# CVEs published 2026-05-06

481 CVEs were published on May 6, 2026: 23 critical, 179 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-3291](https://cve.now/CVE-2026-3291.md): Samsung Print Service Plugin – Potential Information Disclosure (CVSS 6.9, HP Samsung Print Service Plugin)
- [CVE-2026-41484](https://cve.now/CVE-2026-41484.md): OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body (CVSS 5.3, open-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…)
- [CVE-2026-41483](https://cve.now/CVE-2026-41483.md): Unbounded HTTP response body read in OpenTelemetry.Resources.Azure (CVSS 5.9, open-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…)
- [CVE-2026-41310](https://cve.now/CVE-2026-41310.md): OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth (CVSS 5.3, open-telemetry opentelemetry-dotnet · OpenTelemetry.Exporte…)
- [CVE-2026-41417](https://cve.now/CVE-2026-41417.md): Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri() (CVSS 5.3, netty · io.netty:netty-codec-http)
- [CVE-2026-40296](https://cve.now/CVE-2026-40296.md): PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes (CVSS 5.4, PHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet)
- [CVE-2026-40281](https://cve.now/CVE-2026-40281.md): Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values (CVSS 10.0, gotenberg · github.com/gotenberg/gotenberg/v7 +1)
- [CVE-2026-40251](https://cve.now/CVE-2026-40251.md): Incus out-of-bounds panic in snapshot metadata handling allows denial of service (CVSS 7.1, lxc incus · github.com/lxc/incus/v6/cmd/incusd +3)
- [CVE-2026-40243](https://cve.now/CVE-2026-40243.md): Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation (CVSS 2.3, lxc incus · github.com/lxc/incus +3)
- [CVE-2026-40197](https://cve.now/CVE-2026-40197.md): Incus nil-pointer dereference in custom volume import allows denial of service (CVSS 7.1, lxc incus · github.com/lxc/incus/v6/cmd/incusd +3)
- [CVE-2026-40195](https://cve.now/CVE-2026-40195.md): Incus nil-pointer dereference in storage bucket import allows denial of service (CVSS 7.1, lxc incus · github.com/lxc/incus/v6/cmd/incusd +3)
- [CVE-2026-40332](https://cve.now/CVE-2026-40332.md): Masa CMS open redirect via improper handling of scheme-relative URLs (CVSS 5.3, MasaCMS)
- [CVE-2026-40326](https://cve.now/CVE-2026-40326.md): Masa CMS CSRF in site bundle creation allows unauthorized site data export (CVSS 7.1, MasaCMS)
- [CVE-2026-40325](https://cve.now/CVE-2026-40325.md): Masa CMS CSRF in content restoration allows unauthorized restoration of deleted content (CVSS 8.7, MasaCMS)
- [CVE-2026-44118](https://cve.now/CVE-2026-44118.md): OpenClaw \< 2026.4.22 - Owner Context Spoofing via Bearer Token Header (CVSS 8.5, OpenClaw)
- [CVE-2026-44117](https://cve.now/CVE-2026-44117.md): OpenClaw \< 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload (CVSS 6.3, OpenClaw)
- [CVE-2026-44116](https://cve.now/CVE-2026-44116.md): OpenClaw \< 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation (CVSS 6.9, OpenClaw)
- [CVE-2026-44115](https://cve.now/CVE-2026-44115.md): OpenClaw \< 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist (CVSS 8.7, OpenClaw)
- [CVE-2026-44114](https://cve.now/CVE-2026-44114.md): OpenClaw \< 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv (CVSS 8.5, OpenClaw)
- [CVE-2026-44113](https://cve.now/CVE-2026-44113.md): OpenClaw \< 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge (CVSS 8.3, OpenClaw)
- [CVE-2026-44112](https://cve.now/CVE-2026-44112.md): OpenClaw \< 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes (CVSS 8.4, OpenClaw)
- [CVE-2026-44111](https://cve.now/CVE-2026-44111.md): OpenClaw \< 2026.4.15 - Arbitrary Markdown File Read via QMD memory\_get (CVSS 2.3, OpenClaw)
- [CVE-2026-44110](https://cve.now/CVE-2026-44110.md): OpenClaw \< 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store (CVSS 7.7, OpenClaw)
- [CVE-2026-44109](https://cve.now/CVE-2026-44109.md): OpenClaw \< 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action Validation (CVSS 9.2, OpenClaw)
- [CVE-2026-43585](https://cve.now/CVE-2026-43585.md): OpenClaw \< 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolution (CVSS 9.2, OpenClaw)
- [CVE-2026-43584](https://cve.now/CVE-2026-43584.md): OpenClaw \< 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policy (CVSS 8.7, OpenClaw)
- [CVE-2026-43583](https://cve.now/CVE-2026-43583.md): OpenClaw 2026.4.10 \< 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recovery (CVSS 6.0, OpenClaw)
- [CVE-2026-43582](https://cve.now/CVE-2026-43582.md): OpenClaw \< 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass (CVSS 4.9, OpenClaw)
- [CVE-2026-43581](https://cve.now/CVE-2026-43581.md): OpenClaw \< 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding (CVSS 9.0, OpenClaw)
- [CVE-2026-43580](https://cve.now/CVE-2026-43580.md): OpenClaw \< 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactions (CVSS 4.9, OpenClaw)
- [CVE-2026-43579](https://cve.now/CVE-2026-43579.md): OpenClaw \< 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routes (CVSS 6.0, OpenClaw)
- [CVE-2026-43578](https://cve.now/CVE-2026-43578.md): OpenClaw 2026.3.31 \< 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade (CVSS 9.1, OpenClaw)
- [CVE-2026-43577](https://cve.now/CVE-2026-43577.md): OpenClaw \< 2026.4.9 - Arbitrary File Read via Browser Interaction Routes (CVSS 7.1, OpenClaw)
- [CVE-2026-43576](https://cve.now/CVE-2026-43576.md): OpenClaw \< 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL (CVSS 4.9, OpenClaw)
- [CVE-2026-43575](https://cve.now/CVE-2026-43575.md): OpenClaw 2026.2.21 \< 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Route (CVSS 9.2, OpenClaw)
- [CVE-2026-40309](https://cve.now/CVE-2026-40309.md): Masa CMS CSRF in trash management allows unauthorized permanent deletion of deleted content (CVSS 7.2, MasaCMS)
- [CVE-2026-40174](https://cve.now/CVE-2026-40174.md): Masa CMS CSRF in user address management allows unauthorized address changes (CVSS 7.1, MasaCMS)
- [CVE-2026-40171](https://cve.now/CVE-2026-40171.md): Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker (CVSS 8.4, jupyter notebook · jupyterlab help-extension +5)
- [CVE-2026-40076](https://cve.now/CVE-2026-40076.md): OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload (CVSS 9.4, openmrs-core · org.openmrs.web:openmrs-web)
- [CVE-2026-8033](https://cve.now/CVE-2026-8033.md): PicoTronica e-Clinic Healthcare System ECHS Response Header v2 information disclosure (CVSS 6.9, PicoTronica e-Clinic Healthcare System ECHS)
- [CVE-2026-8032](https://cve.now/CVE-2026-8032.md): PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials (CVSS 6.9, PicoTronica e-Clinic Healthcare System ECHS)
- [CVE-2026-0300](https://cve.now/CVE-2026-0300.md): PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (CVSS 9.3, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2026-41938](https://cve.now/CVE-2026-41938.md): Vvveb \< 1.0.8.2 RCE via Media Upload Handler (CVSS 8.7, givanz Vvveb)
- [CVE-2026-41930](https://cve.now/CVE-2026-41930.md): Vvveb \< 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin (CVSS 9.2, givanz Vvveb)
- [CVE-2026-41931](https://cve.now/CVE-2026-41931.md): Vvveb \< 1.0.8.2 Information Disclosure via Debug Exception Handler (CVSS 6.9, givanz Vvveb)
- [CVE-2026-41934](https://cve.now/CVE-2026-41934.md): Vvveb \< 1.0.8.2 Authenticated RCE via Code Editor (CVSS 8.7, givanz Vvveb)
- [CVE-2026-41936](https://cve.now/CVE-2026-41936.md): Vvveb \< 1.0.8.2 XML External Entity Injection via Import (CVSS 8.6, givanz Vvveb)
- [CVE-2024-30151](https://cve.now/CVE-2024-30151.md): HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability (CVSS 8.3, HCL BigFix Service Management)
- [CVE-2026-8022](https://cve.now/CVE-2026-8022.md): Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in sp (CVSS 3.1, Google Chrome)
- [CVE-2026-8021](https://cve.now/CVE-2026-8021.md): Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestu (CVSS 4.2, Google Chrome)
- [CVE-2026-8020](https://cve.now/CVE-2026-8020.md): Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proce (CVSS 5.3, Google Chrome)
- [CVE-2026-8019](https://cve.now/CVE-2026-8019.md): Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a cra (CVSS 5.4, Google Chrome)
- [CVE-2026-8018](https://cve.now/CVE-2026-8018.md): Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandb (CVSS 8.1, Google Chrome)
- [CVE-2026-8017](https://cve.now/CVE-2026-8017.md): Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a (CVSS 3.1, Google Chrome)
