CVEs published September 16, 2026
871 CVEs were published on September 16, 2026: 97 critical, 396 high. 1 is now in CISA KEV.
- Published
- 871
- Critical
- 97
- High
- 396
- Medium
- 231
- Low
- 23
- Unrated
- 124
- Now in CISA KEV
- 1
- Fix available
- 580
Most affected products
- Linux
- 276
- Cisco Identity Services Engine Software · Cisco ISE Passive…
- 26
- Arista Networks EOS
- 24
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- 20
- Cisco Identity Services Engine Software
- 16
- Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- 15
- ISC BIND
- 14
- djust-org djust · djust
- 12
- GitLab
- 11
- Cisco Secure Firewall Management Center
- 10
Critical 97
- CVE-2026-61594djust has an authorization bypass on the WebSocket/SSE mount pathdjust-org djust · djust
- CVE-2026-92578WWBN AVideo through 29.0 Authentication Bypass via Stored Password HashWWBN AVideo
- CVE-2026-92576HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchToolHKUDS nanobot
- CVE-2026-75513Marten: SQL injection in Marten's LINQ provider via unescaped string literalsJasperFx marten · Marten
- CVE-2026-92812Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matchingdecaporg decap-cms
- CVE-2026-92805UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizarduvdesk community-skeleton
- CVE-2026-92787Feast through 0.66.0 Authentication Bypass via Unverified Tokenfeast-dev feast
- CVE-2026-92785Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary ClassesAngel-ML angel
- CVE-2026-92749SafeLine through 9.4.1 Authentication Bypass via Weak Session Secretchaitin SafeLine
- CVE-2026-20284Cisco Identity Search Engine SXP REST API SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20332Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76460Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20176Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20341Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20242Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20237Cisco Identity Services Engine Hardening Release - Input Validation VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76423Cisco ISE API Authentication Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20130Cisco Identity Services Engine Hardening Release - Improper Neutralization VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20192Cisco Identity Services Engine Hardening Release - Access Control VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20324Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20325Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a CommandCisco Nexus Dashboard
- CVE-2026-92808Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System CompromiseAltium Enterprise Server
- CVE-2026-20194Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20211Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20330Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20322Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access ControlCisco Nexus Dashboard
- CVE-2026-20329Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20326Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical FunctionCisco Nexus Dashboard
- CVE-2026-89083HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File WriteHP AC Print & Scan · HP Output Central
- CVE-2026-89082HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File WriteHP AC Print & Scan · HP Output Central
- CVE-2026-91106HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-73456Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.Arista Networks EOS
- CVE-2026-91104HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-68536Apache MyFaces: Server-Side Request Forgery / Local File Inclusion VulnerabilityApache Software Foundation Apache MyFaces
- CVE-2026-92720Kubero through 3.1.1 Unauthenticated Notifications API Accesskubero-dev kubero
- CVE-2026-92717Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hubcobbr Covenant
- CVE-2026-20234Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20331Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76420Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20307Cisco Identity Services Engine Remote Code Execution VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20305Cisco Identity Services Engine Command Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20306Cisco Identity Services Engine Command Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-92398Ruijie RG-EW3000GX user_list_note admin os command injectionRuijie RG-EW3000GX
- CVE-2026-90999Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environmentFunctional Software Sentry Seer
- CVE-2026-92397Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injectionRuijie RG-EW3000GX
- CVE-2025-59953LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployInternLM lmdeploy · lmdeploy
- CVE-2026-70416Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability.Dell ObjectScale
- CVE-2026-77411RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstrrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77405RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parserrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-92395@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet@fastify/proxy-addr
- CVE-2026-77408RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflowrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-91843Stack overflow in login process to the Security Management and Log Serverscheckpoint Quantum Security Management
- CVE-2026-73172Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-58147Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-58146Unauthorized remote code execution in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-40855Command Injection in T-Mobile 5G Box IDU router via ping functionalityWNC T-Mobile 5G Box IDU
- CVE-2026-90049net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()Linux
- CVE-2026-90048fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()Linux
- CVE-2026-90042ceph: properly decrypt filenames in vmalloc() buffersLinux
- CVE-2026-90038NFSD: Prevent client use-after-free during export state revocationLinux
