CVEs published May 6, 2026
481 CVEs were published on May 6, 2026: 23 critical, 179 high. 1 is now in CISA KEV.
- Published
- 481
- Critical
- 23
- High
- 179
- Medium
- 105
- Low
- 27
- Unrated
- 147
- Now in CISA KEV
- 1
- Fix available
- 285
Most affected products
- Linux
- 224
- Google Chrome
- 125
- OpenClaw
- 21
- HCL BigFix Service Management
- 6
- HCL Software BigFix Service Management
- 6
- givanz Vvveb
- 5
- HCL DFXAnalytics
- 5
- MasaCMS
- 5
- Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- 5
- WatchGuard Agent
- 5
Critical 23
- CVE-2026-40281Gotenberg vulnerable to argument injection via newlines in ExifTool metadata valuesgotenberg · github.com/gotenberg/gotenberg/v7 +1
- CVE-2026-44109OpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action ValidationOpenClaw
- CVE-2026-43585OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef ResolutionOpenClaw
- CVE-2026-43581OpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay BindingOpenClaw
- CVE-2026-43578OpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner DowngradeOpenClaw
- CVE-2026-43575OpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper RouteOpenClaw
- CVE-2026-40076OpenMRS Core arbitrary file write and code execution via Zip Slip in module uploadopenmrs-core · org.openmrs.web:openmrs-web
- CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-41930Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmingivanz Vvveb
- CVE-2026-7908Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via aGoogle Chrome
- CVE-2026-29090Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata databaserucio
- CVE-2026-29080Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search APIrucio
- CVE-2026-5081Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecureCHORNY Apache::Session::Generate::ModUniqueId
- CVE-2026-43208net: do not pass flow_id to set_rps_cpu()Linux
- CVE-2026-43198tcp: fix potential race in tcp_v6_syn_recv_sock()Linux
- CVE-2026-43197netconsole: avoid OOB reads, msg is not nul-terminatedLinux
- CVE-2026-43186ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()Linux
- CVE-2026-43185ksmbd: fix signededness bug in smb_direct_prepare_negotiation()Linux
- CVE-2026-43125dlm: validate length in dlm_search_rsb_treeLinux
- CVE-2026-40010Apache Wicket: possible session fixation using AuthenticatedWebSessionApache Software Foundation Apache Wicket · org.apache.wicke…
- CVE-2026-43117btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()Linux
- CVE-2026-43114netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiryLinux
- CVE-2026-43083net: ioam6: fix OOB and missing lockLinux
High 179
- CVE-2026-40251Incus out-of-bounds panic in snapshot metadata handling allows denial of servicelxc incus · github.com/lxc/incus/v6/cmd/incusd +3
- CVE-2026-40197Incus nil-pointer dereference in custom volume import allows denial of servicelxc incus · github.com/lxc/incus/v6/cmd/incusd +3
- CVE-2026-40195Incus nil-pointer dereference in storage bucket import allows denial of servicelxc incus · github.com/lxc/incus/v6/cmd/incusd +3
- CVE-2026-40326Masa CMS CSRF in site bundle creation allows unauthorized site data exportMasaCMS
- CVE-2026-40325Masa CMS CSRF in content restoration allows unauthorized restoration of deleted contentMasaCMS
- CVE-2026-44118OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token HeaderOpenClaw
- CVE-2026-44115OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec AllowlistOpenClaw
- CVE-2026-44114OpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenvOpenClaw
- CVE-2026-44113OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS BridgeOpenClaw
- CVE-2026-44112OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge WritesOpenClaw
- CVE-2026-44110OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing StoreOpenClaw
- CVE-2026-43584OpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec PolicyOpenClaw
- CVE-2026-43577OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction RoutesOpenClaw
- CVE-2026-40309Masa CMS CSRF in trash management allows unauthorized permanent deletion of deleted contentMasaCMS
- CVE-2026-40174Masa CMS CSRF in user address management allows unauthorized address changesMasaCMS
- CVE-2026-40171Jupyter Notebook and JupyterLab token theft via stored XSS in help command linkerjupyter notebook · jupyterlab help-extension +5
- CVE-2026-41938Vvveb < 1.0.8.2 RCE via Media Upload Handlergivanz Vvveb
- CVE-2026-41934Vvveb < 1.0.8.2 Authenticated RCE via Code Editorgivanz Vvveb
- CVE-2026-41936Vvveb < 1.0.8.2 XML External Entity Injection via Importgivanz Vvveb
- CVE-2024-30151HCL BigFix Service Management (SM) is susceptible to Broken Access Control VulnerabilityHCL BigFix Service Management
- CVE-2026-8018Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbGoogle Chrome
- CVE-2026-8016Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-8007Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-8002Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox Google Chrome
- CVE-2026-8001Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-8000Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to eGoogle Chrome
- CVE-2026-7997Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-Google Chrome
- CVE-2026-7995Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox Google Chrome
- CVE-2026-7994Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level pGoogle Chrome
- CVE-2026-7992Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who coGoogle Chrome
- CVE-2026-7991Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute aGoogle Chrome
- CVE-2026-7990Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to performGoogle Chrome
