CVEs published April 22, 2026
337 CVEs were published on April 22, 2026: 18 critical, 92 high. 1 is now in CISA KEV.
- Published
- 337
- Critical
- 18
- High
- 92
- Medium
- 143
- Low
- 28
- Unrated
- 56
- Now in CISA KEV
- 1
- Fix available
- 201
Most affected products
- Linux
- 100
- Uutils coreutils · coreutils
- 21
- GitLab
- 11
- PowerDNS DNSdist
- 9
- Samsung Open Source ONE
- 9
- PowerDNS Recursor
- 7
- IBM Guardium Data Protection
- 5
- Spring Security · org.springframework.security:spring-secur…
- 5
- PowerDNS Authoritative
- 4
- py-pdf pypdf · pypdf
- 4
Critical 18
- CVE-2026-41176Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command executionrclone · github.com/rclone/rclone
- CVE-2026-29198In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can lead to account tRocket.Chat
- CVE-2026-41167Jellystat has SQL Injection that leads to to Remote Code ExecutionCyferShepard Jellystat
- CVE-2026-33656EspoCRM vulnerable to authenticated RCE via Formula with path traversal in attachment `sourceId`, exploitable by admin userespocrm
- CVE-2026-33471nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncationnimiq-block
- CVE-2026-34415Xerte Online Toolkits File Upload RCE via elfinder Connectorthexerteproject xerteonlinetoolkits
- CVE-2026-41468Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template InjectionBeghelli SicuroWeb
- CVE-2018-25272ELBA5 5.8.0 Remote Code Execution via Database AccessELBA5
- CVE-2018-25270ThinkPHP 5.0.23 Remote Code Execution via invokefunctionThinkPHP
- CVE-2026-31501net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX pathLinux
- CVE-2026-31478ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()Linux
- CVE-2026-31463iomap: fix invalid folio access when i_blkbits differs from I/O granularityLinux
- CVE-2026-31448ext4: avoid infinite loops caused by residual dataLinux
- CVE-2026-31444ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()Linux
- CVE-2026-31436dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()Linux
- CVE-2026-6356CVE-2026-6356Augmentt
- CVE-2026-4119Create DB Tables <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.phpjppreus Create DB Tables
- CVE-2026-6235Sendmachine for WordPress <= 1.0.20 - Unauthenticated SMTP Hijack to Privilege Escalation via manage_admin_requestsSendmachine for WordPress
High 92
- CVE-2026-5935TSSC/IMC is vulnerable to OS Command InjectionIBM Total Storage Service Console (TSSC) / TS4500 IMC
- CVE-2026-3621IBM WebSphere Application Server Liberty is affected by identity spoofingIBM WebSphere Application Server - Liberty
- CVE-2026-40517radare2 < 6.1.4 Command Injection via PDB Parser Symbol Namesradareorg radare2
- CVE-2026-41175Statamic: Unsafe method invocation via query value resolution allows data destructionstatamic cms · statamic/cms
- CVE-2026-41172Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)squidex
- CVE-2026-41171SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClientsquidex
- CVE-2026-41170Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requestssquidex
- CVE-2026-41454WeKan < 8.35 Missing Authorization via Integration REST APIwekan
- CVE-2026-40882OpenRemote has XXE in Velbus Asset Importopenremote · io.openremote:openremote-manager
- CVE-2026-41166OpenRemote has Improper Access Control via updateUserRealmRoles functionopenremote · io.openremote:openremote-manager
- CVE-2026-41134Kiota: Code Generation Literal Injectionmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-40937RustFS missing admin authorization on notification target endpoints, which allows unauthenticated configuration of event webhooksrustfs
- CVE-2026-33733EspoCRM has Admin TemplateManager path traversal that allows arbitrary file read write and deleteespocrm