- CVE-2026-90037NFSD: Prevent client use-after-free during close_lru reapingLinux
- CVE-2026-90036NFSD: Prevent client use-after-free during blocked-lock reapingLinux
- CVE-2026-90012spi: Fix DMA mapping ownership on partial map failureLinux
- CVE-2026-90011scsi: target: iscsi: Reserve a terminator byte for the login payloadLinux
- CVE-2026-89990ceph: lock mutex in ceph_mds_check_access()Linux
- CVE-2026-89972nvme: add missing SRCU grace period in error pathLinux
- CVE-2026-89970nvmet-auth: Synchronize timeout work during SQ teardownLinux
- CVE-2026-89969nvmet-tcp: fix out-of-bounds write when receiving an over-long PDULinux
- CVE-2026-89930KVM: nVMX: Service local TLB flushes on failed nested VM-EnterLinux
- CVE-2026-89918KVM: arm64: Correctly handle end of VA space TLBI invalidationLinux
- CVE-2026-89916KVM: arm64: Make VNCR invalidation participate in MMU invalidation retryLinux
- CVE-2026-89915KVM: arm64: Remove VM-wide VNCR mapping counterLinux
- CVE-2026-89914KVM: arm64: Sign-extend VA for range-based TLBI invalidationLinux
- CVE-2026-89857scsi: qla2xxx: Hold qpair lock when sending NVMe LS rejectLinux
- CVE-2026-89847scsi: qla2xxx: Avoid double completion in async IOCB timeoutLinux
- CVE-2026-89846scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data readLinux
- CVE-2026-86106Security Advisory 0179Arista Networks VeloCloud Edge
- CVE-2026-73453Security Advisory 0174Arista Networks EOS
- CVE-2026-76187Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWTApache Software Foundation Apache Airflow Keycloak provider
- CVE-2026-76186Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identityApache Software Foundation Apache Airflow Keycloak provider
- CVE-2026-86462Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessionsApache Software Foundation Apache Airflow FAB provider
- CVE-2026-82311Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always falseApache Software Foundation Apache Airflow FAB provider
- CVE-2026-89788ksmbd: fix tree connection use-after-free in smb2_tree_connect()Linux
- CVE-2026-89786ext4: fix out-of-bounds read in ext4_read_inline_dir()Linux
- CVE-2026-89783xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is fullLinux
- CVE-2026-89779fs/ntfs3: validate ef->size covers the record's name and valueLinux
- CVE-2026-89778isofs: fix out-of-bounds page array access on empty zisofs blockLinux
- CVE-2026-89775KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluationLinux
- CVE-2026-81642Heap buffer overflow and possible Remote Code Execution when digesting DNSKEYNLnet Labs Unbound
- CVE-2026-27565Remote code execution via uploading a malicious IODD filePepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27546Authentication Bypass in _account_logPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-73447Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate RequestArista Networks EOS
- CVE-2026-12793JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameterjetmonsters JetFormBuilder — Dynamic Blocks Form Builder
- CVE-2026-14349TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Actionthemetechmount TrueBooker – Appointment Booking and Schedul…
- CVE-2025-56563A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.
- CVE-2026-51990An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_hel
- CVE-2026-88592kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).
High 396
- CVE-2026-65388A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and dApple containerization
- CVE-2026-61599djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount pathdjust-org djust · djust
- CVE-2026-61596djust has broken object-level access control (IDOR)djust-org djust · djust
- CVE-2026-61591djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)djust-org djust · djust
- CVE-2026-61592djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)djust-org djust · djust
- CVE-2026-92599Joi before 17.13.7 and 18.2.6 ReDoS via isoDatehapijs joi · joi
- CVE-2026-92598Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypassnodemailer
- CVE-2026-92597Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Commentnodemailer
- CVE-2026-92596Nodemailer before 9.1.0 Denial of Service via addressparsernodemailer
- CVE-2026-92594Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQLcraftcms cms
- CVE-2026-92593Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Executioncraftcms cms
- CVE-2026-92592Craft CMS before 4.18.6 Remote Code Execution via signed cookiecraftcms cms
- CVE-2026-92591Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installercraftcms cms
- CVE-2026-92582AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF BypassWWBN AVideo
- CVE-2026-92580AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFWWBN AVideo
- CVE-2026-92577AVideo through 29.0 API get_api_video Broken Access Control via clean_titleWWBN AVideo
- CVE-2026-89034TCH QRing R20_B006 Unauthenticated BLE AccessTCH QRing
- CVE-2026-85469Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopeRed Hat Quay
- CVE-2026-62997Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load`kedro-org kedro-plugins
- CVE-2026-92816ComfyUI before 0.30.0 Path Traversal via dataset save nodesComfy-Org ComfyUI
- CVE-2026-92815changedetection.io through 0.60.6 SSRF via browser-step Goto URLdgtlmoon changedetection.io
- CVE-2026-92811browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypassbrowserless
- CVE-2026-92806phpList before 3.6.17 Cross-Site Request Forgery via massremove.phpphpList
- CVE-2026-92804Nango through 0.70.4 Server-Side Request Forgery via ConfigurationNangoHQ Nango
- CVE-2026-92801cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actionschenhg5 cc-connect
- CVE-2026-92800Docs before 5.4.1 Stale Collaboration Session After Access Revocationsuitenumerique Docs
- CVE-2026-92796Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypassmanticoresoftware Manticore Search
- CVE-2026-92795Coze Studio through 0.5.1 Server-Side Request Forgery via Plugincoze-dev coze-studio
- CVE-2026-92794OpenSign through 2.41.3 Information Disclosure via getDocumentOpenSignLabs OpenSign