- CVE-2026-7988Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-7987Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-7985Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2026-7984Use after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-7981Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information fGoogle Chrome
- CVE-2026-7980Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via Google Chrome
- CVE-2026-7978Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level priviGoogle Chrome
- CVE-2026-7976Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension toGoogle Chrome
- CVE-2026-7975Use after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-7974Use after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-7973Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escapGoogle Chrome
- CVE-2026-7970Use after free in TopChrome in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-7967Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-7963Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-7957Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-7956Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-7951Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox vGoogle Chrome
- CVE-2026-7948Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicioGoogle Chrome
- CVE-2026-7940Use after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to exGoogle Chrome
- CVE-2026-7938Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-7929Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specifiGoogle Chrome
- CVE-2026-7928Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-7927Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-7926Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbGoogle Chrome
- CVE-2026-7925Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalGoogle Chrome
- CVE-2026-7923Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-7922Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape viGoogle Chrome
- CVE-2026-7921Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML pGoogle Chrome
- CVE-2026-7920Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-7919Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-7918Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2026-7917Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-7916Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-7914Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-7913Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilegeGoogle Chrome
- CVE-2026-7911Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-7907Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-7906Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-7905Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had comGoogle Chrome
- CVE-2026-7903Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruGoogle Chrome
- CVE-2026-7902Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbGoogle Chrome
- CVE-2026-7901Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox Google Chrome
- CVE-2026-7900Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-7899Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-7898Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via maliciGoogle Chrome
- CVE-2026-7897Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specificGoogle Chrome
- CVE-2026-7896Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2026-33079Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titleslepture mistune · mistune
- CVE-2026-23870A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could leaMeta react-server-dom-turbopack · Meta react-server-dom-… +4
- CVE-2026-21661AC2000 Uncontrolled Search Path ElementJohnson Controls AC2000
- CVE-2026-42503Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/goplsgolang.org/x/tools/gopls
- CVE-2026-20034Cisco Unity Connection Remote Code Execution VulnerabilityCisco Unity Connection
- CVE-2026-20035Cisco Unity Connection Server-Side Request Forgery VulnerabilityCisco Unity Connection
- CVE-2026-20167Cisco IoT Field Network Director Remote Device Denial of Service VulnerabilityCisco IoT Field Network Director
- CVE-2026-20185Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service VunerabilityCisco Small Business Smart and Managed Switches
- CVE-2026-7875NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment HandlingQwibit NanoClaw
- CVE-2026-6788Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard AgentWatchGuard Agent
- CVE-2026-6787Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing processWatchGuard Agent
- CVE-2026-41286Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant BWatchGuard Agent
- CVE-2026-41288WatchGuard Agent on Windows Privilege Escalation VulnerabilityWatchGuard Agent
- CVE-2026-6691MongoDB C Driver Cyrus SASL Canonicalization Buffer OverflowMongoDB C Driver
- CVE-2026-41287Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant AWatchGuard Agent
- CVE-2026-40562Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header PrecedenceKAZEBURO Gazelle
- CVE-2026-6210Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crashQt
- CVE-2025-31951HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerabilityHCL BigFix RunBookAI
- CVE-2025-71292jfs: nlink overflow in jfs_renameLinux
- CVE-2025-71289fs/ntfs3: handle attr_set_size() errors when truncating filesLinux
- CVE-2025-71286ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controlsLinux
- CVE-2026-43283net: ethernet: ec_bhf: Fix dma_free_coherent() dma handleLinux
- CVE-2026-43280drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madviseLinux
- CVE-2026-43279ALSA: usb-audio: Add sanity check for OOB writes at silencingLinux
- CVE-2026-43278dm: clear cloned request bio pointer when last clone bio completesLinux
- CVE-2026-43274mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()Linux
- CVE-2026-43263media: chips-media: wave5: Fix Null reference while testing flusterLinux