- CVE-2026-34065nimiq-primitives: Node crash due to missing interlink validation in election macro block proposalsnimiq-primitives
- CVE-2026-34063network-libp2p: Peer can crash the node by opening discovery protocol substream twicenimiq network-libp2p
- CVE-2026-34413Xerte Online Toolkits Missing Authentication via connector.phpthexerteproject xerteonlinetoolkits
- CVE-2026-34414Xerte Online Toolkits Path Traversal via connector.phpthexerteproject xerteonlinetoolkits
- CVE-2026-26354Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version Dell PowerProtect Data Domain
- CVE-2026-4922Cross-Site Request Forgery (CSRF) in GitLabGitLab
- CVE-2026-35368uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) InjectionUutils coreutils · coreutils
- CVE-2026-35352uutils coreutils mkfifo Privilege Escalation via TOCTOU Race ConditionUutils coreutils · coreutils
- CVE-2026-35341uutils coreutils mkfifo Unauthorized Permission Change on Existing FilesUutils coreutils · uu_mkfifo
- CVE-2026-35338uutils coreutils chmod Path Traversal Bypass of --preserve-rootUutils coreutils · uu_chmod
- CVE-2026-5262Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-5816Improper Resolution of Path Equivalence in GitLabGitLab
- CVE-2018-25268LanSpy 2.0.1.159 Local Buffer Overflow via Scan FieldLizardsystems LanSpy
- CVE-2018-25265LanSpy 2.0.1.159 Local Buffer OverflowLizardsystems LanSpy
- CVE-2018-25261Iperius Backup 5.8.1 Local Buffer Overflow SEHIperiusbackup Iperius Backup
- CVE-2018-25260MAGIX Music Editor 3.1 Buffer Overflow via SEHMAGIX Music Editor
- CVE-2018-25259Terminal Services Manager 3.1 Buffer Overflow SEHLizardsystems Terminal Services Manager
- CVE-2026-33608Incomplete domain name sanitization duringPowerDNS Authoritative
- CVE-2026-31528perf: Make sure to use pmu_ctx->pmu for groupsLinux
- CVE-2026-31525bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MINLinux
- CVE-2026-31516xfrm: prevent policy_hthresh.work from racing with netns teardownLinux
- CVE-2026-31513Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_reqLinux
- CVE-2026-31511Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_completeLinux
- CVE-2026-31508net: openvswitch: Avoid releasing netdev before teardown completesLinux
- CVE-2026-31507net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe bufferLinux
- CVE-2026-31505iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()Linux
- CVE-2026-31504net: fix fanout UAF in packet_release() via NETDEV_UP raceLinux
- CVE-2026-31502team: fix header_ops type confusion with non-Ethernet portsLinux
- CVE-2026-31494net: macb: use the current queue number for statsLinux
- CVE-2026-31490drm/xe/pf: Fix use-after-free in migration restoreLinux
- CVE-2026-31488drm/amd/display: Do not skip unrelated mode changes in DSC validationLinux
- CVE-2026-31486hwmon: (pmbus/core) Protect regulator operations with mutexLinux
- CVE-2026-31484io_uring/fdinfo: fix OOB read in SQE_MIXED wrap checkLinux
- CVE-2026-31479drm/xe: always keep track of remap prev/nextLinux
- CVE-2026-31477ksmbd: fix memory leaks and NULL deref in smb2_lock()Linux
- CVE-2026-31476ksmbd: do not expire session on binding failureLinux
- CVE-2026-31475ASoC: sma1307: fix double free of devm_kzalloc() memoryLinux
- CVE-2026-31474can: isotp: fix tx.buf use-after-free in isotp_sendmsg()Linux
- CVE-2026-31473media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutexLinux
- CVE-2026-31471xfrm: iptfs: only publish mode_data after clone setupLinux
- CVE-2026-31470virt: tdx-guest: Fix handling of host controlled 'quote' buffer lengthLinux
- CVE-2026-31469virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is falseLinux
