
- CVE-2026-89917KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmappingLinux
- CVE-2026-89909LoongArch: KVM: Free init resources if kvm_init() failsLinux
- CVE-2026-89905LoongArch: BPF: Move arena register slot below TCC contextLinux
- CVE-2026-89901media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL derefLinux
- CVE-2026-89900media: cec: core: Fix kmemleak due to missed rc_free_device() callLinux
- CVE-2026-89896media: cedrus: fix memory leak in cedrus_init_ctrls()Linux
- CVE-2026-89895media: cobalt: Avoid freeing ALSA private data twiceLinux
- CVE-2026-89892media: em28xx: defer audio-only extension registrationLinux
- CVE-2026-89891media: em28xx: fix use-after-free of dev_next->devlist on disconnectLinux
- CVE-2026-89889media: i2c: imx415: Release runtime PM reference on VBLANK errorLinux
- CVE-2026-89886media: intel/ipu6: fix async notifier cleanup leak on parse errorLinux
- CVE-2026-89884media: platform: mtk-mdp3: fix NULL deref on failed SCP lookupLinux
- CVE-2026-89881media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leakLinux
- CVE-2026-89879media: s2255: bound JPEG frame size before copying into the bufferLinux
- CVE-2026-89878media: s2255: check firmware size before reading trailing markerLinux
- CVE-2026-89876media: tda18250: fix possible integer overflowLinux
- CVE-2026-89874media: v4l2-async: avoid deleting unlinked ASC entry on link errorLinux
- CVE-2026-89872media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_linkLinux
- CVE-2026-89871media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failureLinux
- CVE-2026-89869media: qcom: iris: use disable_irq() during power-offLinux
- CVE-2026-89868media: chips-media: wave5: Add timeout while stop_streamingLinux
- CVE-2026-89867media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queuedLinux
- CVE-2026-89866media: chips-media: wave5: Resume device before setting EOS flagLinux
- CVE-2026-89865scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlersLinux
- CVE-2026-89864scsi: qla2xxx: Bound i2c->length in I2C bsg handlersLinux
- CVE-2026-89862scsi: qla2xxx: Fix BSG job leak on validate flash image error pathLinux
- CVE-2026-89859scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leakLinux
- CVE-2026-89858scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()Linux
- CVE-2026-89855scsi: qla2xxx: Serialize flash version read in reset handlerLinux
- CVE-2026-89853scsi: qla2xxx: Fix FCE trace use-after-free during firmware dumpLinux
- CVE-2026-89852scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()Linux
- CVE-2026-89851scsi: qla2xxx: Fix FCE trace enable parsing in debugfsLinux
- CVE-2026-89850scsi: qla2xxx: Don't query firmware state while chip is downLinux
- CVE-2026-89845scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()Linux
- CVE-2026-89843scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leakLinux
- CVE-2026-89842scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not startedLinux
- CVE-2026-89839f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()Linux
- CVE-2026-89837f2fs: fix dentry folio leak in find_in_levelLinux
- CVE-2026-89835f2fs: avoid NULL checkpoint thread access in sysfsLinux
- CVE-2026-89834f2fs: fix to migrate all curseg types during free_segment_rangeLinux
- CVE-2026-89833f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()Linux
- CVE-2026-89831f2fs: protect critical_task_priority updates with s_umountLinux
- CVE-2026-89830f2fs: fix valid block count leak on data block allocation failureLinux
- CVE-2026-89828drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()Linux
- CVE-2026-89827drm/amdgpu: avoid force-completing uninitialized UVD ringsLinux
- CVE-2026-89824drm/panel-edp: fix i2c adapter leak on probe failureLinux
- CVE-2026-89822drm/i915: Guard against NULL driver_data in i915_pci_probe()Linux
- CVE-2026-89821drm/amd/display: avoid divide-by-zero in __is_lut_linear()Linux
- CVE-2026-89820drm/amd/display: fix dc_lock leak on GPU reset error pathsLinux
- CVE-2026-89817drm/gud: NUL-terminate TV mode names read from the deviceLinux
- CVE-2026-89816drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is usedLinux
- CVE-2026-89813drm/amdgpu: force complete the KIQ ring fences on resetLinux
- CVE-2026-89812drm/amdgpu: force complete the MES ring fences on resetLinux
- CVE-2026-89809drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqdsLinux
- CVE-2026-89807drm/amdkfd: guard against NULL restore_mqd in CRIU queue restoreLinux
- CVE-2026-89802drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE opLinux
- CVE-2026-89800drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSELinux
- CVE-2026-89798rpcrdma: arm rn_done before publishing the notificationLinux