- CVE-2026-43258alpha: fix user-space corruption during memory compactionLinux
- CVE-2026-43256media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()Linux
- CVE-2026-43254ovpn: tcp - fix packet extraction from streamLinux
- CVE-2026-43253iommu/amd: move wait_on_sem() out of spinlockLinux
- CVE-2026-432499p/xen: protect xen_9pfs_front_free against concurrent callsLinux
- CVE-2026-43248vhost: move vdpa group bound check to vhost_vdpaLinux
- CVE-2026-43245ntfs: ->d_compare() must not blockLinux
- CVE-2026-43239smb: client: prevent races in ->query_interfaces()Linux
- CVE-2026-43237drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4Linux
- CVE-2026-43236drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after releaseLinux
- CVE-2026-43233netfilter: nf_conntrack_h323: fix OOB read in decode_choice()Linux
- CVE-2026-43232net: wan: farsync: Fix use-after-free bugs caused by unfinished taskletsLinux
- CVE-2026-43230net/rds: Clear reconnect pending bitLinux
- CVE-2026-43226net/rds: No shortcut out of RDS_CONN_ERRORLinux
- CVE-2026-43222media: verisilicon: AV1: Fix tile info buffer sizeLinux
- CVE-2026-43215cifs: Fix locking usage for tcon fieldsLinux
- CVE-2026-43214KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()Linux
- CVE-2026-43213wifi: rtw89: pci: validate sequence number of TX release reportLinux
- CVE-2026-43212LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODELinux
- CVE-2026-43211PCI: Fix pci_slot_trylock() error handlingLinux
- CVE-2026-43207media: mtk-mdp: Fix error handling in probe functionLinux
- CVE-2026-43206drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()Linux
- CVE-2026-43203atm: fore200e: fix use-after-free in tasklets during device removalLinux
- CVE-2026-43199net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address queryLinux
- CVE-2026-43194net: consume xmit errors of GSO framesLinux
- CVE-2026-43190netfilter: xt_tcpmss: check remaining length before reading optlenLinux
- CVE-2026-43187xfs: delete attr leaf freemap entries when emptyLinux
- CVE-2026-43184rnbd-srv: Zero the rsp buffer before using itLinux
- CVE-2026-43180net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_modeLinux
- CVE-2026-43178procfs: fix possible double mmput() in do_procmap_query()Linux
- CVE-2026-43176wifi: rtw89: pci: validate release report content before using for RTL8922DELinux
- CVE-2026-43172wifi: iwlwifi: fix 22000 series SMEM parsingLinux
- CVE-2026-43166erofs: fix interlaced plain identification for encoded extentsLinux
- CVE-2026-43164udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().Linux
- CVE-2026-43158xfs: fix freemap adjustments when adding xattrs to leaf blocksLinux
- CVE-2026-43153xfs: remove xfs_attr_leaf_hasnameLinux
- CVE-2026-43150perf/arm-cmn: Reject unsupported hardware configurationsLinux
- CVE-2026-43139xfrm6: fix uninitialized saddr in xfrm6_get_saddr()Linux
- CVE-2026-43134Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQLinux
- CVE-2026-43133KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulationLinux
- CVE-2026-43128RDMA/umem: Fix double dma_buf_unpin in failure pathLinux
- CVE-2026-43126ALSA: mixer: oss: Add card disconnect checkpointsLinux
- CVE-2025-71274rpmsg: core: fix race in driver_override_show() and use core helperLinux
- CVE-2026-1719Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' ParameterGravityMore Gravity Bookings
- CVE-2026-43646Apache Wicket: crafted URLs can bypass PackageResourceGuardApache Software Foundation Apache Wicket · org.apache.wicke…
- CVE-2026-43120RDMA/irdma: Fix double free related to rereg_user_mrLinux
- CVE-2026-43116netfilter: ctnetlink: ensure safe access to master conntrackLinux
- CVE-2026-43113wifi: wl1251: validate packet IDs before indexing tx_framesLinux
- CVE-2026-43112fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepathLinux
- CVE-2026-43111HID: roccat: fix use-after-free in roccat_report_eventLinux
- CVE-2026-43110wifi: brcmfmac: validate bsscfg indices in IF eventsLinux
- CVE-2026-43106cachefiles: fix incorrect dentry refcount in cachefiles_cull()Linux
- CVE-2026-43101ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()Linux
- CVE-2026-43099ipv4: icmp: fix null-ptr-deref in icmp_build_probe()Linux
- CVE-2026-43093xsk: tighten UMEM headroom validation to account for tailroom and min frameLinux
- CVE-2026-43091xfrm: Wait for RCU readers during policy netns exitLinux
- CVE-2026-43084netfilter: nfnetlink_queue: make hash table per queueLinux
- CVE-2026-43078crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsglLinux
- CVE-2026-43076ocfs2: validate inline data i_size during inode readLinux
- CVE-2026-43075ocfs2: fix out-of-bounds write in ocfs2_write_end_inlineLinux
- CVE-2026-43074eventpoll: defer struct eventpoll free to RCU grace periodLinux
- CVE-2026-23928Stored XSS vulnerability in the Item history/Plain text widgetZabbix
- CVE-2026-23926Stored XSS vulnerability in Host navigator widget maintenance tooltipZabbix
- CVE-2026-7841GV-ASWeb Remote Code Execution (RCE) vulnerabilityGeoVision ASManager
- CVE-2026-7332LatePoint <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' ParameterLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2025-71256In nr modem, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. T8100/T9100/T8200/T8300
- CVE-2025-71255In Modem IMS, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2025-71254In Modem IMS, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2025-71253In Modem IMS, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2025-71252In Modem IMS, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2025-71251In IMS, there is a possible system crash due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2026-34473Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A,
- CVE-2026-34474Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6.