- CVE-2026-31468vfio/pci: Fix double free in dma-buf featureLinux
- CVE-2026-31467erofs: add GFP_NOIO in the bio completion if neededLinux
- CVE-2026-31464scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()Linux
- CVE-2026-31454xfs: save ailp before dropping the AIL lock in push callbacksLinux
- CVE-2026-31453xfs: avoid dereferencing log items after push callbacksLinux
- CVE-2026-31450ext4: publish jinode after initializationLinux
- CVE-2026-31449ext4: validate p_idx bounds in ext4_ext_correct_indexesLinux
- CVE-2026-31447ext4: reject mount if bigalloc with s_first_data_block != 0Linux
- CVE-2026-31446ext4: fix use-after-free in update_super_work when racing with umountLinux
- CVE-2026-31442dmaengine: idxd: Fix possible invalid memory access after FLRLinux
- CVE-2026-31435netfs: Fix read abandonment during retryLinux
- CVE-2026-33593Denial of service via crafted DNSCrypt queryPowerDNS DNSdist
- CVE-2026-5750Insecure direct object reference (IDOR) vulnerability in FullstepFullstep
- CVE-2026-5749Inadequate access control vulnerability in FullstepFullstep
- CVE-2026-41651PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as rootPackageKit
- CVE-2026-6859Instructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`Red Hat Enterprise Linux AI (RHEL AI) · instructlab
- CVE-2026-0539Local Privilege Escalation in pcvisit service clientpcvisit Remote Host Modul
- CVE-2026-6857Camel-infinispan: camel-infinispan: remote code execution via unsafe deserializationcamel-infinispan · Red Hat build of Apache Camel 4.18.1… +5
- CVE-2026-6855Instructlab: instructlab: path traversal allows arbitrary directory creation and file writeRed Hat Enterprise Linux AI (RHEL AI) · instructlab
- CVE-2026-6846Binutils: binutils: arbitrary code execution via malformed xcoff object file processingbinutils · Red Hat Hardened Images +2
- CVE-2026-31433ksmbd: fix potencial OOB in get_file_all_info() for compound requestsLinux
- CVE-2026-31432ksmbd: fix OOB write in QUERY_INFO for compound requestsLinux
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeLinux
- CVE-2026-4132HTTP Headers <= 1.19.2 - Authenticated (Administrator+) External Control of File Name or Path to RCE via 'hh_htpasswd_path' and 'hh_www_authenticate_user' Parameterszinoui HTTP Headers
- CVE-2026-6023Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAXProgress Software Telerik UI for ASP.NET AJAX
- CVE-2026-6022Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAXProgress Software Telerik UI for ASP.NET AJAX
- CVE-2026-40542Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationApache Software Foundation Apache HttpClient · org.apache.h…
- CVE-2026-22754ervlet Path Not Correctly Included in Path Matching of XML Authorization RulesSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22753Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchersSpring Security · org.springframework.security:spring-secur…
- CVE-2026-6834aEnrich｜a+HRD - Missing AuthorizationaEnrich a+HRD
- CVE-2026-6833aEnrich｜a+HRD - SQL InjectionaEnrich a+HRD
- CVE-2026-5398Kernel use-after-free bug in the TIOCNOTTY handlerFreeBSD
- CVE-2026-41458OwnTone Server < 29.1 Race Condition DoS via DAAP Loginowntone-server
- CVE-2026-41146facil.io and downstream iodine ruby gem vulnerable to uncontrolled resource consumption and loop with unreachable exit conditionboazsegev facil.io · boazsegev iodine +1
- CVE-2026-41145MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploadsminio · github.com/minio/minio
- CVE-2026-40344MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploadsminio · github.com/minio/minio
- CVE-2026-35548An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0).