- CVE-2026-92793GoAdmin through 1.2.26 Authorization Bypass via Query ParameterGoAdminGroup go-admin
- CVE-2026-92792OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifieropennhp
- CVE-2026-92791Uber Kraken through 0.1.29 Path Traversal via tag parameteruber kraken
- CVE-2026-92789Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirectgraylog2-server
- CVE-2026-92788Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Nodecoze-dev coze-studio
- CVE-2026-92786LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Modellightgbm-org LightGBM
- CVE-2026-92784@refinedev/inferencer through 7.0.0 Code Injection via API Field Names@refinedev/inferencer
- CVE-2026-92783Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletionyeti-platform yeti
- CVE-2026-92782Chroma through 1.5.9 Authorization Bypass via Collection Identifierchroma-core chroma
- CVE-2026-92780KnowStreaming through 3.4.1 Missing Authorization on the REST APIdidi KnowStreaming
- CVE-2026-92779Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via BindingsBuilderIO @builder.io/sdk-react · BuilderIO @builder.io/… +5
- CVE-2026-92776Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypassrequarks Wiki.js
- CVE-2026-92775Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetchrequarks Wiki.js
- CVE-2026-92773Trigger.dev before 4.6.0 GitHub App Installation Takeovertriggerdotdev trigger.dev
- CVE-2026-92772Leantime before 3.9.6 Unauthorized Plugin Installation via HTMXleantime
- CVE-2026-92771Twenty before 2.35.0 Permission Bypass via groupBy-with-records Querytwentyhq twenty
- CVE-2026-92770Harbor through 2.15.2 Scanner Credential Disclosure via Query Parametergoharbor harbor
- CVE-2026-92765ArcherySec through 2.0.6 Information Disclosure via WebScanVulnListarcherysec
- CVE-2026-92763Rundeck through 6.2.1 Authorization Bypass via Project Importrundeck
- CVE-2026-92762Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startuppelican panel
- CVE-2026-92761WebVirtCloud Missing Authorization on Instance Control Actionsretspen webvirtcloud
- CVE-2026-92760Shlink through 5.1.6 Mercure Token Authorization Bypassshlinkio shlink
- CVE-2026-92759SecObserve before 1.59.1 Information Disclosure via API ConfigurationSecObserve
- CVE-2026-92753PatrowlManager through 1.8.4 Authorization Bypass via Events APIPatrowlManager
- CVE-2026-92752metasfresh Unauthorized Access via Document Attachments and Comments Endpointsmetasfresh
- CVE-2026-92751CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filteryahoo CMAK
- CVE-2026-92750Harness through 3.3.0 Missing Access Control via infraproviders endpointharness
- CVE-2026-92748BC Security Empire before 6.7.1 Path Traversal File Upload RCEBC-SECURITY Empire
- CVE-2026-63506Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted sitetinacms · @tinacms auth +2
- CVE-2026-20300Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20342Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20323Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass VulnerabilityCisco Secure Firewall Management Center · Cisco Secure Fire…
- CVE-2026-76412Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20333Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76425Cisco ISE SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20334Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-76424Cisco ISE Arbitrary File Access VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20344Cisco Secure Firewall Management Center Software SQL Injection VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20154Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of ServiceCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20360Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure HandlingCisco Nexus Dashboard
- CVE-2026-20343Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20222Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20247Cisco Identity Services Engine Unauthenticated SQL Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20135Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service VulnerabilityCisco Secure Firewall Threat Defense (FTD) Software
- CVE-2026-20352Cisco Identity Services Engine RADIUS Denial of Service VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76413Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-20336Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20249Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20340Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-76409Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a PathnameCisco Nexus Dashboard
- CVE-2026-20335Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation VulnerabilitiesCisco Secure Firewall Adaptive Security Appliance (ASA)… +1
- CVE-2026-20295Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service VulnerabilityCisco Secure Firewall Management Center · Cisco Secure Fire…
- CVE-2026-20250Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-20361Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL InjectionCisco Nexus Dashboard
- CVE-2026-89084HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File WriteHP AC Print & Scan · HP Output Central
- CVE-2026-86831Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKSaws-network-policy-agent · AWS amazon-vpc-cni-k8s
- CVE-2026-87105Tanium addressed a SQL injection vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87024Tanium addressed a SQL injection vulnerability in Asset.Tanium Asset
- CVE-2026-86865Tanium addressed a SQL injection vulnerability in Asset.Tanium Asset
- CVE-2026-70469Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP RequestsApache Software Foundation Apache NiFi
- CVE-2026-87976Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension BundlesApache Software Foundation Apache NiFi Registry
- CVE-2026-76646Apache MyFaces: Denial of Service via Unbounded Request ParsingApache Software Foundation Apache MyFaces
- CVE-2026-63325Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`redocly-cli