Medium, low and unrated 279
- CVE-2026-3291Samsung Print Service Plugin – Potential Information DisclosureHP Samsung Print Service Plugin
- CVE-2026-41484OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response bodyopen-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…
- CVE-2026-41483Unbounded HTTP response body read in OpenTelemetry.Resources.Azureopen-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…
- CVE-2026-41310OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growthopen-telemetry opentelemetry-dotnet · OpenTelemetry.Exporte…
- CVE-2026-41417Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()netty · io.netty:netty-codec-http
- CVE-2026-40296PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codesPHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet
- CVE-2026-40243Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonationlxc incus · github.com/lxc/incus +3
- CVE-2026-40332Masa CMS open redirect via improper handling of scheme-relative URLsMasaCMS
- CVE-2026-44117OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media UploadOpenClaw
- CVE-2026-44116OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL ValidationOpenClaw
- CVE-2026-44111OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_getOpenClaw
- CVE-2026-43583OpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue RecoveryOpenClaw
- CVE-2026-43582OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation BypassOpenClaw
- CVE-2026-43580OpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser InteractionsOpenClaw
- CVE-2026-43579OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation RoutesOpenClaw
- CVE-2026-43576OpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URLOpenClaw
- CVE-2026-8033PicoTronica e-Clinic Healthcare System ECHS Response Header v2 information disclosurePicoTronica e-Clinic Healthcare System ECHS
- CVE-2026-8032PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentialsPicoTronica e-Clinic Healthcare System ECHS
- CVE-2026-41931Vvveb < 1.0.8.2 Information Disclosure via Debug Exception Handlergivanz Vvveb
- CVE-2026-8022Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in spGoogle Chrome
- CVE-2026-8021Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestuGoogle Chrome
- CVE-2026-8020Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-8019Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a craGoogle Chrome
- CVE-2026-8017Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a Google Chrome
- CVE-2026-8015Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a craftedGoogle Chrome
- CVE-2026-8014Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crGoogle Chrome
- CVE-2026-8013Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin dGoogle Chrome
- CVE-2026-8012Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-8011Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a Google Chrome
- CVE-2026-8010Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had comproGoogle Chrome
- CVE-2026-8009Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-8008Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicGoogle Chrome
- CVE-2026-8006Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2026-8005Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment Google Chrome
- CVE-2026-8004Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2026-8003Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spooGoogle Chrome
- CVE-2026-7999Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive informaGoogle Chrome
- CVE-2026-7998Insufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2026-7996Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the Google Chrome
- CVE-2026-7993Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had Google Chrome
- CVE-2026-7989Insufficient data validation in DataTransfer in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-7986Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via Google Chrome
- CVE-2026-7983Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-7982Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive informationGoogle Chrome
- CVE-2026-7979Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafGoogle Chrome
- CVE-2026-7977Inappropriate implementation in Canvas in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass same origin policy via a Google Chrome
- CVE-2026-7972Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak Google Chrome
- CVE-2026-7971Inappropriate implementation in ORB in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass site isolation via a craftedGoogle Chrome
- CVE-2026-7969Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to byGoogle Chrome
- CVE-2026-7968Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-7966Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had comproGoogle Chrome
- CVE-2026-7965Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromisedGoogle Chrome
