CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-99224keys: Protect the type name while describing a keyLinux
- CVE-2026-99223keys: make keyring indexes independent of kernel addressesLinux
- CVE-2026-99222keys: Protect the read method check against type removalLinux
- CVE-2026-99221keys/trusted_keys: return immediately after TPM unseal failureLinux
- CVE-2026-99220asymmetric_keys: reject trust keys without IDsLinux
- CVE-2026-99219ftrace: Initialize modname and offset in print_rec()Linux
- CVE-2026-99218coredump: hold RCU while releasing parked threadsLinux
- CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgerySUSE Rancher
- CVE-2026-109142Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same serverNLnet Labs Krill
- CVE-2026-109141Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk importNLnet Labs Krill
- CVE-2026-109140Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" tokenNLnet Labs Krill
- CVE-2026-16306CVE-2026-16306INFINITT Healthcare System Manager
- CVE-2026-120501An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable srcredimp otterwiki
- CVE-2026-120500An Otter Wiki before 2.26.2 Stored XSS via Math Code Blockredimp otterwiki
- CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerSUSE Rancher
- CVE-2026-2102XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameterWren Security wrensec-commons
- CVE-2026-104080Control Web Panel (CWP) < 1.29 OS Command Injection via valid_tokenControl Web Panel
- CVE-2026-77881Control Web Panel (CWP) < 1.29 Blind SQL Injection via user ParameterControl Web Panel
- CVE-2026-77880Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/Control Web Panel
- CVE-2026-77879Control Web Panel (CWP) < 1.16 SQL Injection via access_token() APIControl Web Panel
- CVE-2026-77878Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase APIControl Web Panel
- CVE-2026-77877Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root AccessControl Web Panel
- CVE-2026-77876Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryControl Web Panel
- CVE-2026-115654User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not ownEclipse Foundation Eclipse ThreadX
- CVE-2026-115653Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged modeEclipse Foundation Eclipse ThreadX
- CVE-2026-114408NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullEclipse Foundation Eclipse ThreadX NetX Duo
- CVE-2026-118052Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operationEclipse Foundation Eclipse ThreadX
- CVE-2026-73697Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorControl Web Panel
- CVE-2026-73696Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndexControl Web Panel
- CVE-2026-73695Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phpControl Web Panel