- [CVE-2026-8016](https://cve.now/CVE-2026-8016.md): Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-8015](https://cve.now/CVE-2026-8015.md): Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted (CVSS 5.4, Google Chrome)
- [CVE-2026-8014](https://cve.now/CVE-2026-8014.md): Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a cr (CVSS 4.3, Google Chrome)
- [CVE-2026-8013](https://cve.now/CVE-2026-8013.md): Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin d (CVSS 4.3, Google Chrome)
- [CVE-2026-8012](https://cve.now/CVE-2026-8012.md): Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer pro (CVSS 5.4, Google Chrome)
- [CVE-2026-8011](https://cve.now/CVE-2026-8011.md): Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a (CVSS 4.3, Google Chrome)
- [CVE-2026-8010](https://cve.now/CVE-2026-8010.md): Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compro (CVSS 6.3, Google Chrome)
- [CVE-2026-8009](https://cve.now/CVE-2026-8009.md): Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proc (CVSS 5.0, Google Chrome)
- [CVE-2026-8008](https://cve.now/CVE-2026-8008.md): Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malic (CVSS 5.4, Google Chrome)
- [CVE-2026-8007](https://cve.now/CVE-2026-8007.md): Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the (CVSS 7.5, Google Chrome)
- [CVE-2026-8006](https://cve.now/CVE-2026-8006.md): Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a ma (CVSS 5.4, Google Chrome)
- [CVE-2026-8005](https://cve.now/CVE-2026-8005.md): Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment (CVSS 4.3, Google Chrome)
- [CVE-2026-8004](https://cve.now/CVE-2026-8004.md): Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a ma (CVSS 4.3, Google Chrome)
- [CVE-2026-8003](https://cve.now/CVE-2026-8003.md): Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoo (CVSS 5.4, Google Chrome)
- [CVE-2026-8002](https://cve.now/CVE-2026-8002.md): Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-8001](https://cve.now/CVE-2026-8001.md): Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the (CVSS 8.3, Google Chrome)
- [CVE-2026-8000](https://cve.now/CVE-2026-8000.md): Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to e (CVSS 8.8, Google Chrome)
- [CVE-2026-7999](https://cve.now/CVE-2026-7999.md): Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive informa (CVSS 4.3, Google Chrome)
- [CVE-2026-7998](https://cve.now/CVE-2026-7998.md): Insufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised t (CVSS 5.4, Google Chrome)
- [CVE-2026-7997](https://cve.now/CVE-2026-7997.md): Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS- (CVSS 7.8, Google Chrome)
- [CVE-2026-7996](https://cve.now/CVE-2026-7996.md): Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the (CVSS 4.2, Google Chrome)
- [CVE-2026-7995](https://cve.now/CVE-2026-7995.md): Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-7994](https://cve.now/CVE-2026-7994.md): Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level p (CVSS 7.8, Google Chrome)
- [CVE-2026-7993](https://cve.now/CVE-2026-7993.md): Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had (CVSS 4.2, Google Chrome)
- [CVE-2026-7992](https://cve.now/CVE-2026-7992.md): Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who co (CVSS 8.8, Google Chrome)
- [CVE-2026-7991](https://cve.now/CVE-2026-7991.md): Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute a (CVSS 8.8, Google Chrome)
- [CVE-2026-7990](https://cve.now/CVE-2026-7990.md): Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform (CVSS 7.8, Google Chrome)
- [CVE-2026-7989](https://cve.now/CVE-2026-7989.md): Insufficient data validation in DataTransfer in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rende (CVSS 4.2, Google Chrome)
- [CVE-2026-7988](https://cve.now/CVE-2026-7988.md): Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-7987](https://cve.now/CVE-2026-7987.md): Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-7986](https://cve.now/CVE-2026-7986.md): Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via (CVSS 4.3, Google Chrome)
- [CVE-2026-7985](https://cve.now/CVE-2026-7985.md): Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentia (CVSS 8.3, Google Chrome)
- [CVE-2026-7984](https://cve.now/CVE-2026-7984.md): Use after free in ReadingMode in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to (CVSS 8.8, Google Chrome)
- [CVE-2026-7983](https://cve.now/CVE-2026-7983.md): Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML pa (CVSS 4.3, Google Chrome)
- [CVE-2026-7982](https://cve.now/CVE-2026-7982.md): Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information (CVSS 6.5, Google Chrome)
- [CVE-2026-7981](https://cve.now/CVE-2026-7981.md): Out of bounds read in Codecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information f (CVSS 8.1, Google Chrome)
- [CVE-2026-7980](https://cve.now/CVE-2026-7980.md): Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-7979](https://cve.now/CVE-2026-7979.md): Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a craf (CVSS 4.3, Google Chrome)
- [CVE-2026-7978](https://cve.now/CVE-2026-7978.md): Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privi (CVSS 8.1, Google Chrome)
- [CVE-2026-7977](https://cve.now/CVE-2026-7977.md): Inappropriate implementation in Canvas in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass same origin policy via a (CVSS 6.3, Google Chrome)
- [CVE-2026-7976](https://cve.now/CVE-2026-7976.md): Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to (CVSS 7.5, Google Chrome)
- [CVE-2026-7975](https://cve.now/CVE-2026-7975.md): Use after free in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to pot (CVSS 8.3, Google Chrome)
- [CVE-2026-7974](https://cve.now/CVE-2026-7974.md): Use after free in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-7973](https://cve.now/CVE-2026-7973.md): Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escap (CVSS 8.8, Google Chrome)
- [CVE-2026-7972](https://cve.now/CVE-2026-7972.md): Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak (CVSS 4.3, Google Chrome)
- [CVE-2026-7971](https://cve.now/CVE-2026-7971.md): Inappropriate implementation in ORB in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass site isolation via a crafted (CVSS 6.3, Google Chrome)
- [CVE-2026-7970](https://cve.now/CVE-2026-7970.md): Use after free in TopChrome in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to po (CVSS 8.3, Google Chrome)
- [CVE-2026-7969](https://cve.now/CVE-2026-7969.md): Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to by (CVSS 4.3, Google Chrome)
- [CVE-2026-7968](https://cve.now/CVE-2026-7968.md): Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the (CVSS 3.1, Google Chrome)
- [CVE-2026-7967](https://cve.now/CVE-2026-7967.md): Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromis (CVSS 8.3, Google Chrome)
- [CVE-2026-7966](https://cve.now/CVE-2026-7966.md): Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compro (CVSS 3.1, Google Chrome)
- [CVE-2026-7965](https://cve.now/CVE-2026-7965.md): Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised (CVSS 3.1, Google Chrome)
- [CVE-2026-7964](https://cve.now/CVE-2026-7964.md): Insufficient validation of untrusted input in FileSystem in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromis (CVSS 4.2, Google Chrome)
- [CVE-2026-7963](https://cve.now/CVE-2026-7963.md): Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rend (CVSS 8.3, Google Chrome)
- [CVE-2026-7962](https://cve.now/CVE-2026-7962.md): Insufficient policy enforcement in DirectSockets in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read (CVSS 5.4, Google Chrome)
- [CVE-2026-7961](https://cve.now/CVE-2026-7961.md): Insufficient validation of untrusted input in Permissions in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network s (CVSS 4.3, Google Chrome)
- [CVE-2026-7960](https://cve.now/CVE-2026-7960.md): Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentia (CVSS 5.3, Google Chrome)
- [CVE-2026-7959](https://cve.now/CVE-2026-7959.md): Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere (CVSS 3.1, Google Chrome)
- [CVE-2026-7958](https://cve.now/CVE-2026-7958.md): Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a (CVSS 5.4, Google Chrome)
- [CVE-2026-7957](https://cve.now/CVE-2026-7957.md): Out of bounds write in Media in Google Chrome on Mac, iOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer (CVSS 8.8, Google Chrome)
- [CVE-2026-7956](https://cve.now/CVE-2026-7956.md): Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to p (CVSS 8.3, Google Chrome)
