CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-98934Linux kernel: ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()Linux
- CVE-2026-98933Linux kernel: usb: hub: use shorter 120ms post resume hold for SS root hubsLinux
- CVE-2026-98932Linux kernel: EDAC/altera: Fix use-after-free in error pathsLinux
- CVE-2026-98931Linux kernel: mtd: spinand: fix NULL pointer dereference with no ECC engineLinux
- CVE-2026-57117PraisonAI: Compute-bridged file tools allow shell command injectionMervinPraison PraisonAI · praisonai
- CVE-2026-98930Linux kernel: KVM: s390: Fix IRQ injection with SIGP Stop and Store StatusLinux
- CVE-2026-57146PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by defaultMervinPraison PraisonAI
- CVE-2026-98929Linux kernel: macsec: initialize SecY before registering the netdeviceLinux
- CVE-2026-98928Linux kernel: KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2Linux
- CVE-2026-57144PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailableMervinPraison PraisonAI
- CVE-2026-57142PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yamlMervinPraison PraisonAI
- CVE-2026-57121PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APIMervinPraison PraisonAI · praisonai-platform
- CVE-2026-57116PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocationMervinPraison PraisonAI · praisonai
- CVE-2026-98927Linux kernel: KVM: arm64: nv: Fix life cycle of the nested_mmus arrayLinux
- CVE-2026-98926Linux kernel: drm/amd/display: Remove sink usage from DPMSLinux
- CVE-2026-98925Linux kernel: bpf, sockmap: Fix self-redirect copied_seq double-countingLinux
- CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingMervinPraison PraisonAI · praisonai
- CVE-2026-57113PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionMervinPraison PraisonAI · praisonai
- CVE-2026-98924Linux kernel: fs: avoid repeated scans in evict_inodes()Linux
- CVE-2026-98923Linux kernel: arm64: io: Reject non-user protection in ioremap_prot()Linux
- CVE-2026-98922Linux kernel: net: emac: move setting of netops to fix crashLinux
- CVE-2026-98921Linux kernel: ovl: fix UAF in ovl_do_mkdir() debug printLinux
- CVE-2026-98920Linux kernel: netfs: Fix missing alloc tagging of direct mempool allocationsLinux
- CVE-2026-98919Linux kernel: drm/xe: harden adjust_idledly() against divide-by-zero and overflowLinux
- CVE-2026-98918Linux kernel: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()Linux
- CVE-2026-98917Linux kernel: parisc: Increase kernel stack size to 32kbLinux
- RUSTSEC-2026-0387Multiple timing variability issues in operations intended to be constant-timecrypto-bigint
- CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsMervinPraison PraisonAI · praisonai
- CVE-2026-56838PraisonAI recipe.run_stream skips dangerous-tool policy enforcementMervinPraison PraisonAI · praisonai
- CVE-2026-56837PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingMervinPraison PraisonAI · praisonai