Medium, low and unrated 227
- CVE-2026-1726Multiple Vulnerabilities in IBM Guardium Key Lifecycle ManagerIBM Guardium Key Lifecycle Manager
- CVE-2025-36074Security vulnerability has been detected in IBM Security Verify DirectoryIBM Security Verify Directory
- CVE-2026-5926Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessIBM Verify Identity Access Container · IBM Security Veri… +2
- CVE-2026-1352IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined indexIBM Db2
- CVE-2026-1272IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-1274IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-6874ericc-ch copilot-api Header token dns rebindingericc-ch copilot-api · copilot-api
- CVE-2026-4917IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-4918IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-4919IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM Guardium Data Protection
- CVE-2026-41177Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interactionsquidex
- CVE-2026-41455WeKan < 8.35 SSRF via Webhook URLwekan
- CVE-2026-41314pypdf: Manipulated FlateDecode image dimensions can exhaust RAMpy-pdf pypdf · pypdf
- CVE-2026-41313pypdf: Possible long runtimes for wrong size values in incremental modepy-pdf pypdf · pypdf
- CVE-2026-41312pypdf: Manipulated FlateDecode predictor parameters can exhaust RAMpy-pdf pypdf · pypdf
- CVE-2026-41168pypdf has possible long runtimes for wrong size values in cross-reference and object streamspy-pdf pypdf · pypdf
- CVE-2026-34068nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledgenimiq-transaction
- CVE-2026-3837Frappe Framework 16.10.0 - Stored DOM XSS in Multiple Field FormattersFrappe
- CVE-2026-34067nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatchnimiq-transaction
- CVE-2026-34066nimiq-blockchain: Peer-triggerable panic during history syncnimiq-blockchain
- CVE-2026-34064nimiq-account: Vesting insufficient funds error can panicnimiq-account
- CVE-2026-3673Frappe Framework 16.10.0 - Stored DOM XSS in Tag Pill RendererFrappe
- CVE-2026-6019BaseCookie.js_output() does not neutralize embedded charactersPython Software Foundation CPython
- CVE-2026-34062Nimiq has Allocation of Resources Without Limits or Throttling in its libp2p request/responsenimiq network-libp2p
- CVE-2026-41459Xerte Online Toolkits Path Disclosure via /setupthexerteproject xerteonlinetoolkits
- CVE-2026-28950A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple iPadOS
- CVE-2026-41469Beghelli Sicuro24 SicuroWeb Missing Content Security PolicyBeghelli SicuroWeb
- CVE-2026-32885DDEV has ZipSlip path traversal in tar and zip archive extractionddev · github.com/ddev/ddev
- CVE-2026-3254Improper Restriction of Rendered UI Layers or Frames in GitLabGitLab
- CVE-2026-35381uutils coreutils cut Local Logic Error and Data Integrity Issue in Output FilteringUutils coreutils · uu_cut
- CVE-2026-35380uutils coreutils cut Local Logic Error and Data Integrity Issue in Delimiter ParsingUutils coreutils · coreutils
- CVE-2026-35379uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class HandlingUutils coreutils · coreutils
- CVE-2026-35378uutils coreutils expr Local Denial of Service via Eager Evaluation of Parenthesized SubexpressionsUutils coreutils · coreutils
- CVE-2026-35377uutils coreutils env Local Denial of Service via Improper Handling of Backslashes in Split-String ModeUutils coreutils · coreutils
- CVE-2026-35376uutils coreutils chcon Security Bypass and Mandatory Access Control (MAC) Inconsistency via TOCTOU Race ConditionUutils coreutils · coreutils
- CVE-2026-35375uutils coreutils split Local Data Integrity Issue via Lossy Filename EncodingUutils coreutils · coreutils
- CVE-2026-35374uutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race ConditionUutils coreutils · coreutils
- CVE-2026-35373uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 FilenamesUutils coreutils · uu_ln
- CVE-2026-35372uutils coreutils ln Security Bypass via Improper Handling of the --no-dereference FlagUutils coreutils · coreutils
- CVE-2026-35371uutils coreutils id Misleading Identity Reporting in Pretty Print ModeUutils coreutils · uu_id
- CVE-2026-35370uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group MembershipUutils coreutils · uu_id
- CVE-2026-35369uutils coreutils kill System-wide Process Termination and Denial of Service via Argument MisinterpretationUutils coreutils · uu_kill
- CVE-2026-35367uutils coreutils nohup Information Disclosure via Insecure Default Output PermissionsUutils coreutils · coreutils