- CVE-2026-91105HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-86043Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)zalando skipper · github.com/zalando/skipper
- CVE-2026-91102HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-81876HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of servicehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +2
- CVE-2026-81875HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of servicehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +2
- CVE-2026-91098HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-86003CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPcoredns · github.com/coredns/coredns
- CVE-2026-91097HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-82399CoreDNS: Unauthenticated memory exhaustion in custom transportscoredns · github.com/coredns/coredns
- CVE-2026-92729SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpointssignoz
- CVE-2026-75516RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-46352Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockOISF suricata
- CVE-2026-63126Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)square wire · com.squareup.wire:wire-runtime
- CVE-2026-92417Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceOpen5GS
- CVE-2026-47094SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}SIMAC MyPHR
- CVE-2026-92719Quickwit through 0.9.0 SSRF via SQS queue_url Parameterquickwit-oss quickwit
- CVE-2026-92718Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cacheprojectdiscovery nuclei
- CVE-2026-92716Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege EscalationShuffle
- CVE-2026-92605IRIS through 2.4.29 Unauthorized Comment Access via Object IDdfir-iris iris-web
- CVE-2026-92604Scirius through 3.8.0 Arbitrary File Write via PCAP UploadStamusNetworks scirius
- CVE-2026-42784Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionRed Hat Ansible Automation Platform 2.6 for RHEL · Red H… +7
- CVE-2026-85386Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form BlockConcrete CMS
- CVE-2026-85756SSH.NET: ScpClient allows server-side RCE via default SCP path handlingsshnet SSH.NET · SSH.NET
- CVE-2026-85385Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone FieldConcrete CMS
- CVE-2026-86359Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability.Dell Repository Manager
- CVE-2026-85731oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)oras-project oras-go · oras.land/oras-go/v2
- CVE-2026-68904node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustionnode-opcua · node-opcua-transport +1
- CVE-2026-71180Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability.Dell Update Package Framework
- CVE-2026-59974Stanza: Zip Slip Path Traversal in Model/Resource Extractionstanfordnlp stanza
- CVE-2026-71179Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('ODell Update Package Framework
- CVE-2026-92603ContiNew Admin through 4.1.0 Unauthorized Message Deletion via UserMessageControllercontinew-org continew-admin
- CVE-2026-92602TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URLTDuckCloud tduck-survey-form
- CVE-2026-92601Guns through 8.3.5 Improper Access Control via SysNoticeControllerstylefeng Guns
- CVE-2026-92600Guns through 8.3.5 Information Disclosure via Missing Permission Checkstylefeng Guns
- CVE-2026-61593djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE sessiondjust-org djust · djust
- CVE-2026-17526Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accountsRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-61595djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' datadjust-org djust · djust
- CVE-2026-92626Control iD iDSecure Unauthenticated Denial of ServiceControl iD iDSecure
- CVE-2026-92625Control iD iDSecure Unauthenticated Denial of ServiceControl iD iDSecure
- CVE-2025-43936Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.Dell ObjectScale
- CVE-2026-82410Pocketbase: Unhandled panic in worker goroutinespocketbase · github.com/pocketbase/pocketbase
- CVE-2026-79651Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale cachingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-74909Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segmentsRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-18212Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib stateRed Hat build of Keycloak · Red Hat Data Grid +2
- CVE-2026-84860Scada-LTS DWR Authorization Bypass - SystemicScada-LTS
- CVE-2026-84858Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox BypassScada-LTS
- CVE-2026-63127RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoverymodelcontextprotocol rust-sdk · rmcp
- CVE-2026-63128RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-servicemodelcontextprotocol rust-sdk · rmcp
- CVE-2026-77409RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blockingrabbitmq amqp091-go
- CVE-2026-77412RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Clientrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77404RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injectionrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-92570reNgine through 2.2.0 Unauthorized Configuration File Readyogeshojha rengine
- CVE-2026-92567TDuck survey form through 5.0 Unauthorized Data ModificationTDuckCloud tduck-survey-form
- CVE-2026-92566DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Previewdatageartech datagear
- CVE-2026-77410RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocationrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-92616FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritanceerror311 FileRise
- CVE-2026-77406RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configurationrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77403RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiationrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-77407RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fieldsrabbitmq amqp091-go · github.com/rabbitmq/amqp091-go
- CVE-2026-63671@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configurationnuxt-content mdc · @nuxtjs/mdc