- CVE-2026-7964Insufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-7962Insufficient policy enforcement in DirectSockets in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary readGoogle Chrome
- CVE-2026-7961Insufficient validation of untrusted input in Permissions in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network sGoogle Chrome
- CVE-2026-7960Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentiaGoogle Chrome
- CVE-2026-7959Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-7958Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a Google Chrome
- CVE-2026-7955Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtaiGoogle Chrome
- CVE-2026-7954Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak crGoogle Chrome
- CVE-2026-7953Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary Google Chrome
- CVE-2026-7952Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-7950Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via maGoogle Chrome
- CVE-2026-7949Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leaGoogle Chrome
- CVE-2026-7947Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised Google Chrome
- CVE-2026-7946Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker Google Chrome
- CVE-2026-7945Insufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-7944Insufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had comGoogle Chrome
- CVE-2026-7943Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-7942Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML pagGoogle Chrome
- CVE-2026-7941Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject aGoogle Chrome
- CVE-2026-7939Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts oGoogle Chrome
- CVE-2026-7937Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2026-7935Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafteGoogle Chrome
- CVE-2026-7934Insufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had comproGoogle Chrome
- CVE-2026-7933Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read viGoogle Chrome
- CVE-2026-7932Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictiGoogle Chrome
- CVE-2026-7931Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoGoogle Chrome
- CVE-2026-7924Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2026-7915Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation rGoogle Chrome
- CVE-2026-7912Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-7910Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypassGoogle Chrome
- CVE-2026-7909Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-7904Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a Google Chrome
- CVE-2025-31960HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleHCL BigFix Service Management
- CVE-2025-31974HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-OnlyHCL Software BigFix Service Management
- CVE-2026-8031PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authenticationPicoTronica e-Clinic Healthcare System ECHS
- CVE-2026-20219A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of othCisco Webex Meetings · Cisco Slido
- CVE-2026-20169Cisco IoT Field Network Director Command Injection VulnerabilityCisco IoT Field Network Director
- CVE-2026-20168Cisco IoT Field Network Director Path Traversal VulnerabilityCisco IoT Field Network Director
- CVE-2026-20172Cisco Enterprise Chat and Email Lite Agent File Upload VulnerabilityCisco Enterprise Chat and Email
- CVE-2026-20188Cisco Crosswork Network Controller and Cisco Network Services Orchestrator AdvisoryCisco Crosswork Network Change Automation
- CVE-2026-20189Cisco Prime Infrastructure Information Disclosure VulnerabilityCisco Prime Infrastructure
- CVE-2026-20193Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20195Cisco Identity Services Engine Observable Response Discrepancy VulnerabilityCisco Identity Services Engine Software
- CVE-2026-6863HTTP Filestore Endpoints Misapply Permissions Across OrganizationsRapid7 Velociraptor · www.velocidex.com/golang/velociraptor
- CVE-2026-8028FlowiseAI Flowise Endpoint account.service.ts verify information disclosureFlowiseAI Flowise
- CVE-2025-31975HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.HCL BigFix Service Management
- CVE-2025-52613HCL BigFix Service Management (SM) is affected by use of a vulnerable componentHCL BigFix Service Management
- CVE-2025-31976HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentialsHCL Software BigFix Service Management
- CVE-2025-31978HCL BigFix Service Management (SM) does not adequately sanitize or safely renderHCL Software BigFix Service Management
- CVE-2025-31959HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.HCL Software BigFix Service Management
- CVE-2025-31982HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directlHCL Software BigFix Service Management
- CVE-2026-8027FlowiseAI Flowise User Controller authorizationFlowiseAI Flowise