- CVE-2026-35366uutils coreutils printenv Security Inspection Bypass via UTF-8 EnforcementUutils coreutils · uu_printenv
- CVE-2026-35365uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink ExpansionUutils coreutils · uu_mv
- CVE-2026-35364uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race ConditionUutils coreutils · coreutils
- CVE-2026-35363uutils coreutils rm Safeguard Bypass via Improper Path NormalizationUutils coreutils · uu_rm
- CVE-2026-35362uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal ModuleUutils coreutils · uucore
- CVE-2026-35361uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux SystemsUutils coreutils · uu_mknod
- CVE-2026-35360uutils coreutils touch Arbitrary File Truncation via TOCTOU Race ConditionUutils coreutils · coreutils
- CVE-2026-35359uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink SwapUutils coreutils · coreutils
- CVE-2026-35358uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream ReadingUutils coreutils · uu_cp
- CVE-2026-35357uutils coreutils cp Information Disclosure via Permission Handling RaceUutils coreutils · coreutils
- CVE-2026-35356uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink RaceUutils coreutils · uu_install
- CVE-2026-35355uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU RaceUutils coreutils · uu_install
- CVE-2026-35354uutils coreutils mv Security Xattr TOCTOU Race in Cross-DeviceUutils coreutils · coreutils
- CVE-2026-35353uutils coreutils mkdir Permission Exposure Race Condition with -mUutils coreutils · uu_mkdir
- CVE-2026-35351uutils coreutils mv Silent Ownership Loss in Cross-Device OperationsUutils coreutils · coreutils
- CVE-2026-35350uutils coreutils cp Unexpected Privileged Executable Creation with -pUutils coreutils · coreutils
- CVE-2026-35349uutils coreutils Path-Based Safety Bypass with --preserve-rootUutils coreutils · uu_rm
- CVE-2026-35348uutils coreutils sort Local Denial of Service via Forced UTF-8 ParsingUutils coreutils · coreutils
- CVE-2026-35347uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input ValidationUutils coreutils · uu_comm
- CVE-2026-35346uutils coreutils comm Silent Data Corruption via Lossy UTF-8 NormalizationUutils coreutils · uu_comm
- CVE-2026-35345uutils coreutils tail Privileged Information Disclosure via Symlink Replacement RaceUutils coreutils · coreutils
- CVE-2026-35344uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error SuppressionUutils coreutils · coreutils
- CVE-2026-35343uutils coreutils cut Inconsistent Output Suppression with Newline DelimitersUutils coreutils · uu_cut
- CVE-2026-35342uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIRUutils coreutils · uu_mktemp
- CVE-2026-35340uutils coreutils chown and chgrp False Success Exit Code in Recursive ModeUutils coreutils
- CVE-2026-35339uutils coreutils chmod False Success Exit Code in Recursive ModeUutils coreutils · uu_chmod
- CVE-2025-0186Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-3922Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-6016Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2025-9957Incorrect Authorization in GitLabGitLab
- CVE-2026-1660Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-5377Incorrect Authorization in GitLabGitLab
- CVE-2026-6515Insufficient Session Expiration in GitLabGitLab
- CVE-2025-58922WordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerabilityThemeFusion Avada
- CVE-2024-58344Carbon Forum 5.9.0 Persistent XSS via Forum Name Field94Cb Carbon Forum
- CVE-2018-25271Textpad 8.1.2 Denial of Service via Run CommandTextpad
- CVE-2018-25269ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML InjectionICEWARP Client
- CVE-2018-25267UltraISO 9.7.1.3519 Buffer Overflow via Output FileNameUltraISO
- CVE-2018-25266Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer OverflowAngryip Angry IP Scanner
- CVE-2018-25262Angry IP Scanner for Linux 3.5.3 Denial of ServiceAngryip Angry IP Scanner for Linux
- CVE-2026-33611Insufficient validation of HTTPS and SVCB recordsPowerDNS Authoritative
- CVE-2026-33610Possible file descriptor exhaustion in forward-dnsupdatePowerDNS Authoritative
- CVE-2026-33609LDAP DN injectionPowerDNS Authoritative
- CVE-2026-31530cxl/port: Fix use after free of parent_port in cxl_detach_ep()Linux
- CVE-2026-31529cxl/region: Fix leakage in __construct_region()Linux
- CVE-2026-31527driver core: platform: use generic driver_override infrastructureLinux
- CVE-2026-31526bpf: Fix exception exit lock checking for subprogsLinux
- CVE-2026-31524HID: asus: avoid memory leak in asus_report_fixup()Linux