- CVE-2026-92087@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth@fastify/auth
- CVE-2026-88064Backstage: Improper input validation in TechDocs MkDocs configurationbackstage
- CVE-2026-76825RestrictedPython: Sandbox escape via string.Formatter field resolutionzopefoundation RestrictedPython · restrictedpython
- CVE-2026-84997react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUreactphp http · react/http
- CVE-2026-80274Validating resolver can abort while caching a mismatched NOQNAME proofISC BIND
- CVE-2026-76163named aborts on a TKEY query when the user configuration has no global options statementISC BIND
- CVE-2026-19666Use-after-free in query_addnoqnameproof() via the DNS64 filter64 pathISC BIND
- CVE-2026-82964Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sysGen Digital Avast Free Antivirus, Avast One, Avast Premi… +1
- CVE-2026-81563SVCB AliasMode additional-data error leaks qpcache referencesISC BIND
- CVE-2026-61598Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerdjust-org djust · djust
- CVE-2026-77692Unauthenticated remote crash of named via a single DoH SIG(0) requestISC BIND
- CVE-2026-92137Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is coJenkins Project Jenkins Robot Framework Plugin
- CVE-2026-92136Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resultinJenkins Project Jenkins OWASP Dependency-Check Plugin
- CVE-2026-92135Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted thrJenkins Project Jenkins Coverage Plugin
- CVE-2026-92134Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitteJenkins Project Jenkins Warnings Plugin
- CVE-2026-92129Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically toJenkins Project Jenkins Script Security Plugin
- CVE-2026-92128Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of theJenkins Project Jenkins Script Security Plugin
- CVE-2026-92127Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92126Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an Jenkins Project Jenkins Script Security Plugin
- CVE-2026-92125Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attaJenkins Project Jenkins Script Security Plugin
- CVE-2026-92124Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from aJenkins Project Jenkins Script Security Plugin
- CVE-2026-92123Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, pJenkins Project Jenkins Script Security Plugin
- CVE-2026-92122Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxedJenkins Project Jenkins Script Security Plugin
- CVE-2026-61590djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUGdjust-org djust · djust
- CVE-2026-19667Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`ISC BIND
- CVE-2026-81736Remote CPU denial of service through cached SVCB/HTTPS AliasMode treesISC BIND
- CVE-2026-92469microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Checkzlt2000 microservices-platform
- CVE-2026-92468microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerzlt2000 microservices-platform
- CVE-2026-92467microservices-platform through 6.0.0 Unverified Password Change via /users/passwordzlt2000 microservices-platform
- CVE-2026-92466microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checkingzlt2000 microservices-platform
- CVE-2026-89028MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXMikroTik RouterOS
- CVE-2026-73177Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism ofAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73176Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73175Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-Advantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73174Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocoAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73173Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol oAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73171Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73170Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import wAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73167Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73166Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management inteAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73165Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73164Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-73163Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-19535Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of AdvanAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-88817Privilege escalation via legacy access group creation endpointCuriosity Workspace
- CVE-2026-92465WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerabilityThemeum WP Mega Menu
- CVE-2026-40857CSRF token bypass in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-40856Config disclosure in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-40854Session auth bypass via cookie value in T-Mobile 5G Box IDU routersWNC T-Mobile 5G Box IDU
- CVE-2026-92463yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listingguchengwuyue yshop-crm
- CVE-2026-92462yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStepguchengwuyue yshop-crm
- CVE-2026-92460yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listingguchengwuyue yshop-crm
- CVE-2026-92459yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpointguchengwuyue yshop-crm
- CVE-2026-92457yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoiceguchengwuyue yshop-crm
- CVE-2026-92456yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpointsguchengwuyue yshop-crm
- CVE-2026-90047drm/xe: Don't hand out the flat CCS storage as usable VRAMLinux
- CVE-2026-90046mm/page_alloc: don't spin_trylock() in NMI on UPLinux
- CVE-2026-90045USB: gadget: ffs: fix mm lifetime handlingLinux
- CVE-2026-90044usb: gadget: f_fs: Fix Use-After-Free in AIO error pathLinux
- CVE-2026-90043zram: fix slot lock bit position on big-endian 64-bitLinux
- CVE-2026-90041HID: sony: clean up device list on probe failureLinux
- CVE-2026-90032media: usbtv: keep device alive while ALSA card existsLinux