- [CVE-2026-7955](https://cve.now/CVE-2026-7955.md): Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtai (CVSS 5.3, Google Chrome)
- [CVE-2026-7954](https://cve.now/CVE-2026-7954.md): Race in Shared Storage in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cr (CVSS 3.1, Google Chrome)
- [CVE-2026-7953](https://cve.now/CVE-2026-7953.md): Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary (CVSS 6.1, Google Chrome)
- [CVE-2026-7952](https://cve.now/CVE-2026-7952.md): Insufficient policy enforcement in Extensions in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rend (CVSS 4.2, Google Chrome)
- [CVE-2026-7951](https://cve.now/CVE-2026-7951.md): Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-7950](https://cve.now/CVE-2026-7950.md): Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via ma (CVSS 5.4, Google Chrome)
- [CVE-2026-7949](https://cve.now/CVE-2026-7949.md): Out of bounds read in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to lea (CVSS 3.1, Google Chrome)
- [CVE-2026-7948](https://cve.now/CVE-2026-7948.md): Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicio (CVSS 7.5, Google Chrome)
- [CVE-2026-7947](https://cve.now/CVE-2026-7947.md): Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised (CVSS 4.2, Google Chrome)
- [CVE-2026-7946](https://cve.now/CVE-2026-7946.md): Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker (CVSS 4.3, Google Chrome)
- [CVE-2026-7945](https://cve.now/CVE-2026-7945.md): Insufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the (CVSS 3.1, Google Chrome)
- [CVE-2026-7944](https://cve.now/CVE-2026-7944.md): Insufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had com (CVSS 3.1, Google Chrome)
- [CVE-2026-7943](https://cve.now/CVE-2026-7943.md): Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised th (CVSS 4.2, Google Chrome)
- [CVE-2026-7942](https://cve.now/CVE-2026-7942.md): Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML pag (CVSS 4.3, Google Chrome)
- [CVE-2026-7941](https://cve.now/CVE-2026-7941.md): Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject a (CVSS 4.4, Google Chrome)
- [CVE-2026-7940](https://cve.now/CVE-2026-7940.md): Use after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to ex (CVSS 8.8, Google Chrome)
- [CVE-2026-7939](https://cve.now/CVE-2026-7939.md): Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts o (CVSS 5.4, Google Chrome)
- [CVE-2026-7938](https://cve.now/CVE-2026-7938.md): Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra (CVSS 8.8, Google Chrome)
- [CVE-2026-7937](https://cve.now/CVE-2026-7937.md): Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a ma (CVSS 3.1, Google Chrome)
- [CVE-2026-7935](https://cve.now/CVE-2026-7935.md): Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafte (CVSS 5.4, Google Chrome)
- [CVE-2026-7934](https://cve.now/CVE-2026-7934.md): Insufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compro (CVSS 4.2, Google Chrome)
- [CVE-2026-7933](https://cve.now/CVE-2026-7933.md): Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read vi (CVSS 4.3, Google Chrome)
- [CVE-2026-7932](https://cve.now/CVE-2026-7932.md): Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restricti (CVSS 4.4, Google Chrome)
- [CVE-2026-7931](https://cve.now/CVE-2026-7931.md): Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spo (CVSS 5.4, Google Chrome)
- [CVE-2026-7929](https://cve.now/CVE-2026-7929.md): Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specifi (CVSS 7.5, Google Chrome)
- [CVE-2026-7928](https://cve.now/CVE-2026-7928.md): Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a san (CVSS 8.8, Google Chrome)
- [CVE-2026-7927](https://cve.now/CVE-2026-7927.md): Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-7926](https://cve.now/CVE-2026-7926.md): Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandb (CVSS 8.8, Google Chrome)
- [CVE-2026-7925](https://cve.now/CVE-2026-7925.md): Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escal (CVSS 7.8, Google Chrome)
- [CVE-2026-7924](https://cve.now/CVE-2026-7924.md): Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from (CVSS 6.5, Google Chrome)
- [CVE-2026-7923](https://cve.now/CVE-2026-7923.md): Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to po (CVSS 8.3, Google Chrome)
- [CVE-2026-7922](https://cve.now/CVE-2026-7922.md): Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape vi (CVSS 8.3, Google Chrome)
- [CVE-2026-7921](https://cve.now/CVE-2026-7921.md): Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML p (CVSS 8.8, Google Chrome)
- [CVE-2026-7920](https://cve.now/CVE-2026-7920.md): Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potenti (CVSS 8.3, Google Chrome)
- [CVE-2026-7919](https://cve.now/CVE-2026-7919.md): Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potenti (CVSS 8.3, Google Chrome)
- [CVE-2026-7918](https://cve.now/CVE-2026-7918.md): Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentia (CVSS 8.3, Google Chrome)
- [CVE-2026-7917](https://cve.now/CVE-2026-7917.md): Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer p (CVSS 8.3, Google Chrome)
- [CVE-2026-7916](https://cve.now/CVE-2026-7916.md): Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the ren (CVSS 8.3, Google Chrome)
- [CVE-2026-7915](https://cve.now/CVE-2026-7915.md): Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation r (CVSS 4.3, Google Chrome)
- [CVE-2026-7914](https://cve.now/CVE-2026-7914.md): Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere (CVSS 8.3, Google Chrome)
- [CVE-2026-7913](https://cve.now/CVE-2026-7913.md): Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege (CVSS 7.8, Google Chrome)
- [CVE-2026-7912](https://cve.now/CVE-2026-7912.md): Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proces (CVSS 4.2, Google Chrome)
- [CVE-2026-7911](https://cve.now/CVE-2026-7911.md): Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process (CVSS 8.3, Google Chrome)
- [CVE-2026-7910](https://cve.now/CVE-2026-7910.md): Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass (CVSS 4.7, Google Chrome)
- [CVE-2026-7909](https://cve.now/CVE-2026-7909.md): Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rend (CVSS 3.1, Google Chrome)
- [CVE-2026-7908](https://cve.now/CVE-2026-7908.md): Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a (CVSS 9.6, Google Chrome)
- [CVE-2026-7907](https://cve.now/CVE-2026-7907.md): Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra (CVSS 8.8, Google Chrome)
- [CVE-2026-7906](https://cve.now/CVE-2026-7906.md): Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra (CVSS 8.8, Google Chrome)
- [CVE-2026-7905](https://cve.now/CVE-2026-7905.md): Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had com (CVSS 8.3, Google Chrome)
- [CVE-2026-7904](https://cve.now/CVE-2026-7904.md): Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a (CVSS 4.3, Google Chrome)
- [CVE-2026-7903](https://cve.now/CVE-2026-7903.md): Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corru (CVSS 8.8, Google Chrome)
- [CVE-2026-7902](https://cve.now/CVE-2026-7902.md): Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandb (CVSS 8.8, Google Chrome)
- [CVE-2026-7901](https://cve.now/CVE-2026-7901.md): Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-7900](https://cve.now/CVE-2026-7900.md): Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-7899](https://cve.now/CVE-2026-7899.md): Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sand (CVSS 8.8, Google Chrome)
- [CVE-2026-7898](https://cve.now/CVE-2026-7898.md): Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malici (CVSS 8.8, Google Chrome)
- [CVE-2026-7897](https://cve.now/CVE-2026-7897.md): Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific (CVSS 7.5, Google Chrome)
- [CVE-2026-7896](https://cve.now/CVE-2026-7896.md): Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a cra (CVSS 8.8, Google Chrome)
- [CVE-2025-31960](https://cve.now/CVE-2025-31960.md): HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module (CVSS 5.3, HCL BigFix Service Management)
- [CVE-2025-31974](https://cve.now/CVE-2025-31974.md): HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only (CVSS 3.9, HCL Software BigFix Service Management)
- [CVE-2026-8031](https://cve.now/CVE-2026-8031.md): PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication (CVSS 6.9, PicoTronica e-Clinic Healthcare System ECHS)
- [CVE-2026-33079](https://cve.now/CVE-2026-33079.md): Mistune ReDoS in LINK\_TITLE\_RE allows denial of service with crafted Markdown titles (CVSS 8.7, lepture mistune · mistune)