- CVE-2026-31523nvme-pci: ensure we're polling a polled queueLinux
- CVE-2026-31522HID: magicmouse: avoid memory leak in magicmouse_report_fixup()Linux
- CVE-2026-31521module: Fix kernel panic when a symbol st_shndx is out of boundsLinux
- CVE-2026-31520HID: apple: avoid memory leak in apple_report_fixup()Linux
- CVE-2026-31519btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol createLinux
- CVE-2026-31518esp: fix skb leak with espintcp and async cryptoLinux
- CVE-2026-31517xfrm: iptfs: fix skb_put() panic on non-linear skb during reassemblyLinux
- CVE-2026-31515af_key: validate families in pfkey_send_migrate()Linux
- CVE-2026-31514erofs: set fileio bio failed in short read caseLinux
- CVE-2026-31512Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()Linux
- CVE-2026-31510Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbLinux
- CVE-2026-31509nfc: nci: fix circular locking dependency in nci_close_deviceLinux
- CVE-2026-31506net: bcmasp: fix double free of WoL irqLinux
- CVE-2026-31503udp: Fix wildcard bind conflict check when using hash2Linux
- CVE-2026-31500Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lockLinux
- CVE-2026-31499Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()Linux
- CVE-2026-31498Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopLinux
- CVE-2026-31497Bluetooth: btusb: clamp SCO altsetting table indicesLinux
- CVE-2026-31496netfilter: nf_conntrack_expect: skip expectations in other netns via procLinux
- CVE-2026-31495netfilter: ctnetlink: use netlink policy range checksLinux
- CVE-2026-31493RDMA/efa: Fix use of completion ctx after freeLinux
- CVE-2026-31492RDMA/irdma: Initialize free_qp completion before using itLinux
- CVE-2026-31491RDMA/irdma: Harden depth calculation functionsLinux
- CVE-2026-31489spi: meson-spicc: Fix double-put in remove pathLinux
- CVE-2026-31487spi: use generic driver_override infrastructureLinux
- CVE-2026-31485spi: spi-fsl-lpspi: fix teardown order issue (UAF)Linux
- CVE-2026-31483s390/syscalls: Add spectre boundary for syscall dispatch tableLinux
- CVE-2026-31482s390/entry: Scrub r12 register on kernel entryLinux
- CVE-2026-31481tracing: Drain deferred trigger frees if kthread creation failsLinux
- CVE-2026-31480tracing: Fix potential deadlock in cpu hotplug with osnoiseLinux
- CVE-2026-31472xfrm: iptfs: validate inner IPv4 header length in IPTFS payloadLinux
- CVE-2026-31466mm/huge_memory: fix folio isn't locked in softleaf_to_folio()Linux
- CVE-2026-31465writeback: don't block sync for filesystems with no data integrity guaranteesLinux
- CVE-2026-31462drm/amdgpu: prevent immediate PASID reuse caseLinux
- CVE-2026-31461drm/amd/display: Fix drm_edid leak in amdgpu_dmLinux
- CVE-2026-31460drm/amd/display: check if ext_caps is valid in BL setupLinux
- CVE-2026-31459mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failureLinux
- CVE-2026-31458mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]Linux
- CVE-2026-31457mm/damon/sysfs: check contexts->nr in repeat_call_fnLinux
- CVE-2026-31456mm/pagewalk: fix race between concurrent split and refaultLinux
- CVE-2026-31455xfs: stop reclaim before pushing AIL during unmountLinux
- CVE-2026-31452ext4: convert inline data to extents when truncate exceeds inline sizeLinux
- CVE-2026-31451ext4: replace BUG_ON with proper error handling in ext4_read_inline_folioLinux
- CVE-2026-31445mm/damon/core: avoid use of half-online-committed contextLinux
- CVE-2026-31443dmaengine: idxd: Fix crash when the event log is disabledLinux
- CVE-2026-31441dmaengine: idxd: Fix memory leak when a wq is resetLinux
- CVE-2026-31440dmaengine: idxd: Fix leaking event log memoryLinux
- CVE-2026-31439dmaengine: xilinx: xdma: Fix regmap init error handlingLinux
- CVE-2026-31438netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iteratorsLinux
- CVE-2026-31437netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retryLinux
- CVE-2026-31434btrfs: fix leak of kobject name for sub-group space_infoLinux
- CVE-2026-33594Outgoing DoH excessive memory allocationPowerDNS DNSdist
- CVE-2026-33595DoQ/DoH3 excessive memory allocationPowerDNS DNSdist
- CVE-2026-33597PRSD detection denial of servicePowerDNS DNSdist
- CVE-2026-33596TCP backend stream ID overflowPowerDNS DNSdist
- CVE-2026-33598Out-of-bounds read in cache inspection via LuaPowerDNS DNSdist
- CVE-2026-33599Out-of-bounds read in service discoveryPowerDNS DNSdist