- CVE-2025-31984HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerHCL BigFix Service Management
- CVE-2025-31983HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP headerHCL BigFix Service Management
- CVE-2025-31957HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.HCL Software BigFix Service Management
- CVE-2026-8026FlowiseAI Flowise API Response account.service.ts login information disclosureFlowiseAI Flowise · flowise
- CVE-2025-62345HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” VulnerabilityHCL BigFix RunBookAI
- CVE-2025-71295fs/buffer: add alert in try_to_free_buffers() for folios without buffersLinux
- CVE-2025-71294drm/amdgpu: fix NULL pointer issue buffer funcsLinux
- CVE-2025-71293drm/amdgpu/ras: Move ras data alloc before bad page checkLinux
- CVE-2025-71291misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()Linux
- CVE-2025-71290misc: ti_fpc202: fix a potential memory leak in probe functionLinux
- CVE-2025-71288memory: mtk-smi: fix device leaks on common probeLinux
- CVE-2025-71287memory: mtk-smi: fix device leak on larb probeLinux
- CVE-2025-71285net: qrtr: Drop the MHI auto_queue feature for IPCR DL channelsLinux
- CVE-2026-43282RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_portLinux
- CVE-2026-43281mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()Linux
- CVE-2026-43277APEI/GHES: ensure that won't go past CPER allocated recordLinux
- CVE-2026-43276net: mana: Fix double destroy_workqueue on service rescan PCI pathLinux
- CVE-2026-43275scsi: ufs: core: Flush exception handling work when RPM level is zeroLinux
- CVE-2026-43273ceph: supply snapshot context in ceph_zero_partial_object()Linux
- CVE-2026-43272ring-buffer: Fix possible dereference of uninitialized pointerLinux
- CVE-2026-43271md-cluster: fix NULL pointer dereference in process_metadata_updateLinux
- CVE-2026-43270media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()Linux
- CVE-2026-43269drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callbackLinux
- CVE-2026-43268hfsplus: pretend special inodes as regular filesLinux
- CVE-2026-43267wifi: rtw89: fix potential zero beacon interval in beacon trackingLinux
- CVE-2026-43266EFI/CPER: don't go past the ARM processor CPER record bufferLinux
- CVE-2026-43265KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()Linux
- CVE-2026-43264fbdev: of: display_timing: fix refcount leak in of_get_display_timings()Linux
- CVE-2026-43262gfs2: fiemap page fault fixLinux
- CVE-2026-43261arm64: Add support for TSV110 Spectre-BHB mitigationLinux
- CVE-2026-43260bnxt_en: Fix RSS context delete logicLinux
- CVE-2026-43259phy: fsl-imx8mq-usb: set platform driver dataLinux
- CVE-2026-43257media: cx88: Add missing unmap in snd_cx88_hw_params()Linux
- CVE-2026-43255wifi: libertas: fix WARNING in usb_tx_blockLinux
- CVE-2026-43252mptcp: pm: in-kernel: always set ID as avail when rm endpLinux
- CVE-2026-43251HID: prodikeys: Check presence of pm->input_ep82Linux
- CVE-2026-43250usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()Linux
- CVE-2026-43247media: chips-media: wave5: Fix SError of kernel panic when closedLinux
- CVE-2026-43246media: i2c/tw9906: Fix potential memory leak in tw9906_probe()Linux
- CVE-2026-43244kcm: fix zero-frag skb in frag_list on partial sendmsg errorLinux
- CVE-2026-43243drm/amd/display: Add signal type check for dcn401 get_phyd32clk_srcLinux
- CVE-2026-43242soc: ti: k3-socinfo: Fix regmap leak on probe failureLinux
- CVE-2026-43241ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds accessLinux
- CVE-2026-43240x86/kexec: add a sanity check on previous kernel's ima kexec bufferLinux
- CVE-2026-43238net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()Linux
- CVE-2026-43235media: iris: Add missing platform data entries for SM8750Linux
- CVE-2026-43234team: avoid NETDEV_CHANGEMTU event when unregistering slaveLinux
- CVE-2026-43231media: radio-keene: fix memory leak in error pathLinux
- CVE-2026-43229media: chips-media: wave5: Fix device cleanup order to prevent kernel panicLinux
- CVE-2026-43228hfs: Replace BUG_ON with error handling for CNID count checksLinux
- CVE-2026-43227clocksource/drivers/sh_tmu: Always leave device running after probeLinux
- CVE-2026-43225staging: rtl8723bs: fix memory leak on failure pathLinux
- CVE-2026-43224io_uring/zcrx: fix sgtable leak on mapping failuresLinux
- CVE-2026-43223media: pvrusb2: fix URB leak in pvr2_send_request_exLinux
- CVE-2026-43221ipmi: ipmb: initialise event handler read bytesLinux
- CVE-2026-43220iommu/amd: serialize sequence allocation under concurrent TLB invalidationsLinux
- CVE-2026-43219net: cpsw_new: Fix potential unregister of netdev that has not been registered yetLinux
- CVE-2026-43218media: i2c/tw9903: Fix potential memory leak in tw9903_probe()Linux
- CVE-2026-43217media: iris: gen2: Add sanity check for session stopLinux
- CVE-2026-43216net: Drop the lock in skb_may_tx_timestamp()Linux