- CVE-2026-90030usb: dwc3: clear forceRM when issuing EndTransferLinux
- CVE-2026-90027usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stopLinux
- CVE-2026-90026usb: typec: qcom-pmic: cancel reset_work on stopLinux
- CVE-2026-90025usb: typec: ucsi: displayport: Fix OOB altmode array indexLinux
- CVE-2026-90022usb: gadget: f_midi2: fix use-after-free in string attribute show pathLinux
- CVE-2026-90018staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()Linux
- CVE-2026-90017staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()Linux
- CVE-2026-90016staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()Linux
- CVE-2026-90014tracing: Have show_event_filters/triggers files take trace array refLinux
- CVE-2026-90013tracing: Take trace_array reference when opening options fileLinux
- CVE-2026-90010scsi: bsg: Cap io_uring sense copy to max_response_lenLinux
- CVE-2026-90009scsi: bsg: Fix TOCTOU in io_uring passthrough command setupLinux
- CVE-2026-90008scsi: megaraid_sas: Limit NVMe request size to the PRP chain frameLinux
- CVE-2026-90007scsi: pm8001: Use rollback index when freeing MSI-X vectorsLinux
- CVE-2026-90003futex: Prevent rcuwait use-after-free during requeue PILinux
- CVE-2026-90002ftrace: Take trace_array reference before accessing its ftrace_opsLinux
- CVE-2026-90001HID: bpf: serialize device reference release in struct_ops destroy pathLinux
- CVE-2026-90000HID: rmi: fix OOB access with undersized RMI reportsLinux
- CVE-2026-89999HID: wacom: validate report length in wacom_intuos_pro2_bt_irqLinux
- CVE-2026-89998dm: fix race when loading and unloading a tableLinux
- CVE-2026-89997dm: fix resume-vs-remove raceLinux
- CVE-2026-89995dma-direct: return struct page from dma_direct_alloc_from_pool()Linux
- CVE-2026-89994dmaengine: fsl-edma: tracing: no ptr dereference during log outputLinux
- CVE-2026-89992cpuidle: dt_idle_genpd: kfree() the original name allocationLinux
- CVE-2026-89988kprobes: Protect kprobe_blacklist with RCULinux
- CVE-2026-89986mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()Linux
- CVE-2026-89985memcg: keep folio's objcg same as its nodeLinux
- CVE-2026-89980ALSA: harmony: initialize locks before requesting IRQLinux
- CVE-2026-89979ALSA: pcm: Fix race between non-atomic ops and trigger-startLinux
- CVE-2026-89974nvme-fc: fix double free of fabrics options when nvme_add_ctrl() failsLinux
- CVE-2026-89973nvme-tcp: check the data direction of a C2HData PDULinux
- CVE-2026-89971nvme: skip the zoned limits update if the zone info query failedLinux
- CVE-2026-89968nvmet-tcp: reject unsolicited H2CData PDUsLinux
- CVE-2026-89967mm/migrate_device: avoid out-of-bounds writes for compound foliosLinux
- CVE-2026-89965nvdimm/btt: reject an arena whose nfree is below the lane countLinux
- CVE-2026-89961powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap populationLinux
- CVE-2026-89960s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()Linux
- CVE-2026-89959s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_removeLinux
- CVE-2026-89957s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removedLinux
- CVE-2026-89954mtd: afs: validate v2 image info boundsLinux
- CVE-2026-89951batman-adv: fix stale receive device on merged fragmentsLinux
- CVE-2026-89947clk: meson: align gxbb_32k_clk_sel number of parents with actual countLinux
- CVE-2026-89943ASoC: loongson: Fix error handling in ACPI property parsingLinux
- CVE-2026-89942iio: buffer: Fix potential use-after-free in anonymous buffer releaseLinux
- CVE-2026-89941iio: buffer: Make IIO DMA fence release RCU-safeLinux
- CVE-2026-89940iio: buffer: Tie IIO dma fence lock lifetime to the fenceLinux
- CVE-2026-89938iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAFLinux
- CVE-2026-89932KVM: nVMX: Always flush vpid02 on first useLinux
- CVE-2026-89929KVM: nVM: Ensure INVVPID is emulated on the correct physical CPULinux
- CVE-2026-89928KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walkLinux
- CVE-2026-89927KVM: x86: hyper-v: Clamp stimer deadline to avoid livelockLinux
- CVE-2026-89922KVM: s390: Take srcu when importing watchpoint dataLinux
- CVE-2026-89920KVM: s390: Fix memory corruption by not reinjecting CK machine checksLinux
- CVE-2026-89919KVM: s390: keyop: use mmu_lock to read gmap->asceLinux
- CVE-2026-89913KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tablesLinux
- CVE-2026-89912KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT saveLinux
- CVE-2026-89911KVM: arm64: Correctly cap TLBI Range to the architural limitLinux
- CVE-2026-89910LoongArch: KVM: Fix uninitialized stack variable issue with dmsintcLinux
- CVE-2026-89908LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLYLinux
- CVE-2026-89907LoongArch: KVM: Validate MSI data before routing it to EIOINTCLinux
- CVE-2026-89906LoongArch: BPF: Refactor jump offset calculation in tail callLinux
- CVE-2026-89904LoongArch: Fix acpi_package_ids[] array overflowLinux
- CVE-2026-89903LoongArch: Do not save/restore percpu base register in rethook trampolineLinux
- CVE-2026-89902LoongArch: Avoid preempt count underflow without probeLinux
- CVE-2026-89899media: cec: disable delayed work before freeing an interrupted transmitLinux
- CVE-2026-89898media: cec: extron-da-hd-4k-plus: add sanity checkLinux
- CVE-2026-89897media: cec: Serialize exclusive follower deliveryLinux
- CVE-2026-89894media: cx231xx: reject geometry changes while the VBI queue is busyLinux
- CVE-2026-89893media: cx23885: cancel NetUP CI work before teardownLinux
- CVE-2026-89890media: go7007: defer the ALSA v4l2 put until card releaseLinux
- CVE-2026-89888media: i2c: ov02a10: fix endpoint parsing use-after-freeLinux
- CVE-2026-89887media: i2c: ov7740: fix use-after-destroy in removeLinux
- CVE-2026-89885media: platform: mtk-mdp3: Fix SCP device refcountingLinux
- CVE-2026-89883media: rc: sunxi-cir: Unregister rc device on probe failureLinux
- CVE-2026-89882media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflowLinux
- CVE-2026-89880media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failureLinux