- CVE-2026-6862Efivar: efivar: denial of service due to stack overflow in device path node parsingRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2026-33602Off-by-one access when processing crafted UDP responsesPowerDNS DNSdist
- CVE-2026-33254Resource exhaustion via DoQ/DoH3 connectionsPowerDNS DNSdist
- CVE-2026-6861Emacs: emacs: memory corruption vulnerability when processing svg cssRed Hat Enterprise Linux
- CVE-2026-6355CVE-2026-6355Augmentt
- CVE-2026-33262Insufficient validation of cookie replyPowerDNS Recursor
- CVE-2026-33261Null pointer accces in aggressive NSEC(3) cachePowerDNS Recursor
- CVE-2026-33260Insufficient input validation of internal webserverPowerDNS Authoritative · PowerDNS DNSdist +1
- CVE-2026-33259Concurrent modification of RPZ data can lead to denial of servcePowerDNS Recursor
- CVE-2026-33258Crafted zones can cause increased resource usagePowerDNS Recursor
- CVE-2026-33257Insufficient input validation of internal webserverPowerDNS Authoritative · PowerDNS DNSdist +1
- CVE-2026-33256Unbounded memory allocation by internal web serverPowerDNS Recursor
- CVE-2026-33601Insufficient validation of zonemd recordPowerDNS Recursor
- CVE-2026-33600Null pointer dereference in RPZ transferPowerDNS Recursor
- CVE-2026-1913Gallagher Website Design <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode Attributegallagherwebsitedesign Gallagher Website Design
- CVE-2026-1395Gutentools <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block AttributesGutentools
- CVE-2026-1930Emailchef <= 3.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletionhanicker Emailchef
- CVE-2026-6848Quay: red hat quay: authentication bypass allows privileged actions without valid credentialsRed Hat Quay
- CVE-2026-6844Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf filesRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-6843Nano: nano: format string vulnerability leads to denial of serviceRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-6845Binutils: binutils: denial of service via crafted elf fileRed Hat Hardened Images · Red Hat Enterprise Linux +1
- CVE-2026-4353CI HUB Connector <= 1.2.106 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributecihubconnector CI HUB Connector
- CVE-2026-4138DX Unanswered Comments <= 1.7 - Cross-Site Request Forgery via Settings Updatenofearinc DX Unanswered Comments
- CVE-2026-6294Google PageRank Display <= 1.4 - Cross-Site Request Forgery to Settings Update via Settings Pagebyybora Google PageRank Display
- CVE-2026-6236Posts map <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attributelucdecri Posts map
- CVE-2026-4117CalJ <= 1.5 - Authenticated (Subscriber+) Arbitrary Settings Modification via 'save-obtained-key' ActionCalJ Shabbat Times
- CVE-2026-2719Private WP suite <= 0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Exceptions' Settingfpoller Private WP suite
- CVE-2026-4121Kcaptcha <= 1.0.1 - Cross-Site Request Forgery to Settings Updateksolves Kcaptcha
- CVE-2026-5748Text Snippets <= 0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w' Shortcode Attributesnedled Text Snippets
- CVE-2026-4074Quran Live Multilanguage <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeskarim42 Quran Live Multilanguage
- CVE-2026-4085Easy Social Photos Gallery <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper_class' Shortcode Attributemaltathemes Easy Social Photos Gallery – MIF
- CVE-2026-6246Simple Random Posts Shortcode <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'container_right_width' Shortcode Attributemkerstner Simple Random Posts Shortcode
- CVE-2026-4142Sentence To SEO (keywords, description and tags) <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Permanent keywords' Fieldeazyserver Sentence To SEO
- CVE-2026-4090Inquiry cart <= 3.4.2 - Cross-Site Request Forgery via Settings Formravster Inquiry cart
- CVE-2026-2717HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Valueszinoui HTTP Headers
- CVE-2026-4118Call To Action Plugin <= 3.1.3 - Cross-Site Request Forgery via Settings Updatetmarek Call To Action Plugin
- CVE-2026-4139mCatFilter <= 0.5.2 - Cross-Site Request Forgery via compute_post() Functionchsxf mCatFilter
- CVE-2026-4125WPMK Block <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeswpmkorg WPMK Block
- CVE-2026-4128TP Restore Categories And Taxonomies <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Taxonomy Deletion via 'tpmcattt_delete_term' AJAX Actiontplugins TP Restore Categories And Taxonomies
- CVE-2026-5767SlideShowPro SC <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'album' Shortcode Attributeluetkemj SlideShowPro SC