- [CVE-2026-29090](https://cve.now/CVE-2026-29090.md): Rucio SQL injection in postgres\_meta DID search path compromises PostgreSQL metadata database (CVSS 9.0, rucio)
- [CVE-2026-20219](https://cve.now/CVE-2026-20219.md): A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of oth (CVSS 5.4, Cisco Webex Meetings · Cisco Slido)
- [CVE-2026-29080](https://cve.now/CVE-2026-29080.md): Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API (CVSS 9.4, rucio)
- [CVE-2026-23870](https://cve.now/CVE-2026-23870.md): A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lea (CVSS 7.5, Meta react-server-dom-turbopack · Meta react-server-dom-… +4)
- [CVE-2026-21661](https://cve.now/CVE-2026-21661.md): AC2000 Uncontrolled Search Path Element (CVSS 8.4, Johnson Controls AC2000)
- [CVE-2026-42503](https://cve.now/CVE-2026-42503.md): Accidental binding to INADDR\_ANY might lead to RCE in golang.org/x/tools/gopls (CVSS 8.8, golang.org/x/tools/gopls)
- [CVE-2026-20034](https://cve.now/CVE-2026-20034.md): Cisco Unity Connection Remote Code Execution Vulnerability (CVSS 8.8, Cisco Unity Connection)
- [CVE-2026-20035](https://cve.now/CVE-2026-20035.md): Cisco Unity Connection Server-Side Request Forgery Vulnerability (CVSS 7.2, Cisco Unity Connection)
- [CVE-2026-20167](https://cve.now/CVE-2026-20167.md): Cisco IoT Field Network Director Remote Device Denial of Service Vulnerability (CVSS 7.7, Cisco IoT Field Network Director)
- [CVE-2026-20169](https://cve.now/CVE-2026-20169.md): Cisco IoT Field Network Director Command Injection Vulnerability (CVSS 6.4, Cisco IoT Field Network Director)
- [CVE-2026-20168](https://cve.now/CVE-2026-20168.md): Cisco IoT Field Network Director Path Traversal Vulnerability (CVSS 6.5, Cisco IoT Field Network Director)
- [CVE-2026-20172](https://cve.now/CVE-2026-20172.md): Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability (CVSS 4.3, Cisco Enterprise Chat and Email)
- [CVE-2026-20188](https://cve.now/CVE-2026-20188.md): Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory (CVSS 0.0, Cisco Crosswork Network Change Automation)
- [CVE-2026-20189](https://cve.now/CVE-2026-20189.md): Cisco Prime Infrastructure Information Disclosure Vulnerability (CVSS 4.3, Cisco Prime Infrastructure)
- [CVE-2026-20185](https://cve.now/CVE-2026-20185.md): Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability (CVSS 7.7, Cisco Small Business Smart and Managed Switches)
- [CVE-2026-20193](https://cve.now/CVE-2026-20193.md): Cisco Identity Services Engine Authentication Bypass Vulnerability (CVSS 4.3, Cisco Identity Services Engine Software)
- [CVE-2026-20195](https://cve.now/CVE-2026-20195.md): Cisco Identity Services Engine Observable Response Discrepancy Vulnerability (CVSS 5.3, Cisco Identity Services Engine Software)
- [CVE-2026-7875](https://cve.now/CVE-2026-7875.md): NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling (CVSS 8.8, Qwibit NanoClaw)
- [CVE-2026-6788](https://cve.now/CVE-2026-6788.md): Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent (CVSS 8.5, WatchGuard Agent)
- [CVE-2026-6787](https://cve.now/CVE-2026-6787.md): Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process (CVSS 8.5, WatchGuard Agent)
- [CVE-2026-41286](https://cve.now/CVE-2026-41286.md): Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B (CVSS 7.1, WatchGuard Agent)
- [CVE-2026-41288](https://cve.now/CVE-2026-41288.md): WatchGuard Agent on Windows Privilege Escalation Vulnerability (CVSS 7.3, WatchGuard Agent)
- [CVE-2026-6691](https://cve.now/CVE-2026-6691.md): MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow (CVSS 8.6, MongoDB C Driver)
- [CVE-2026-6863](https://cve.now/CVE-2026-6863.md): HTTP Filestore Endpoints Misapply Permissions Across Organizations (CVSS 6.8, Rapid7 Velociraptor · www.velocidex.com/golang/velociraptor)
- [CVE-2026-8028](https://cve.now/CVE-2026-8028.md): FlowiseAI Flowise Endpoint account.service.ts verify information disclosure (CVSS 6.3, FlowiseAI Flowise)
- [CVE-2025-31975](https://cve.now/CVE-2025-31975.md): HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. (CVSS 2.6, HCL BigFix Service Management)
- [CVE-2025-52613](https://cve.now/CVE-2025-52613.md): HCL BigFix Service Management (SM) is affected by use of a vulnerable component (CVSS 4.6, HCL BigFix Service Management)
- [CVE-2025-31976](https://cve.now/CVE-2025-31976.md): HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials (CVSS 4.8, HCL Software BigFix Service Management)
- [CVE-2025-31978](https://cve.now/CVE-2025-31978.md): HCL BigFix Service Management (SM) does not adequately sanitize or safely render (CVSS 4.6, HCL Software BigFix Service Management)
- [CVE-2025-31959](https://cve.now/CVE-2025-31959.md): HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. (CVSS 3.5, HCL Software BigFix Service Management)
- [CVE-2025-31982](https://cve.now/CVE-2025-31982.md): HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl (CVSS 3.7, HCL Software BigFix Service Management)
- [CVE-2026-8027](https://cve.now/CVE-2026-8027.md): FlowiseAI Flowise User Controller authorization (CVSS 5.3, FlowiseAI Flowise)
- [CVE-2025-31984](https://cve.now/CVE-2025-31984.md): HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header (CVSS 3.7, HCL BigFix Service Management)
- [CVE-2025-31983](https://cve.now/CVE-2025-31983.md): HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header (CVSS 3.7, HCL BigFix Service Management)
- [CVE-2026-41287](https://cve.now/CVE-2026-41287.md): Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A (CVSS 7.1, WatchGuard Agent)
- [CVE-2025-31957](https://cve.now/CVE-2025-31957.md): HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. (CVSS 2.6, HCL Software BigFix Service Management)
- [CVE-2026-40562](https://cve.now/CVE-2026-40562.md): Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence (CVSS 7.5, KAZEBURO Gazelle)
- [CVE-2026-8026](https://cve.now/CVE-2026-8026.md): FlowiseAI Flowise API Response account.service.ts login information disclosure (CVSS 6.3, FlowiseAI Flowise · flowise)
- [CVE-2026-5081](https://cve.now/CVE-2026-5081.md): Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure (CVSS 9.1, CHORNY Apache::Session::Generate::ModUniqueId)
- [CVE-2026-6210](https://cve.now/CVE-2026-6210.md): Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash (CVSS 8.7, Qt)
- [CVE-2025-62345](https://cve.now/CVE-2025-62345.md): HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability (CVSS 2.7, HCL BigFix RunBookAI)
- [CVE-2025-31951](https://cve.now/CVE-2025-31951.md): HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability (CVSS 8.8, HCL BigFix RunBookAI)
- [CVE-2025-71295](https://cve.now/CVE-2025-71295.md): fs/buffer: add alert in try\_to\_free\_buffers() for folios without buffers (no CVSS, Linux)
- [CVE-2025-71294](https://cve.now/CVE-2025-71294.md): drm/amdgpu: fix NULL pointer issue buffer funcs (no CVSS, Linux)
- [CVE-2025-71293](https://cve.now/CVE-2025-71293.md): drm/amdgpu/ras: Move ras data alloc before bad page check (no CVSS, Linux)
- [CVE-2025-71292](https://cve.now/CVE-2025-71292.md): jfs: nlink overflow in jfs\_rename (CVSS 7.5, Linux)
- [CVE-2025-71291](https://cve.now/CVE-2025-71291.md): misc: bcm\_vk: Fix possible null-pointer dereferences in bcm\_vk\_read() (no CVSS, Linux)
- [CVE-2025-71290](https://cve.now/CVE-2025-71290.md): misc: ti\_fpc202: fix a potential memory leak in probe function (no CVSS, Linux)
- [CVE-2025-71289](https://cve.now/CVE-2025-71289.md): fs/ntfs3: handle attr\_set\_size() errors when truncating files (CVSS 7.1, Linux)
- [CVE-2025-71288](https://cve.now/CVE-2025-71288.md): memory: mtk-smi: fix device leaks on common probe (no CVSS, Linux)
- [CVE-2025-71287](https://cve.now/CVE-2025-71287.md): memory: mtk-smi: fix device leak on larb probe (no CVSS, Linux)
- [CVE-2025-71286](https://cve.now/CVE-2025-71286.md): ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (CVSS 7.8, Linux)
- [CVE-2025-71285](https://cve.now/CVE-2025-71285.md): net: qrtr: Drop the MHI auto\_queue feature for IPCR DL channels (no CVSS, Linux)
- [CVE-2026-43283](https://cve.now/CVE-2026-43283.md): net: ethernet: ec\_bhf: Fix dma\_free\_coherent() dma handle (CVSS 8.8, Linux)
- [CVE-2026-43282](https://cve.now/CVE-2026-43282.md): RDMA/ionic: Fix potential NULL pointer dereference in ionic\_query\_port (no CVSS, Linux)
- [CVE-2026-43281](https://cve.now/CVE-2026-43281.md): mailbox: Prevent out-of-bounds access in fw\_mbox\_index\_xlate() (no CVSS, Linux)