- CVE-2026-89797power: supply: ab8500_fg: fix use-after-free on removeLinux
- CVE-2026-89796mm/damon/core: avoid infinite kdamond_merge_regions() internal loopLinux
- CVE-2026-89794ksmbd: zero pipe read compound paddingLinux
- CVE-2026-92356a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumptiona2ui-project a2ui
- CVE-2026-77190Security Advisory 0177Arista Networks EOS
- CVE-2026-76151Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)qt
- CVE-2026-73468Security Advisory 0175Arista Networks EOS
- CVE-2026-73440Security Advisory 0178Arista Networks EOS
- CVE-2026-73469Security Advisory 0176Arista Networks EOS
- CVE-2026-73438Security Advisory 0172Arista Networks EOS
- CVE-2026-84501Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProviderApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-84439Apache ZooKeeper: Audit log injection via unsanitized output from multiple sourcesApache Software Foundation org.apache.zookeeper:zookeeper
- CVE-2026-73436Security Advisory 0171Arista Networks EOS
- CVE-2026-86443Cleartext Storage of Sensitive Information VulnerabilityFermax Electronica S.A.U. DuoxMe
- CVE-2026-19640Security Advisory 0170Arista Networks EOS
- CVE-2026-73463Security Advisory 0169Arista Networks EOS
- CVE-2026-73445Security Advisory 0167Arista Networks EOS
- CVE-2026-86465Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled keyApache Software Foundation apache-airflow-providers-akeyless
- CVE-2026-92081fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responsesfastify
- CVE-2026-89790ipv6: avoid divide by zero in rt6_multipath_rebalanceLinux
- CVE-2026-89787ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()Linux
- CVE-2026-89785fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid initLinux
- CVE-2026-89784SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6Linux
- CVE-2026-89780net: qualcomm: rmnet: restore skb->dev on deaggregated framesLinux
- CVE-2026-89776vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributesLinux
- CVE-2026-85501Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSECNLnet Labs Unbound
- CVE-2026-82720Use-after-free in DoH stream cleanup code pathNLnet Labs Unbound
- CVE-2026-80225Possible degradation of service from continuous queries on the same TCP/DoT connectionNLnet Labs Unbound
- CVE-2026-78227Use-after-free in DoQ stream output buffer on reset re-transmissionNLnet Labs Unbound
- CVE-2026-77955Possible ZONEMD verification bypass windowNLnet Labs Unbound
- CVE-2026-77860'serve-expired' can bypass Unbound 'wait-limit'NLnet Labs Unbound
- CVE-2026-86338Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracleash-project ash · ash
- CVE-2026-88255mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a…ZenHive mpp · mpp
- CVE-2026-89186mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid…ZenHive mpp · mpp
- CVE-2026-89207A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions <…Siemens WTV676-HB6035 Web Interface · Siemens WTV776-HB6035…
- CVE-2026-86341Access Control Check Implemented After Asset is Accessed in GitLabGitLab
- CVE-2026-27553Information Disclosure via Schema Path ManipulationPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-92091Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops arrayRed Hat Enterprise Linux · Red Hat Ansible Automation Pl… +2
- CVE-2026-81326QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's…QualitySoft QND Premium · QualitySoft QND Standard +1
- CVE-2024-11222Time-of-check Time-of-use (TOCTOU) Race Condition in GitLabGitLab
- CVE-2026-3855Improper Control of Resource Identifiers ('Resource Injection') in GitLabGitLab
- CVE-2026-7514Missing Authorization in GitLabGitLab
- CVE-2026-8030Missing Authorization in GitLabGitLab
- CVE-2026-16794Missing Authorization in GitLabGitLab
- CVE-2026-19619Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-86475Appointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment SubmissionAppointment Hour Booking
- CVE-2026-84906Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction ReplayEventin
- CVE-2026-19857Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML TokenFormidable Forms
- CVE-2026-13407Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification EmailsRoyal Addons for Elementor
- CVE-2026-89328FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access ModificationFluentBoards
- CVE-2026-89327FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' ParameterFluentBoards
- CVE-2026-88910KBoard < 6.7 - Unauthenticated Board Media Deletion via IDORkboard
- CVE-2026-87959WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings UpdateWPBot
- CVE-2026-87907Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST RoutesRox Appointment Booking
