CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardMervinPraison PraisonAI · praisonai
- CVE-2026-56835PraisonAI Slack app_mention bypasses configured user/channel authorizationMervinPraison PraisonAI · praisonai
- CVE-2026-56834PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storageMervinPraison PraisonAI · praisonai
- CVE-2026-56833PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalMervinPraison PraisonAI · praisonai
- CVE-2026-56832PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsMervinPraison PraisonAI · praisonai
- CVE-2026-98916Linux kernel: wifi: nl80211: check link is beaconing for color changeLinux
- CVE-2026-98915Linux kernel: media: video-i2c: use vb2_video_unregister_device on driver removalLinux
- CVE-2026-98914Linux kernel: drm/amdgpu: cap ATOM command table nesting depthLinux
- CVE-2026-98913Linux kernel: net: thunderx: fix PTP device ref leak in nicvf_probe()Linux
- CVE-2026-98912Linux kernel: ALSA: seq: oss: Reject reads that cannot fit the next eventLinux
- CVE-2026-98911Linux kernel: dpaa2-switch: fix the error path in dpaa2_switch_rx()Linux
- CVE-2026-98910Linux kernel: drm/amdkfd: Unwind debug trap enable on copy_to_user failureLinux
- CVE-2026-98909Linux kernel: net: cpsw_new: unregister devlink on port registration failureLinux
- CVE-2026-98908Linux kernel: net: microchip: sparx5: clean up PSFP resources on flower setup failureLinux
- CVE-2026-98907Linux kernel: btrfs: protect sb_write_pointer() with invalidate lockLinux
- CVE-2026-98906Linux kernel: net: lan966x: restore RX state on reload failureLinux
- CVE-2026-98905Linux kernel: drm/amdkfd: Properly acquire queue buffers in CRIU restoreLinux
- CVE-2026-98904Linux kernel: mailbox: imx: Use devm_pm_runtime_enable()Linux
- CVE-2026-98903Linux kernel: mailbox: imx: Add a channel shutdown fieldLinux
- CVE-2026-98902Linux kernel: md/raid5: let stripe batch bm_seq comparison wrap-safeLinux
- CVE-2026-98901Linux kernel: ksmbd: fix lease break and ack state handlingLinux
- CVE-2026-98900Linux kernel: xen/gntalloc: validate grant count before allocationLinux
- CVE-2026-98899Linux kernel: netfilter: ipset: mark the rcu locked areas properlyLinux
- CVE-2026-98898Linux kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initializedLinux
- CVE-2026-98897Linux kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ackLinux
- CVE-2026-112904Vvveb: Path Traversal in nextRestore() and nextBackup()givanz Vvveb
- CVE-2026-98896Linux kernel: thunderbolt: Keep the domain reference while processing hotplugLinux
- CVE-2026-98895Linux kernel: net/mlx5: HWS, Handle destroying table that has a miss tableLinux
- CVE-2026-98894Linux kernel: drm/amd/ras: reset CPER ring on corrupt entry sizeLinux
- CVE-2026-98893Linux kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload sizeLinux