- CVE-2026-89877media: saa7164: fix cleanup on resource allocation failureLinux
- CVE-2026-89875media: ti: vpe: quiesce overflow recovery before freeing streamsLinux
- CVE-2026-89873media: v4l2-ctrls: validate HEVC EXT SPS RPS countsLinux
- CVE-2026-89870media: zoran: Avoid freeing a registered video_device twiceLinux
- CVE-2026-89863scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete checkLinux
- CVE-2026-89861scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()Linux
- CVE-2026-89860scsi: qla2xxx: Initialize NVMe abort_work once at submissionLinux
- CVE-2026-89856scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncationLinux
- CVE-2026-89854scsi: qla2xxx: Fix cs84xx use-after-free on host teardownLinux
- CVE-2026-89849scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast pathLinux
- CVE-2026-89848scsi: qla2xxx: Quiesce response IRQ before freeing request queueLinux
- CVE-2026-89844scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisitionLinux
- CVE-2026-89841f2fs: only redirty pinned folios in redirty_blocksLinux
- CVE-2026-89840f2fs: validate MOVE_RANGE destination sizeLinux
- CVE-2026-89838f2fs: limit recovery filename logging to stored lengthLinux
- CVE-2026-89836f2fs: fix folio_nr_pages() race after put in large folio invalidateLinux
- CVE-2026-89832f2fs: fix to clear dirty flag on folio in error pathLinux
- CVE-2026-89829f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()Linux
- CVE-2026-89826drm/panthor: harden firmware build-info bounds checksLinux
- CVE-2026-89825drm/panthor: fix firmware control interface bounds checksLinux
- CVE-2026-89823drm: fix race between partial drm_dev_register() failure and ioctlLinux
- CVE-2026-89819drm/amd/display: validate plane degamma LUT size for private color propLinux
- CVE-2026-89818drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count checkLinux
- CVE-2026-89815drm/ttm: Drop tt->restore after successful restoreLinux
- CVE-2026-89814drm/amdgpu: clamp the isolation index for rings outside a partitionLinux
- CVE-2026-89811drm/amdkfd: Add TLB flush after MES queue eviction/suspensionLinux
- CVE-2026-89810drm/amdkfd: Fix error path at svm_migrate_copy_to_ramLinux
- CVE-2026-89808drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vramLinux
- CVE-2026-89806drm/sysfb: ofdrm: Fix integer overflow in fb_size calculationLinux
- CVE-2026-89805drm/pagemap: Fix folio allocation fallback and use-after-putLinux
- CVE-2026-89804drm/nouveau/dmem: fix mismatched DMA unmap size for large foliosLinux
- CVE-2026-89803drm/nouveau: unsubscribe the channel-kill event before the fence contextLinux
- CVE-2026-89801drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSELinux
- CVE-2026-89799bpf: Disable preemption in bpf_get_stackidLinux
- CVE-2026-89795PCI: Allow per function PCI slots to fix slot reset on s390Linux
- CVE-2026-8462OpenMeter SQL Injection in ClickHouse-backed Meter Definitionsopenmeter · github.com/openmeterio/openmeter
- CVE-2026-86585Improper Verification of the Firmware Signature vulnerabilityFermax Electronica S.A.U. DUOX PLUS monitor firmware
- CVE-2026-14916Kong API Gateway Enterprise: JWT Algorithm-ConfusionKong Enteprise Gateway
- CVE-2026-14917Kong API Gateway Enterprise: SAML Authentication bypassKong Enterprise Gateway
- CVE-2026-86474Improper Certificate Validation in the Firmware Download vulnerabilityFermax Electronica S.A.U. DUOX PLUS monitor firmware
- CVE-2026-89793ublk: clear VM_MAYWRITE on read-only ublk char device mmapLinux
- CVE-2026-73455Security Advisory 0173Arista Networks EOS
- CVE-2026-85628Cleartext Transmission of Sensitive Information in the Pairing Process vulnerabilityFermax Electronica S.A.U. DuoxMe · Fermax Electronica S.A.U…
- CVE-2026-79993Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znodeApache Software Foundation Apache ZooKeeper
- CVE-2026-59969Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS modeApache Software Foundation Apache ZooKeeper
- CVE-2026-59739Apache ZooKeeper: Information disclosure via SetWatches reconnect replayApache Software Foundation Apache ZooKeeper
- CVE-2026-73435Security Advisory 0171Arista Networks EOS
- CVE-2026-86466Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validatedApache Software Foundation Apache Airflow FAB provider
- CVE-2026-82310Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT accessApache Software Foundation Apache Airflow FAB provider
- CVE-2026-86792Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configurationApache Software Foundation Apache Airflow Apache Kafka prov…
- CVE-2026-89792ksmbd: prevent out-of-bounds reads in share config responsesLinux
- CVE-2026-2380Security Advisory 0168Arista Networks EOS
- CVE-2026-89791perf: Fix use-after-free when perf mmap() revival races with the last munmap()Linux
- CVE-2026-89789gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-freeLinux
- CVE-2026-89782fs/ntfs3: reject restart table growth beyond U16_MAX entriesLinux
- CVE-2026-89781fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()Linux
- CVE-2026-89777vfio/pci: clear vdev->msi_perm after freeing it on init failureLinux
- CVE-2026-73464Security Advisory 0166Arista Networks EOS
- CVE-2026-82717CNAME synthesis could lead to heap corruptionNLnet Labs Unbound
- CVE-2026-81634Possible heap buffer overflow during DNSSEC canonicalizationNLnet Labs Unbound
- CVE-2026-89774Bluetooth: SCO: hold sk properly in sco_conn_readyLinux
- CVE-2026-73454Security Advisory 0165Arista Networks EOS
- CVE-2026-73439Security Advisory 0164Arista Networks EOS
- CVE-2026-73461Security Advisory 0163Arista Networks EOS