- CVE-2026-4089Twittee Text Tweet <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attributejohnnie2u Twittee Text Tweet
- CVE-2026-3362Short Comment Filter <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Minimum Count' Settingitsananderson Short Comment Filter
- CVE-2026-6396Fast & Fancy Filter – 3F <= 1.2.2 - Cross-Site Request Forgery to Settings Modification via fff_save_settins AJAX Actionwebarea Fast & Fancy Filter –
- CVE-2026-4280Breaking News WP <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Local File Inclusion/Readdoctorwp Breaking News WP
- CVE-2026-4140Ni WooCommerce Order Export <= 3.1.6 - Cross-Site Request Forgery to Settings Update via ni_order_export_action AJAX Actionanzia Ni WooCommerce Order Export
- CVE-2026-4133TextP2P Texting Widget <= 1.7 - Cross-Site Request Forgery to Settings UpdateTextP2P Texting Widget
- CVE-2026-4076Slider Bootstrap Carousel <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesfelipermendes Slider Bootstrap Carousel
- CVE-2026-4126Table Manager <= 1.0.0 - Authenticated (Contributor+) Sensitive Information Exposure via 'table' Shortcode Attributeprimisdigital Table Manager
- CVE-2026-2714Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Settingweblizar Institute Management – Learning Management System
- CVE-2026-4088Switch CTA Box <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewpshouter Switch CTA Box
- CVE-2026-1845Real Estate Pro <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting via Settingsbhubbard Real Estate Pro
- CVE-2026-6041Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Settingmixer2 Buzz Comments
- CVE-2026-4131WP Responsive Popup + Optin <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'wpo_image_url' Parametersphex1987 WP Responsive Popup + Optin
- CVE-2026-4082ER Swiffy Insert <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeserithq ER Swiffy Insert
- CVE-2026-4279Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesbreadbutter Bread & Butter: AI-Powered Lead Intelligence
- CVE-2026-1379HTTP Headers <= 1.19.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Settingzinoui HTTP Headers
- CVE-2026-5820Zypento Blocks <= 1.0.6 - Authenticated (Author+) Stored Cross-Site Scripting via Table of Contents Blocksproutient Zypento Blocks
- CVE-2026-6842Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissionsnano · Red Hat Enterprise Linux +1
- CVE-2026-6840Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commSamsung Open Source ONE
- CVE-2026-6839Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor iSamsung Open Source ONE
- CVE-2026-41667Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant Samsung Open Source ONE
- CVE-2026-41666Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagationSamsung Open Source ONE
- CVE-2026-41665Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for largSamsung Open Source ONE
- CVE-2026-41664Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapesSamsung Open Source ONE
- CVE-2026-40450Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption fSamsung Open Source ONE
- CVE-2026-40449Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source OSamsung Open Source ONE
- CVE-2026-40448Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung OSamsung Open Source ONE
- CVE-2026-22748Potential Security Misconfiguration when Using withIssuerLocationSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22747Unauthorized User Impersonation when Using X.509 Client CertificatesSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22746User Attribute Enumeration when Using DaoAuthenticationProviderSpring Security · org.springframework.security:spring-secur…
- CVE-2026-40451DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to eDeepL Chrome browser extension
- CVE-2026-6835aEnrich｜a+HCM - Arbitrary File UploadaEnrich a+HCM
- CVE-2026-6386Missing large page handling in pmap_pkru_update_range()FreeBSD
- CVE-2026-6408Tanium addressed an information disclosure vulnerability in Tanium Server.Tanium Server
- CVE-2026-6392Tanium addressed an information disclosure vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-6416Tanium addressed an uncontrolled resource consumption vulnerability in Interact.Tanium Interact
- CVE-2026-41457OwnTone Server < 29.1 SQL Injection via query and filter Parametersowntone-server
- CVE-2026-30139A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attaorg.silverpeas.core:silverpeas-core-war · org.silverpeas.co…
- CVE-2026-31192Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitiv