CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99096io_uring/register: don't exempt disabled rings from task restrictionsLinux
- CVE-2026-99095drm/vc4: drain the hangcheck timer and works on V3D unbindLinux
- CVE-2026-99094Bluetooth: btintel_pcie: fix TX descriptor bounds checkLinux
- CVE-2026-99093mm: don't schedule deferred kernel page table freeing while bootingLinux
- CVE-2026-99092riscv: patch: fix handling of bpf-jit execmem addressesLinux
- CVE-2026-99091Bluetooth: MGMT: Fix status of pending commands flushed on power offLinux
- CVE-2026-99090drm/amdgpu: serialize vblank counter reads against GPU resetLinux
- CVE-2026-99089ASoC: samsung: i2s: enable op_clk in probe to balance runtime PMLinux
- CVE-2026-99088net: openvswitch: validate transport header presence in set_ipv6_addrLinux
- CVE-2026-90885Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was ResolvedApache Software Foundation Apache Camel
- CVE-2026-77062Clickjacking in boneIOboneIO
- CVE-2026-94386Apache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token CacheApache Software Foundation Apache Camel
- CVE-2026-77061Missing Authentication for Critical Function in boneIOboneIO
- CVE-2026-77060Incorrect Permission Assignment for Critical Resource in boneIOboneIO black_debian_images
- CVE-2026-77059TOCTOU Race Condition in boneIOboneIO
- CVE-2026-77058Cross-Site Request Forgery (CSRF) in boneIOboneIO
- CVE-2026-77057Improper Restriction of Excessive Authentication Attempts in boneIOboneIO
- CVE-2026-77056Use of Default Credentials in boneIOboneIO black_debian_images
- CVE-2026-77055Improper Privilege Assignment in boneIOboneIO black_debian_images
- CVE-2026-77054Cleartext Storage of Sensitive Information in boneIOboneIO
- CVE-2026-77053Missing Authentication in Default Configuration in boneIOboneIO
- CVE-2026-77052Missing Authentication for Node-RED in boneIOboneIO
- CVE-2026-116340iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorizationiFlytek astron-agent
- CVE-2026-112345TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key ExposureSciener TTLock
- CVE-2026-3322Privilege escalation via request replaying in Lobster_proLobster DATA Lobster_pro
- CVE-2026-110748Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 filesApache Software Foundation org.apache.sis:sis-metadata
- CVE-2026-92171Infinispan-operator: infinispan operator: sensitive information disclosure due pod args storeRed Hat Data Grid
- CVE-2026-116497Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemonRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-116339iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklistiFlytek astron-agent
- CVE-2026-93848Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System AdministratorMattermost