- [CVE-2026-43280](https://cve.now/CVE-2026-43280.md): drm/xe: Add bounds check on pat\_index to prevent OOB kernel read in madvise (CVSS 7.1, Linux)
- [CVE-2026-43279](https://cve.now/CVE-2026-43279.md): ALSA: usb-audio: Add sanity check for OOB writes at silencing (CVSS 7.8, Linux)
- [CVE-2026-43278](https://cve.now/CVE-2026-43278.md): dm: clear cloned request bio pointer when last clone bio completes (CVSS 7.8, Linux)
- [CVE-2026-43277](https://cve.now/CVE-2026-43277.md): APEI/GHES: ensure that won't go past CPER allocated record (no CVSS, Linux)
- [CVE-2026-43276](https://cve.now/CVE-2026-43276.md): net: mana: Fix double destroy\_workqueue on service rescan PCI path (no CVSS, Linux)
- [CVE-2026-43275](https://cve.now/CVE-2026-43275.md): scsi: ufs: core: Flush exception handling work when RPM level is zero (no CVSS, Linux)
- [CVE-2026-43274](https://cve.now/CVE-2026-43274.md): mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp\_ipc\_get\_cluster\_aggr\_irq() (CVSS 8.4, Linux)
- [CVE-2026-43273](https://cve.now/CVE-2026-43273.md): ceph: supply snapshot context in ceph\_zero\_partial\_object() (no CVSS, Linux)
- [CVE-2026-43272](https://cve.now/CVE-2026-43272.md): ring-buffer: Fix possible dereference of uninitialized pointer (no CVSS, Linux)
- [CVE-2026-43271](https://cve.now/CVE-2026-43271.md): md-cluster: fix NULL pointer dereference in process\_metadata\_update (no CVSS, Linux)
- [CVE-2026-43270](https://cve.now/CVE-2026-43270.md): media: mtk-mdp: Fix a reference leak bug in mtk\_mdp\_remove() (no CVSS, Linux)
- [CVE-2026-43269](https://cve.now/CVE-2026-43269.md): drm/atmel-hlcdc: fix memory leak from the atomic\_destroy\_state callback (no CVSS, Linux)
- [CVE-2026-43268](https://cve.now/CVE-2026-43268.md): hfsplus: pretend special inodes as regular files (no CVSS, Linux)
- [CVE-2026-43267](https://cve.now/CVE-2026-43267.md): wifi: rtw89: fix potential zero beacon interval in beacon tracking (no CVSS, Linux)
- [CVE-2026-43266](https://cve.now/CVE-2026-43266.md): EFI/CPER: don't go past the ARM processor CPER record buffer (no CVSS, Linux)
- [CVE-2026-43265](https://cve.now/CVE-2026-43265.md): KVM: x86: Ignore -EBUSY when checking nested events from vcpu\_block() (no CVSS, Linux)
- [CVE-2026-43264](https://cve.now/CVE-2026-43264.md): fbdev: of: display\_timing: fix refcount leak in of\_get\_display\_timings() (no CVSS, Linux)
- [CVE-2026-43263](https://cve.now/CVE-2026-43263.md): media: chips-media: wave5: Fix Null reference while testing fluster (CVSS 7.8, Linux)
- [CVE-2026-43262](https://cve.now/CVE-2026-43262.md): gfs2: fiemap page fault fix (no CVSS, Linux)
- [CVE-2026-43261](https://cve.now/CVE-2026-43261.md): arm64: Add support for TSV110 Spectre-BHB mitigation (no CVSS, Linux)
- [CVE-2026-43260](https://cve.now/CVE-2026-43260.md): bnxt\_en: Fix RSS context delete logic (no CVSS, Linux)
- [CVE-2026-43259](https://cve.now/CVE-2026-43259.md): phy: fsl-imx8mq-usb: set platform driver data (no CVSS, Linux)
- [CVE-2026-43258](https://cve.now/CVE-2026-43258.md): alpha: fix user-space corruption during memory compaction (CVSS 7.8, Linux)
- [CVE-2026-43257](https://cve.now/CVE-2026-43257.md): media: cx88: Add missing unmap in snd\_cx88\_hw\_params() (no CVSS, Linux)
- [CVE-2026-43256](https://cve.now/CVE-2026-43256.md): media: qcom: camss: vfe: Fix out-of-bounds access in vfe\_isr\_reg\_update() (CVSS 7.8, Linux)
- [CVE-2026-43255](https://cve.now/CVE-2026-43255.md): wifi: libertas: fix WARNING in usb\_tx\_block (no CVSS, Linux)
- [CVE-2026-43254](https://cve.now/CVE-2026-43254.md): ovpn: tcp - fix packet extraction from stream (CVSS 7.5, Linux)
- [CVE-2026-43253](https://cve.now/CVE-2026-43253.md): iommu/amd: move wait\_on\_sem() out of spinlock (CVSS 7.5, Linux)
- [CVE-2026-43252](https://cve.now/CVE-2026-43252.md): mptcp: pm: in-kernel: always set ID as avail when rm endp (no CVSS, Linux)
- [CVE-2026-43251](https://cve.now/CVE-2026-43251.md): HID: prodikeys: Check presence of pm-\>input\_ep82 (no CVSS, Linux)
- [CVE-2026-43250](https://cve.now/CVE-2026-43250.md): usb: chipidea: udc: fix DMA and SG cleanup in \_ep\_nuke() (no CVSS, Linux)
- [CVE-2026-43249](https://cve.now/CVE-2026-43249.md): 9p/xen: protect xen\_9pfs\_front\_free against concurrent calls (CVSS 8.8, Linux)
- [CVE-2026-43248](https://cve.now/CVE-2026-43248.md): vhost: move vdpa group bound check to vhost\_vdpa (CVSS 7.8, Linux)
- [CVE-2026-43247](https://cve.now/CVE-2026-43247.md): media: chips-media: wave5: Fix SError of kernel panic when closed (no CVSS, Linux)
- [CVE-2026-43246](https://cve.now/CVE-2026-43246.md): media: i2c/tw9906: Fix potential memory leak in tw9906\_probe() (no CVSS, Linux)
- [CVE-2026-43245](https://cve.now/CVE-2026-43245.md): ntfs: -\>d\_compare() must not block (CVSS 7.5, Linux)
- [CVE-2026-43244](https://cve.now/CVE-2026-43244.md): kcm: fix zero-frag skb in frag\_list on partial sendmsg error (no CVSS, Linux)
- [CVE-2026-43243](https://cve.now/CVE-2026-43243.md): drm/amd/display: Add signal type check for dcn401 get\_phyd32clk\_src (no CVSS, Linux)
- [CVE-2026-43242](https://cve.now/CVE-2026-43242.md): soc: ti: k3-socinfo: Fix regmap leak on probe failure (no CVSS, Linux)
- [CVE-2026-43241](https://cve.now/CVE-2026-43241.md): ntb: ntb\_hw\_switchtec: Fix array-index-out-of-bounds access (no CVSS, Linux)
- [CVE-2026-43240](https://cve.now/CVE-2026-43240.md): x86/kexec: add a sanity check on previous kernel's ima kexec buffer (no CVSS, Linux)
- [CVE-2026-43239](https://cve.now/CVE-2026-43239.md): smb: client: prevent races in -\>query\_interfaces() (CVSS 8.8, Linux)
- [CVE-2026-43238](https://cve.now/CVE-2026-43238.md): net/sched: act\_skbedit: fix divide-by-zero in tcf\_skbedit\_hash() (no CVSS, Linux)
- [CVE-2026-43237](https://cve.now/CVE-2026-43237.md): drm/amdgpu: Refactor amdgpu\_gem\_va\_ioctl for Handling Last Fence Update and Timeline Management v4 (CVSS 7.8, Linux)
- [CVE-2026-43236](https://cve.now/CVE-2026-43236.md): drm/atmel-hlcdc: fix use-after-free of drm\_crtc\_commit after release (CVSS 7.8, Linux)
- [CVE-2026-43235](https://cve.now/CVE-2026-43235.md): media: iris: Add missing platform data entries for SM8750 (no CVSS, Linux)
- [CVE-2026-43234](https://cve.now/CVE-2026-43234.md): team: avoid NETDEV\_CHANGEMTU event when unregistering slave (no CVSS, Linux)
- [CVE-2026-43233](https://cve.now/CVE-2026-43233.md): netfilter: nf\_conntrack\_h323: fix OOB read in decode\_choice() (CVSS 8.2, Linux)
- [CVE-2026-43232](https://cve.now/CVE-2026-43232.md): net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets (CVSS 8.8, Linux)
- [CVE-2026-43231](https://cve.now/CVE-2026-43231.md): media: radio-keene: fix memory leak in error path (no CVSS, Linux)
- [CVE-2026-43230](https://cve.now/CVE-2026-43230.md): net/rds: Clear reconnect pending bit (CVSS 7.5, Linux)
- [CVE-2026-43229](https://cve.now/CVE-2026-43229.md): media: chips-media: wave5: Fix device cleanup order to prevent kernel panic (no CVSS, Linux)
- [CVE-2026-43228](https://cve.now/CVE-2026-43228.md): hfs: Replace BUG\_ON with error handling for CNID count checks (no CVSS, Linux)
- [CVE-2026-43227](https://cve.now/CVE-2026-43227.md): clocksource/drivers/sh\_tmu: Always leave device running after probe (no CVSS, Linux)
- [CVE-2026-43226](https://cve.now/CVE-2026-43226.md): net/rds: No shortcut out of RDS\_CONN\_ERROR (CVSS 7.5, Linux)
- [CVE-2026-43225](https://cve.now/CVE-2026-43225.md): staging: rtl8723bs: fix memory leak on failure path (no CVSS, Linux)
- [CVE-2026-43224](https://cve.now/CVE-2026-43224.md): io\_uring/zcrx: fix sgtable leak on mapping failures (no CVSS, Linux)
- [CVE-2026-43223](https://cve.now/CVE-2026-43223.md): media: pvrusb2: fix URB leak in pvr2\_send\_request\_ex (no CVSS, Linux)
- [CVE-2026-43222](https://cve.now/CVE-2026-43222.md): media: verisilicon: AV1: Fix tile info buffer size (CVSS 7.8, Linux)
- [CVE-2026-43221](https://cve.now/CVE-2026-43221.md): ipmi: ipmb: initialise event handler read bytes (no CVSS, Linux)
- [CVE-2026-43220](https://cve.now/CVE-2026-43220.md): iommu/amd: serialize sequence allocation under concurrent TLB invalidations (no CVSS, Linux)
- [CVE-2026-43219](https://cve.now/CVE-2026-43219.md): net: cpsw\_new: Fix potential unregister of netdev that has not been registered yet (no CVSS, Linux)
- [CVE-2026-43218](https://cve.now/CVE-2026-43218.md): media: i2c/tw9903: Fix potential memory leak in tw9903\_probe() (no CVSS, Linux)
- [CVE-2026-43217](https://cve.now/CVE-2026-43217.md): media: iris: gen2: Add sanity check for session stop (no CVSS, Linux)
- [CVE-2026-43216](https://cve.now/CVE-2026-43216.md): net: Drop the lock in skb\_may\_tx\_timestamp() (no CVSS, Linux)