- CVE-2026-87896Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST RouteRox Appointment Booking
- CVE-2026-87860Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRFSubscriptions for WooCommerce
- CVE-2026-87854Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key BypassSubscriptions for WooCommerce
- CVE-2026-87828Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State UpdateSeraphinite Accelerator
- CVE-2026-86823Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu ParameterNewsletter
- CVE-2026-86784Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data SourceVisualizer
- CVE-2026-86449LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST APILearnPress
- CVE-2026-86448LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_orderLearnPress
- CVE-2026-86447LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajaxLearnPress
- CVE-2026-86445LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajaxLearnPress
- CVE-2026-85641Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' ParameterFormidable Forms
- CVE-2026-85572Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment DisclosureTutor LMS
- CVE-2026-85349FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDORFluentBoards
- CVE-2026-85131WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRFWPLP Cookie Consent
- CVE-2026-84907Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST EndpointEventin
- CVE-2026-84905Eventin < 4.1.24 - Contributor+ User Creation via Speaker CreationEventin
- CVE-2026-84088Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetXpro Addons — 140+ Widgets for Elementor
- CVE-2026-82126Schema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema GenerationSchema & Structured Data for WP & AMP
- CVE-2026-82125Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDORSchema & Structured Data for WP & AMP
- CVE-2026-82124Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema OutputSchema & Structured Data for WP & AMP
- CVE-2026-78474Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' ParameterNi WooCommerce Sales Report
- CVE-2026-77702Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_tokenEventin
- CVE-2026-76559WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL HandlingWP Import Export Lite
- CVE-2026-76558WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field NamesWP Import Export Lite
- CVE-2026-76557WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import OptionsWP Import Export Lite
- CVE-2026-76556WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter RulesWP Import Export Lite
- CVE-2026-76555WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path TraversalWP Import Export Lite
- CVE-2026-76553WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path TraversalWP Import Export Lite
- CVE-2026-92358Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linkingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-18555Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting…wordplus Better Messages – Chat Rooms, Group Chat, Private…
- CVE-2026-5920Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameterboldthemes Bold Page Builder
- CVE-2026-11996Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Fieldcodesupplyco Advanced Popups
- CVE-2026-11984Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameterspacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2026-16588WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameterwpdirectorykit WP Directory Kit
- CVE-2026-86109Security Advisory 0182Arista Networks VeloCloud Edge
- CVE-2026-92247synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted uploadsynaptikcms synaptik-cms
- CVE-2026-73450Security Advisory 0161Arista Networks EOS
- CVE-2026-92221gedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injectiongedelumbung HospitalManagement
- CVE-2026-92220vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionvllm-project vLLM
- CVE-2026-92217a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributesa2ui-project a2ui
- CVE-2026-92298EspoCRM through 10.0.8 Weak Token Generation via rand()EspoCRM
- CVE-2026-92216a2ui-project a2ui Binder generic-binder.ts openUrl redirecta2ui-project a2ui
- CVE-2026-92215a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgerya2ui-project a2ui
- CVE-2026-92214a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scriptinga2ui-project a2ui
- CVE-2026-92213a2ui-project a2ui Angular Renderer server-to-client.ts z.any injectiona2ui-project a2ui
- CVE-2025-56566MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage.
- CVE-2026-88593kkFileView 5.0.0 through 5.0.2 allows reflected XSS via the /onlinePreview endpoint.