- CVE-2026-43210tracing: ring-buffer: Fix to check event length before usingLinux
- CVE-2026-43209minix: Add required sanity checking to minix_check_superblock()Linux
- CVE-2026-43205dpaa2-switch: validate num_ifs to prevent out-of-bounds writeLinux
- CVE-2026-43204ASoC: qcom: q6asm: drop DSP responses for closed data streamsLinux
- CVE-2026-43202fbdev: vt8500lcdfb: fix missing dma_free_coherent()Linux
- CVE-2026-43201APEI/GHES: ARM processor Error: don't go past allocated memoryLinux
- CVE-2026-43200PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functionsLinux
- CVE-2026-43196soc: ti: pruss: Fix double free in pruss_clk_mux_setup()Linux
- CVE-2026-43195drm/amdgpu: validate user queue size constraintsLinux
- CVE-2026-43193nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()Linux
- CVE-2026-43192dm mpath: Add missing dm_put_device when failing to get scsi dh nameLinux
- CVE-2026-43191drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35Linux
- CVE-2026-43189media: v4l2-async: Fix error handling on steps after finding a matchLinux
- CVE-2026-43188ceph: do not propagate page array emplacement errors as batch errorsLinux
- CVE-2026-43183media: cx25821: Fix a resource leak in cx25821_dev_setup()Linux
- CVE-2026-43182media: ccs: Avoid possible division by zeroLinux
- CVE-2026-43181gpio: sysfs: fix chip removal with GPIOs exported over sysfsLinux
- CVE-2026-43179erofs: fix incorrect early exits for invalid metabox-enabled imagesLinux
- CVE-2026-43177media: ipu6: Fix RPM reference leak in probe error pathsLinux
- CVE-2026-43175clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841Linux
- CVE-2026-43174io_uring/zcrx: fix post open error handlingLinux
- CVE-2026-43173net: ethernet: xscale: Check for PTP support properlyLinux
- CVE-2026-43171EFI/CPER: don't dump the entire memory regionLinux
- CVE-2026-43170usb: dwc3: gadget: Move vbus draw to workqueue contextLinux
- CVE-2026-43169drm/buddy: Prevent BUG_ON by validating rounded allocationLinux
- CVE-2026-43168ocfs2: fix reflink preserve cleanup issueLinux
- CVE-2026-43167xfrm: always flush state and policy upon NETDEV_UNREGISTER eventLinux
- CVE-2026-43165hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_faninLinux
- CVE-2026-43163md/bitmap: fix GPF in write_page caused by resize raceLinux
- CVE-2026-43162media: tegra-video: Fix memory leak in __tegra_channel_try_format()Linux
- CVE-2026-43161iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable modeLinux
- CVE-2026-43160mfd: macsmc: Initialize mutexLinux
- CVE-2026-43159staging: rtl8723bs: fix null dereference in find_networkLinux
- CVE-2026-43157octeontx2-af: CGX: fix bitmap leaksLinux
- CVE-2026-43156net: usb: pegasus: enable basic endpoint checkingLinux
- CVE-2026-43155mux: mmio: fix regmap leak on probe failureLinux
- CVE-2026-43154erofs: fix incorrect early exits in volume label handlingLinux
- CVE-2026-43152HID: hid-pl: handle probe errorsLinux
- CVE-2026-43151Revert "media: iris: Add sanity check for stop streaming"Linux
- CVE-2026-43149net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()Linux
- CVE-2026-43148powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()Linux
- CVE-2026-43147Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"Linux
- CVE-2026-43146media: iris: Add buffer to list only after successful allocationLinux
- CVE-2026-43145remoteproc: imx_rproc: Fix invalid loaded resource table detectionLinux
- CVE-2026-43144wifi: brcmfmac: Fix potential kernel oops when probe failsLinux
- CVE-2026-43143mfd: core: Add locking around 'mfd_of_node_list'Linux
- CVE-2026-43142media: iris: gen1: Destroy internal buffers after FW releasesLinux
- CVE-2026-43141ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lutLinux
- CVE-2026-43140HID: magicmouse: Do not crash on missing msc->inputLinux
- CVE-2026-43138reset: gpio: suppress bind attributes in sysfsLinux
- CVE-2026-43137ASoC: SOF: Intel: hda: Fix NULL pointer dereferenceLinux
- CVE-2026-43136HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()Linux
- CVE-2026-43135media: cx23885: Add missing unmap in snd_cx23885_hw_params()Linux
- CVE-2026-43132dm-verity: correctly handle dm_bufio_client_create() failureLinux
- CVE-2026-43131drm/amd/pm: Fix null pointer dereference issueLinux
- CVE-2026-43130iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable modeLinux
- CVE-2026-43129ima: verify the previous kernel's IMA buffer lies in addressable RAMLinux
- CVE-2026-43127ntfs3: fix circular locking dependency in run_unpack_exLinux
- CVE-2026-43124pstore: ram_core: fix incorrect success return when vmap() failsLinux
- CVE-2026-43123fbcon: check return value of con2fb_acquire_newinfo()Linux
- CVE-2026-43121io_uring/zcrx: fix user_ref race between scrub and refill pathsLinux
- CVE-2025-71273wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()Linux
- CVE-2025-71272most: core: fix resource leak in most_register_interface error pathsLinux
- CVE-2025-71271hfsplus: ensure sb->s_fs_info is always cleaned upLinux