- [CVE-2026-43215](https://cve.now/CVE-2026-43215.md): cifs: Fix locking usage for tcon fields (CVSS 8.8, Linux)
- [CVE-2026-43214](https://cve.now/CVE-2026-43214.md): KVM: x86: Add SRCU protection for reading PDPTRs in \_\_get\_sregs2() (CVSS 7.8, Linux)
- [CVE-2026-43213](https://cve.now/CVE-2026-43213.md): wifi: rtw89: pci: validate sequence number of TX release report (CVSS 7.5, Linux)
- [CVE-2026-43212](https://cve.now/CVE-2026-43212.md): LoongArch: Make cpumask\_of\_node() robust against NUMA\_NO\_NODE (CVSS 7.8, Linux)
- [CVE-2026-43211](https://cve.now/CVE-2026-43211.md): PCI: Fix pci\_slot\_trylock() error handling (CVSS 7.8, Linux)
- [CVE-2026-43210](https://cve.now/CVE-2026-43210.md): tracing: ring-buffer: Fix to check event length before using (no CVSS, Linux)
- [CVE-2026-43209](https://cve.now/CVE-2026-43209.md): minix: Add required sanity checking to minix\_check\_superblock() (no CVSS, Linux)
- [CVE-2026-43208](https://cve.now/CVE-2026-43208.md): net: do not pass flow\_id to set\_rps\_cpu() (CVSS 9.8, Linux)
- [CVE-2026-43207](https://cve.now/CVE-2026-43207.md): media: mtk-mdp: Fix error handling in probe function (CVSS 7.8, Linux)
- [CVE-2026-43206](https://cve.now/CVE-2026-43206.md): drm/amdkfd: Fix out-of-bounds write in kfd\_event\_page\_set() (CVSS 7.8, Linux)
- [CVE-2026-43205](https://cve.now/CVE-2026-43205.md): dpaa2-switch: validate num\_ifs to prevent out-of-bounds write (no CVSS, Linux)
- [CVE-2026-43204](https://cve.now/CVE-2026-43204.md): ASoC: qcom: q6asm: drop DSP responses for closed data streams (no CVSS, Linux)
- [CVE-2026-43203](https://cve.now/CVE-2026-43203.md): atm: fore200e: fix use-after-free in tasklets during device removal (CVSS 7.5, Linux)
- [CVE-2026-43202](https://cve.now/CVE-2026-43202.md): fbdev: vt8500lcdfb: fix missing dma\_free\_coherent() (no CVSS, Linux)
- [CVE-2026-43201](https://cve.now/CVE-2026-43201.md): APEI/GHES: ARM processor Error: don't go past allocated memory (no CVSS, Linux)
- [CVE-2026-43200](https://cve.now/CVE-2026-43200.md): PCI: endpoint: Fix swapped parameters in pci\_{primary/secondary}\_epc\_epf\_unlink() functions (no CVSS, Linux)
- [CVE-2026-43199](https://cve.now/CVE-2026-43199.md): net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (CVSS 7.5, Linux)
- [CVE-2026-43198](https://cve.now/CVE-2026-43198.md): tcp: fix potential race in tcp\_v6\_syn\_recv\_sock() (CVSS 9.8, Linux)
- [CVE-2026-43197](https://cve.now/CVE-2026-43197.md): netconsole: avoid OOB reads, msg is not nul-terminated (CVSS 9.1, Linux)
- [CVE-2026-43196](https://cve.now/CVE-2026-43196.md): soc: ti: pruss: Fix double free in pruss\_clk\_mux\_setup() (no CVSS, Linux)
- [CVE-2026-43195](https://cve.now/CVE-2026-43195.md): drm/amdgpu: validate user queue size constraints (no CVSS, Linux)
- [CVE-2026-43194](https://cve.now/CVE-2026-43194.md): net: consume xmit errors of GSO frames (CVSS 7.5, Linux)
- [CVE-2026-43193](https://cve.now/CVE-2026-43193.md): nfsd: fix nfs4\_file refcount leak in nfsd\_get\_dir\_deleg() (no CVSS, Linux)
- [CVE-2026-43192](https://cve.now/CVE-2026-43192.md): dm mpath: Add missing dm\_put\_device when failing to get scsi dh name (no CVSS, Linux)
- [CVE-2026-43191](https://cve.now/CVE-2026-43191.md): drm/amd/display: Adjust PHY FSM transition to TX\_EN-to-PLL\_ON for TMDS on DCN35 (no CVSS, Linux)
- [CVE-2026-43190](https://cve.now/CVE-2026-43190.md): netfilter: xt\_tcpmss: check remaining length before reading optlen (CVSS 8.2, Linux)
- [CVE-2026-43189](https://cve.now/CVE-2026-43189.md): media: v4l2-async: Fix error handling on steps after finding a match (no CVSS, Linux)
- [CVE-2026-43188](https://cve.now/CVE-2026-43188.md): ceph: do not propagate page array emplacement errors as batch errors (no CVSS, Linux)
- [CVE-2026-43187](https://cve.now/CVE-2026-43187.md): xfs: delete attr leaf freemap entries when empty (CVSS 8.8, Linux)
- [CVE-2026-43186](https://cve.now/CVE-2026-43186.md): ipv6: ioam: fix heap buffer overflow in \_\_ioam6\_fill\_trace\_data() (CVSS 9.8, Linux)
- [CVE-2026-43185](https://cve.now/CVE-2026-43185.md): ksmbd: fix signededness bug in smb\_direct\_prepare\_negotiation() (CVSS 9.8, Linux)
- [CVE-2026-43184](https://cve.now/CVE-2026-43184.md): rnbd-srv: Zero the rsp buffer before using it (CVSS 7.5, Linux)
- [CVE-2026-43183](https://cve.now/CVE-2026-43183.md): media: cx25821: Fix a resource leak in cx25821\_dev\_setup() (no CVSS, Linux)
- [CVE-2026-43182](https://cve.now/CVE-2026-43182.md): media: ccs: Avoid possible division by zero (no CVSS, Linux)
- [CVE-2026-43181](https://cve.now/CVE-2026-43181.md): gpio: sysfs: fix chip removal with GPIOs exported over sysfs (no CVSS, Linux)
- [CVE-2026-43180](https://cve.now/CVE-2026-43180.md): net: usb: kaweth: remove TX queue manipulation in kaweth\_set\_rx\_mode (CVSS 7.8, Linux)
- [CVE-2026-43179](https://cve.now/CVE-2026-43179.md): erofs: fix incorrect early exits for invalid metabox-enabled images (no CVSS, Linux)
- [CVE-2026-43178](https://cve.now/CVE-2026-43178.md): procfs: fix possible double mmput() in do\_procmap\_query() (CVSS 7.8, Linux)
- [CVE-2026-43177](https://cve.now/CVE-2026-43177.md): media: ipu6: Fix RPM reference leak in probe error paths (no CVSS, Linux)
- [CVE-2026-43176](https://cve.now/CVE-2026-43176.md): wifi: rtw89: pci: validate release report content before using for RTL8922DE (CVSS 8.8, Linux)
- [CVE-2026-43175](https://cve.now/CVE-2026-43175.md): clk: rs9: Reserve 8 struct clk\_hw slots for for 9FGV0841 (no CVSS, Linux)
- [CVE-2026-43174](https://cve.now/CVE-2026-43174.md): io\_uring/zcrx: fix post open error handling (no CVSS, Linux)
- [CVE-2026-43173](https://cve.now/CVE-2026-43173.md): net: ethernet: xscale: Check for PTP support properly (no CVSS, Linux)
- [CVE-2026-43172](https://cve.now/CVE-2026-43172.md): wifi: iwlwifi: fix 22000 series SMEM parsing (CVSS 8.8, Linux)
- [CVE-2026-43171](https://cve.now/CVE-2026-43171.md): EFI/CPER: don't dump the entire memory region (no CVSS, Linux)
- [CVE-2026-43170](https://cve.now/CVE-2026-43170.md): usb: dwc3: gadget: Move vbus draw to workqueue context (no CVSS, Linux)
- [CVE-2026-43169](https://cve.now/CVE-2026-43169.md): drm/buddy: Prevent BUG\_ON by validating rounded allocation (no CVSS, Linux)
- [CVE-2026-43168](https://cve.now/CVE-2026-43168.md): ocfs2: fix reflink preserve cleanup issue (no CVSS, Linux)
- [CVE-2026-43167](https://cve.now/CVE-2026-43167.md): xfrm: always flush state and policy upon NETDEV\_UNREGISTER event (no CVSS, Linux)
- [CVE-2026-43166](https://cve.now/CVE-2026-43166.md): erofs: fix interlaced plain identification for encoded extents (CVSS 7.1, Linux)
- [CVE-2026-43165](https://cve.now/CVE-2026-43165.md): hwmon: (nct7363) Fix a resource leak in nct7363\_present\_pwm\_fanin (no CVSS, Linux)
- [CVE-2026-43164](https://cve.now/CVE-2026-43164.md): udplite: Fix null-ptr-deref in \_\_udp\_enqueue\_schedule\_skb(). (CVSS 7.5, Linux)
- [CVE-2026-43163](https://cve.now/CVE-2026-43163.md): md/bitmap: fix GPF in write\_page caused by resize race (no CVSS, Linux)
- [CVE-2026-43162](https://cve.now/CVE-2026-43162.md): media: tegra-video: Fix memory leak in \_\_tegra\_channel\_try\_format() (no CVSS, Linux)
- [CVE-2026-43161](https://cve.now/CVE-2026-43161.md): iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (no CVSS, Linux)
- [CVE-2026-43160](https://cve.now/CVE-2026-43160.md): mfd: macsmc: Initialize mutex (no CVSS, Linux)
- [CVE-2026-43159](https://cve.now/CVE-2026-43159.md): staging: rtl8723bs: fix null dereference in find\_network (no CVSS, Linux)
- [CVE-2026-43158](https://cve.now/CVE-2026-43158.md): xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVSS 8.8, Linux)
- [CVE-2026-43157](https://cve.now/CVE-2026-43157.md): octeontx2-af: CGX: fix bitmap leaks (no CVSS, Linux)
- [CVE-2026-43156](https://cve.now/CVE-2026-43156.md): net: usb: pegasus: enable basic endpoint checking (no CVSS, Linux)
- [CVE-2026-43155](https://cve.now/CVE-2026-43155.md): mux: mmio: fix regmap leak on probe failure (no CVSS, Linux)
- [CVE-2026-43154](https://cve.now/CVE-2026-43154.md): erofs: fix incorrect early exits in volume label handling (no CVSS, Linux)
- [CVE-2026-43153](https://cve.now/CVE-2026-43153.md): xfs: remove xfs\_attr\_leaf\_hasname (CVSS 7.8, Linux)
- [CVE-2026-43152](https://cve.now/CVE-2026-43152.md): HID: hid-pl: handle probe errors (no CVSS, Linux)
- [CVE-2026-43151](https://cve.now/CVE-2026-43151.md): Revert "media: iris: Add sanity check for stop streaming" (no CVSS, Linux)
- [CVE-2026-43150](https://cve.now/CVE-2026-43150.md): perf/arm-cmn: Reject unsupported hardware configurations (CVSS 7.8, Linux)