- CVE-2025-59854HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerabilityHCL DFXAnalytics
- CVE-2025-59853HCL DFXAnalytics is affected by an Improper Error Handling vulnerabilityHCL DFXAnalytics
- CVE-2025-59852HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerabilityHCL DFXAnalytics
- CVE-2025-59851HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityHCL DFXAnalytics
- CVE-2025-31970HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityHCL DFXAnalytics
- CVE-2026-6420Keylime: keylime: security bypass due to hardcoded tpm quote noncekeylime · Red Hat Enterprise Linux
- CVE-2026-6860A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard nameEclipse Foundation Eclipse Vert.x · io.vertx:vertx-core
- CVE-2026-40001Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer clientZTE PROCESS Guard service
- CVE-2026-42509Apache Wicket: crafted strings can break out of the JavaScript sequenceApache Software Foundation Apache Wicket · org.apache.wicke…
- CVE-2026-43975Apache Wicket: Possible malicious path traversal in FolderUploadsFileManagerApache Software Foundation Apache Wicket · org.apache.wicke…
- CVE-2026-35255Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects.Oracle Cloud Native Environment Command Line Interface
- CVE-2026-43119Bluetooth: hci_sync: annotate data-races around hdev->req_statusLinux
- CVE-2026-43118btrfs: fix zero size inode with non-zero size after log replayLinux
- CVE-2026-43115srcu: Use irq_work to start GP in tiny SRCULinux
- CVE-2026-43109x86: shadow stacks: proper error handling for mmap lockLinux
- CVE-2026-43108soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_eiLinux
- CVE-2026-43107xfrm: account XFRMA_IF_ID in aevent size calculationLinux
- CVE-2026-43105drm/vc4: Fix memory leak of BO array in hang stateLinux
- CVE-2026-43104drm/vc4: Fix a memory leak in hang state error pathLinux
- CVE-2026-43103net: lapbether: handle NETDEV_PRE_TYPE_CHANGELinux
- CVE-2026-43102net: airoha: Fix memory leak in airoha_qdma_rx_process()Linux
- CVE-2026-43100bridge: guard local VLAN-0 FDB helpers against NULL vlan groupLinux
- CVE-2026-43098nfc: s3fwrn5: allocate rx skb before consuming bytesLinux
- CVE-2026-43097PCI: hv: Fix double ida_free in hv_pci_probe error pathLinux
- CVE-2026-43096mshv: Fix infinite fault loop on permission-denied GPA interceptsLinux
- CVE-2026-43095ASoC: SDCA: Fix errors in IRQ cleanupLinux
- CVE-2026-43094ixgbevf: add missing negotiate_features op to Hyper-V ops tableLinux
- CVE-2026-43092xsk: validate MTU against usable frame size on bindLinux
- CVE-2026-43090xfrm: fix refcount leak in xfrm_migrate_policy_findLinux
- CVE-2026-43089xfrm_user: fix info leak in build_mapping()Linux
- CVE-2026-43088net: af_key: zero aligned sockaddr tail in PF_KEY exportsLinux
- CVE-2026-43087pinctrl: mcp23s08: Disable all pin interrupts during probeLinux
- CVE-2026-43086ipvs: fix NULL deref in ip_vs_add_service error pathLinux
- CVE-2026-43085netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminatorLinux
- CVE-2026-43082net: txgbe: leave space for null terminators on property_entryLinux
- CVE-2026-43081net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+Linux
- CVE-2026-43080l2tp: Drop large packets with UDP encapLinux
- CVE-2026-43079perf/x86/intel/uncore: Skip discovery table for offline diesLinux
- CVE-2026-43077crypto: algif_aead - Fix minimum RX size check for decryptionLinux
- CVE-2026-35254Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects.Oracle OCI CLI of Oracle Open Source Projects
- CVE-2026-23927Agent 2 Oracle plugin TNS connection string injection via the 'service' parameterZabbix
- CVE-2026-7457LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile UpdateLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-6672Affiliate Program Suite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp_affiliate_url Shortcodeiovamihai Affiliate Program Suite — SliceWP Affiliates
- CVE-2026-6344Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachmenttechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2026-35253Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects.Oracle Macaron Tool of Oracle Open Source Projects
- CVE-2026-2306Ninja Tables <= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creationtechjewel Ninja Tables – Easy Data Table Builder
- CVE-2026-5753All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Downloadservmask All-in-One WP Migration Unlimited Extension
- CVE-2026-3208Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosuremercadopago Mercado Pago payments for WooCommerce
- CVE-2026-7572Velociraptor EVTX Parser — Process Crash via Crafted .evtx FileVelocidex velociraptor · www.velocidex.com/golang/velocirap…
- CVE-2026-7573GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizationsVelocidex velociraptor · www.velocidex.com/golang/velocirap…
- CVE-2026-36358Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Ad