- [CVE-2026-43149](https://cve.now/CVE-2026-43149.md): net: wan/fsl\_ucc\_hdlc: Fix dma\_free\_coherent() in uhdlc\_memclean() (no CVSS, Linux)
- [CVE-2026-43148](https://cve.now/CVE-2026-43148.md): powerpc/smp: Add check for kcalloc() failure in parse\_thread\_groups() (no CVSS, Linux)
- [CVE-2026-43147](https://cve.now/CVE-2026-43147.md): Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" (no CVSS, Linux)
- [CVE-2026-43146](https://cve.now/CVE-2026-43146.md): media: iris: Add buffer to list only after successful allocation (no CVSS, Linux)
- [CVE-2026-43145](https://cve.now/CVE-2026-43145.md): remoteproc: imx\_rproc: Fix invalid loaded resource table detection (no CVSS, Linux)
- [CVE-2026-43144](https://cve.now/CVE-2026-43144.md): wifi: brcmfmac: Fix potential kernel oops when probe fails (no CVSS, Linux)
- [CVE-2026-43143](https://cve.now/CVE-2026-43143.md): mfd: core: Add locking around 'mfd\_of\_node\_list' (no CVSS, Linux)
- [CVE-2026-43142](https://cve.now/CVE-2026-43142.md): media: iris: gen1: Destroy internal buffers after FW releases (no CVSS, Linux)
- [CVE-2026-43141](https://cve.now/CVE-2026-43141.md): ntb: ntb\_hw\_switchtec: Fix shift-out-of-bounds for 0 mw lut (no CVSS, Linux)
- [CVE-2026-43140](https://cve.now/CVE-2026-43140.md): HID: magicmouse: Do not crash on missing msc-\>input (no CVSS, Linux)
- [CVE-2026-43139](https://cve.now/CVE-2026-43139.md): xfrm6: fix uninitialized saddr in xfrm6\_get\_saddr() (CVSS 8.6, Linux)
- [CVE-2026-43138](https://cve.now/CVE-2026-43138.md): reset: gpio: suppress bind attributes in sysfs (no CVSS, Linux)
- [CVE-2026-43137](https://cve.now/CVE-2026-43137.md): ASoC: SOF: Intel: hda: Fix NULL pointer dereference (no CVSS, Linux)
- [CVE-2026-43136](https://cve.now/CVE-2026-43136.md): HID: logitech-hidpp: Check maxfield in hidpp\_get\_report\_length() (no CVSS, Linux)
- [CVE-2026-43135](https://cve.now/CVE-2026-43135.md): media: cx23885: Add missing unmap in snd\_cx23885\_hw\_params() (no CVSS, Linux)
- [CVE-2026-43134](https://cve.now/CVE-2026-43134.md): Bluetooth: L2CAP: Fix missing key size check for L2CAP\_LE\_CONN\_REQ (CVSS 8.1, Linux)
- [CVE-2026-43133](https://cve.now/CVE-2026-43133.md): KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVSS 7.9, Linux)
- [CVE-2026-43132](https://cve.now/CVE-2026-43132.md): dm-verity: correctly handle dm\_bufio\_client\_create() failure (no CVSS, Linux)
- [CVE-2026-43131](https://cve.now/CVE-2026-43131.md): drm/amd/pm: Fix null pointer dereference issue (no CVSS, Linux)
- [CVE-2026-43130](https://cve.now/CVE-2026-43130.md): iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (no CVSS, Linux)
- [CVE-2026-43129](https://cve.now/CVE-2026-43129.md): ima: verify the previous kernel's IMA buffer lies in addressable RAM (no CVSS, Linux)
- [CVE-2026-43128](https://cve.now/CVE-2026-43128.md): RDMA/umem: Fix double dma\_buf\_unpin in failure path (CVSS 7.8, Linux)
- [CVE-2026-43127](https://cve.now/CVE-2026-43127.md): ntfs3: fix circular locking dependency in run\_unpack\_ex (no CVSS, Linux)
- [CVE-2026-43126](https://cve.now/CVE-2026-43126.md): ALSA: mixer: oss: Add card disconnect checkpoints (CVSS 7.8, Linux)
- [CVE-2026-43125](https://cve.now/CVE-2026-43125.md): dlm: validate length in dlm\_search\_rsb\_tree (CVSS 9.8, Linux)
- [CVE-2026-43124](https://cve.now/CVE-2026-43124.md): pstore: ram\_core: fix incorrect success return when vmap() fails (no CVSS, Linux)
- [CVE-2026-43123](https://cve.now/CVE-2026-43123.md): fbcon: check return value of con2fb\_acquire\_newinfo() (no CVSS, Linux)
- [CVE-2026-43121](https://cve.now/CVE-2026-43121.md): io\_uring/zcrx: fix user\_ref race between scrub and refill paths (no CVSS, Linux)
- [CVE-2025-71274](https://cve.now/CVE-2025-71274.md): rpmsg: core: fix race in driver\_override\_show() and use core helper (CVSS 7.8, Linux)
- [CVE-2025-71273](https://cve.now/CVE-2025-71273.md): wifi: rtw88: Use devm\_kmemdup() in rtw\_set\_supported\_band() (no CVSS, Linux)
- [CVE-2025-71272](https://cve.now/CVE-2025-71272.md): most: core: fix resource leak in most\_register\_interface error paths (no CVSS, Linux)
- [CVE-2025-71271](https://cve.now/CVE-2025-71271.md): hfsplus: ensure sb-\>s\_fs\_info is always cleaned up (no CVSS, Linux)
- [CVE-2025-59854](https://cve.now/CVE-2025-59854.md): HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability (CVSS 3.1, HCL DFXAnalytics)
- [CVE-2025-59853](https://cve.now/CVE-2025-59853.md): HCL DFXAnalytics is affected by an Improper Error Handling vulnerability (CVSS 3.1, HCL DFXAnalytics)
- [CVE-2025-59852](https://cve.now/CVE-2025-59852.md): HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability (CVSS 3.7, HCL DFXAnalytics)
- [CVE-2025-59851](https://cve.now/CVE-2025-59851.md): HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability (CVSS 3.7, HCL DFXAnalytics)
- [CVE-2025-31970](https://cve.now/CVE-2025-31970.md): HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability (CVSS 5.3, HCL DFXAnalytics)
- [CVE-2026-6420](https://cve.now/CVE-2026-6420.md): Keylime: keylime: security bypass due to hardcoded tpm quote nonce (CVSS 6.3, keylime · Red Hat Enterprise Linux)
- [CVE-2026-6860](https://cve.now/CVE-2026-6860.md): A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name (CVSS 6.9, Eclipse Foundation Eclipse Vert.x · io.vertx:vertx-core)
- [CVE-2026-1719](https://cve.now/CVE-2026-1719.md): Gravity Bookings \<= 2.5.9 - Unauthenticated SQL Injection via 'category\_id' Parameter (CVSS 7.5, GravityMore Gravity Bookings)
- [CVE-2026-40001](https://cve.now/CVE-2026-40001.md): Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client (CVSS 5.2, ZTE PROCESS Guard service)
- [CVE-2026-40010](https://cve.now/CVE-2026-40010.md): Apache Wicket: possible session fixation using AuthenticatedWebSession (CVSS 9.1, Apache Software Foundation Apache Wicket · org.apache.wicke…)
- [CVE-2026-42509](https://cve.now/CVE-2026-42509.md): Apache Wicket: crafted strings can break out of the JavaScript sequence (CVSS 6.1, Apache Software Foundation Apache Wicket · org.apache.wicke…)
- [CVE-2026-43646](https://cve.now/CVE-2026-43646.md): Apache Wicket: crafted URLs can bypass PackageResourceGuard (CVSS 7.5, Apache Software Foundation Apache Wicket · org.apache.wicke…)
- [CVE-2026-43975](https://cve.now/CVE-2026-43975.md): Apache Wicket: Possible malicious path traversal in FolderUploadsFileManager (CVSS 6.5, Apache Software Foundation Apache Wicket · org.apache.wicke…)
- [CVE-2026-35255](https://cve.now/CVE-2026-35255.md): Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. (CVSS 6.6, Oracle Cloud Native Environment Command Line Interface)
- [CVE-2026-43120](https://cve.now/CVE-2026-43120.md): RDMA/irdma: Fix double free related to rereg\_user\_mr (CVSS 7.8, Linux)
- [CVE-2026-43119](https://cve.now/CVE-2026-43119.md): Bluetooth: hci\_sync: annotate data-races around hdev-\>req\_status (no CVSS, Linux)
- [CVE-2026-43118](https://cve.now/CVE-2026-43118.md): btrfs: fix zero size inode with non-zero size after log replay (no CVSS, Linux)
- [CVE-2026-43117](https://cve.now/CVE-2026-43117.md): btrfs: tracepoints: get correct superblock from dentry in event btrfs\_sync\_file() (CVSS 9.1, Linux)
- [CVE-2026-43116](https://cve.now/CVE-2026-43116.md): netfilter: ctnetlink: ensure safe access to master conntrack (CVSS 7.8, Linux)
- [CVE-2026-43115](https://cve.now/CVE-2026-43115.md): srcu: Use irq\_work to start GP in tiny SRCU (no CVSS, Linux)
- [CVE-2026-43114](https://cve.now/CVE-2026-43114.md): netfilter: nft\_set\_pipapo\_avx2: don't return non-matching entry on expiry (CVSS 9.4, Linux)
- [CVE-2026-43113](https://cve.now/CVE-2026-43113.md): wifi: wl1251: validate packet IDs before indexing tx\_frames (CVSS 8.8, Linux)
- [CVE-2026-43112](https://cve.now/CVE-2026-43112.md): fs/smb/client: fix out-of-bounds read in cifs\_sanitize\_prepath (CVSS 8.8, Linux)
- [CVE-2026-43111](https://cve.now/CVE-2026-43111.md): HID: roccat: fix use-after-free in roccat\_report\_event (CVSS 7.8, Linux)
- [CVE-2026-43110](https://cve.now/CVE-2026-43110.md): wifi: brcmfmac: validate bsscfg indices in IF events (CVSS 8.8, Linux)
- [CVE-2026-43109](https://cve.now/CVE-2026-43109.md): x86: shadow stacks: proper error handling for mmap lock (no CVSS, Linux)
- [CVE-2026-43108](https://cve.now/CVE-2026-43108.md): soc: qcom: pd-mapper: Fix element length in servreg\_loc\_pfr\_req\_ei (no CVSS, Linux)
- [CVE-2026-43107](https://cve.now/CVE-2026-43107.md): xfrm: account XFRMA\_IF\_ID in aevent size calculation (no CVSS, Linux)
- [CVE-2026-43106](https://cve.now/CVE-2026-43106.md): cachefiles: fix incorrect dentry refcount in cachefiles\_cull() (CVSS 7.8, Linux)
- [CVE-2026-43105](https://cve.now/CVE-2026-43105.md): drm/vc4: Fix memory leak of BO array in hang state (no CVSS, Linux)
- [CVE-2026-43104](https://cve.now/CVE-2026-43104.md): drm/vc4: Fix a memory leak in hang state error path (no CVSS, Linux)
- [CVE-2026-43103](https://cve.now/CVE-2026-43103.md): net: lapbether: handle NETDEV\_PRE\_TYPE\_CHANGE (no CVSS, Linux)
- [CVE-2026-43102](https://cve.now/CVE-2026-43102.md): net: airoha: Fix memory leak in airoha\_qdma\_rx\_process() (no CVSS, Linux)
- [CVE-2026-43101](https://cve.now/CVE-2026-43101.md): ipv6: ioam: fix potential NULL dereferences in \_\_ioam6\_fill\_trace\_data() (CVSS 7.5, Linux)
- [CVE-2026-43100](https://cve.now/CVE-2026-43100.md): bridge: guard local VLAN-0 FDB helpers against NULL vlan group (no CVSS, Linux)
- [CVE-2026-43099](https://cve.now/CVE-2026-43099.md): ipv4: icmp: fix null-ptr-deref in icmp\_build\_probe() (CVSS 7.5, Linux)
- [CVE-2026-43098](https://cve.now/CVE-2026-43098.md): nfc: s3fwrn5: allocate rx skb before consuming bytes (no CVSS, Linux)
- [CVE-2026-43097](https://cve.now/CVE-2026-43097.md): PCI: hv: Fix double ida\_free in hv\_pci\_probe error path (no CVSS, Linux)
- [CVE-2026-43096](https://cve.now/CVE-2026-43096.md): mshv: Fix infinite fault loop on permission-denied GPA intercepts (no CVSS, Linux)
- [CVE-2026-43095](https://cve.now/CVE-2026-43095.md): ASoC: SDCA: Fix errors in IRQ cleanup (no CVSS, Linux)
- [CVE-2026-43094](https://cve.now/CVE-2026-43094.md): ixgbevf: add missing negotiate\_features op to Hyper-V ops table (no CVSS, Linux)
- [CVE-2026-43093](https://cve.now/CVE-2026-43093.md): xsk: tighten UMEM headroom validation to account for tailroom and min frame (CVSS 7.8, Linux)
- [CVE-2026-43092](https://cve.now/CVE-2026-43092.md): xsk: validate MTU against usable frame size on bind (no CVSS, Linux)
- [CVE-2026-43091](https://cve.now/CVE-2026-43091.md): xfrm: Wait for RCU readers during policy netns exit (CVSS 7.8, Linux)
- [CVE-2026-43090](https://cve.now/CVE-2026-43090.md): xfrm: fix refcount leak in xfrm\_migrate\_policy\_find (no CVSS, Linux)
- [CVE-2026-43089](https://cve.now/CVE-2026-43089.md): xfrm\_user: fix info leak in build\_mapping() (no CVSS, Linux)
- [CVE-2026-43088](https://cve.now/CVE-2026-43088.md): net: af\_key: zero aligned sockaddr tail in PF\_KEY exports (no CVSS, Linux)
- [CVE-2026-43087](https://cve.now/CVE-2026-43087.md): pinctrl: mcp23s08: Disable all pin interrupts during probe (no CVSS, Linux)
- [CVE-2026-43086](https://cve.now/CVE-2026-43086.md): ipvs: fix NULL deref in ip\_vs\_add\_service error path (no CVSS, Linux)
- [CVE-2026-43085](https://cve.now/CVE-2026-43085.md): netfilter: nfnetlink\_log: initialize nfgenmsg in NLMSG\_DONE terminator (no CVSS, Linux)
- [CVE-2026-43084](https://cve.now/CVE-2026-43084.md): netfilter: nfnetlink\_queue: make hash table per queue (CVSS 7.8, Linux)
- [CVE-2026-43083](https://cve.now/CVE-2026-43083.md): net: ioam6: fix OOB and missing lock (CVSS 9.1, Linux)
- [CVE-2026-43082](https://cve.now/CVE-2026-43082.md): net: txgbe: leave space for null terminators on property\_entry (no CVSS, Linux)
- [CVE-2026-43081](https://cve.now/CVE-2026-43081.md): net: ipa: fix GENERIC\_CMD register field masks for IPA v5.0+ (no CVSS, Linux)
- [CVE-2026-43080](https://cve.now/CVE-2026-43080.md): l2tp: Drop large packets with UDP encap (no CVSS, Linux)
- [CVE-2026-43079](https://cve.now/CVE-2026-43079.md): perf/x86/intel/uncore: Skip discovery table for offline dies (no CVSS, Linux)
- [CVE-2026-43078](https://cve.now/CVE-2026-43078.md): crypto: af\_alg - Fix page reassignment overflow in af\_alg\_pull\_tsgl (CVSS 7.8, Linux)
- [CVE-2026-43077](https://cve.now/CVE-2026-43077.md): crypto: algif\_aead - Fix minimum RX size check for decryption (no CVSS, Linux)
- [CVE-2026-43076](https://cve.now/CVE-2026-43076.md): ocfs2: validate inline data i\_size during inode read (CVSS 7.8, Linux)
- [CVE-2026-43075](https://cve.now/CVE-2026-43075.md): ocfs2: fix out-of-bounds write in ocfs2\_write\_end\_inline (CVSS 7.8, Linux)
- [CVE-2026-43074](https://cve.now/CVE-2026-43074.md): eventpoll: defer struct eventpoll free to RCU grace period (CVSS 7.8, Linux)
- [CVE-2026-35254](https://cve.now/CVE-2026-35254.md): Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. (CVSS 6.1, Oracle OCI CLI of Oracle Open Source Projects)
- [CVE-2026-23928](https://cve.now/CVE-2026-23928.md): Stored XSS vulnerability in the Item history/Plain text widget (CVSS 7.3, Zabbix)
- [CVE-2026-23927](https://cve.now/CVE-2026-23927.md): Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter (CVSS 5.1, Zabbix)
- [CVE-2026-23926](https://cve.now/CVE-2026-23926.md): Stored XSS vulnerability in Host navigator widget maintenance tooltip (CVSS 7.3, Zabbix)
- [CVE-2026-7841](https://cve.now/CVE-2026-7841.md): GV-ASWeb Remote Code Execution (RCE) vulnerability (CVSS 8.8, GeoVision ASManager)
- [CVE-2026-7332](https://cve.now/CVE-2026-7332.md): LatePoint \<= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking\_form\_page\_url' Parameter (CVSS 7.2, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-7457](https://cve.now/CVE-2026-7457.md): LatePoint \<= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update (CVSS 6.4, LatePoint – Calendar Booking Plugin for Appointments and Ev…)
- [CVE-2026-6672](https://cve.now/CVE-2026-6672.md): Affiliate Program Suite \<= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via slicewp\_affiliate\_url Shortcode (CVSS 6.4, iovamihai Affiliate Program Suite — SliceWP Affiliates)
- [CVE-2026-6344](https://cve.now/CVE-2026-6344.md): Fluent Forms \<= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment (CVSS 4.9, techjewel Fluent Forms – Customizable Contact Forms, Survey…)
- [CVE-2026-35253](https://cve.now/CVE-2026-35253.md): Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. (CVSS 4.7, Oracle Macaron Tool of Oracle Open Source Projects)
- [CVE-2026-2306](https://cve.now/CVE-2026-2306.md): Ninja Tables \<= 5.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Table Creation (CVSS 4.3, techjewel Ninja Tables – Easy Data Table Builder)
- [CVE-2026-5753](https://cve.now/CVE-2026-5753.md): All-in-One WP Migration Unlimited Extension \<= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download (CVSS 6.5, servmask All-in-One WP Migration Unlimited Extension)
- [CVE-2026-3208](https://cve.now/CVE-2026-3208.md): Mercado Pago payments for WooCommerce \<= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure (CVSS 5.3, mercadopago Mercado Pago payments for WooCommerce)
- [CVE-2026-7572](https://cve.now/CVE-2026-7572.md): Velociraptor EVTX Parser — Process Crash via Crafted .evtx File (CVSS 4.4, Velocidex velociraptor · www.velocidex.com/golang/velocirap…)
- [CVE-2026-7573](https://cve.now/CVE-2026-7573.md): GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations (CVSS 5.0, Velocidex velociraptor · www.velocidex.com/golang/velocirap…)
- [CVE-2025-71256](https://cve.now/CVE-2025-71256.md): In nr modem, there is a possible improper input validation. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. T8100/T9100/T8200/T8300)
- [CVE-2025-71255](https://cve.now/CVE-2025-71255.md): In Modem IMS, there is a possible improper input validation. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-71254](https://cve.now/CVE-2025-71254.md): In Modem IMS, there is a possible improper input validation. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-71253](https://cve.now/CVE-2025-71253.md): In Modem IMS, there is a possible improper input validation. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-71252](https://cve.now/CVE-2025-71252.md): In Modem IMS, there is a possible improper input validation. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-71251](https://cve.now/CVE-2025-71251.md): In IMS, there is a possible system crash due to improper input validation. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2026-34473](https://cve.now/CVE-2026-34473.md): Unauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X, H196A, H369A, H268N, H208N, H367N, H181A, (CVSS 7.5)
- [CVE-2026-34474](https://cve.now/CVE-2026-34474.md): Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. (CVSS 7.5)
- [CVE-2026-36358](https://cve.now/CVE-2026-36358.md): Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Ad (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-05-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.