- CVE-2026-27564Command Injection via PUT in /api/datastorage/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27563Command Injection via GET in /api/datastorage/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27562Command Injection via PUT in /api/iodd/configPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27561Command Injection via GET in /api/iodd/configPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27560Command Injection via DELETE in /api/status/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27559Command Injection via GET in /api/status/dataPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27558Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_filesPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27557Path Traversal in /index.php/view_uploaded_iodd_filePepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27556Local File Inclusion in /index.php/ajax/save_iodd_parametersPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27555Local File Inclusion in /index.php/ajax/get_iodd_port_infoPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27554Command Injection in /index.php/ajax/save_iodd_parametersPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27552Unauthorized IODD File Upload due to Improper AuthorizationPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27551Command Injection in /index.php/ajax/parameterManagePepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27550Command Injection in Field_Shadow_Password ClassPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27549Command Injection in /index.php/attached_devices_tab/do_uploadPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27548Command Injection in /index.php/ajax/get_iodd_port_infoPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-27547Command Injection in /index.php/ajax/get_iodd_menu_infoPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-84408QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC wheQualitySoft QND Premium · QualitySoft QND Standard +1
- CVE-2026-92355In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to Octopus Deploy Octopus Server
- CVE-2026-88263XikeStor Layer3 switches miss authentication for downloading configuration data.XikeStor SKS8310-8X · XikeStor SKS8300-8T +1
- CVE-2026-19248Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qtqt
- CVE-2025-14871Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-1168Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2026-78252Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-79708Incorrect Authorization in GitLabGitLab
- CVE-2026-86444LearnPress < 4.4.7 - Reflected XSS via 'skin' ParameterLearnPress
- CVE-2026-85569Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request MisclassificationTutor LMS
- CVE-2026-85530GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization MismatchGiveWP
- CVE-2026-84829Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor ParameterOptimole
- CVE-2026-78472Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' ParameterNi WooCommerce Sales Report
- CVE-2026-76552WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image ImportWP Import Export Lite
- CVE-2026-76551WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP FunctionWP Import Export Lite
- CVE-2026-76550WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path TraversalWP Import Export Lite
- CVE-2026-74926MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST EndpointMultiVendorX
- CVE-2026-89063Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' Parameterladela Online Scheduling and Appointment Booking System – B…
- CVE-2026-18595WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Requestwp-lab WP-Lister Lite for eBay
- CVE-2026-78088Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parametercontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2026-86108Security Advisory 0181Arista Networks VeloCloud Edge
- CVE-2026-92299@jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture@jitsi/electron-sdk
- CVE-2025-56565DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within no
- CVE-2026-38999A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers
- CVE-2026-79298An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrar
Medium, low and unrated 378
- CVE-2026-61589djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live pathdjust-org djust · djust
- CVE-2026-61588djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the clientdjust-org djust · djust
- CVE-2026-61597djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tagsdjust-org djust · djust
- CVE-2026-92595Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContentnodemailer
- CVE-2026-92590Craft CMS 5.7.0 before 5.10.13 Stored XSS via Generated Fieldscraftcms cms
- CVE-2026-92589Craft CMS 5.0.0 before 5.10.13 Broken Access Control via nested-elements/reordercraftcms cms
- CVE-2026-92588n8n before 1.123.76 Improper Authorization via Source Control Pushn8n-io n8n
- CVE-2026-92587n8n before 1.123.76 Sandbox Escape via Git Relative URLn8n-io n8n
- CVE-2026-92586AVideo through 29.0 Missing Authorization via comment API endpointWWBN AVideo
- CVE-2026-92585AVideo through 29.0 Missing Authorization Check via API Like EndpointWWBN AVideo
- CVE-2026-92584AVideo through 29.0 Stored Cross-Site Scripting via User-Agent HeaderWWBN AVideo
- CVE-2026-92583AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter IncrementWWBN AVideo
- CVE-2026-92581AVideo through 29.0 Like Counter Desynchronization via Array ParameterWWBN AVideo
- CVE-2026-92579AVideo through 29.0 Broken Access Control via CSRF Exemption Basename CollisionWWBN AVideo
- CVE-2026-64684RMCP: Custom HTTP headers leak to cross-origin redirect targetsmodelcontextprotocol rust-sdk · rmcp
- CVE-2026-81871OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-81872OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-81869OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncationopen-telemetry opentelemetry-go · go.opentelemetry.io/otel/…
- CVE-2026-92814changedetection.io through 0.60.6 Cross-Site Scripting via watch_titledgtlmoon changedetection.io
- CVE-2026-92813Metabase through 0.63.18 SSRF via GeoJSON URL validation bypassMetabase
- CVE-2026-92810PrestaShop blockwishlist through 3.0.2 Information DisclosurePrestaShop blockwishlist
- CVE-2026-92809PrestaShop psgdpr through 1.4.3 GDPR Log ForgeryPrestaShop psgdpr
- CVE-2026-92803LibreTranslate through 1.9.6 Missing Access Check on the download_file RouteLibreTranslate
- CVE-2026-92802kan through 0.6.0 Authorization Bypass via GitHub Project Importkanbn kan
- CVE-2026-92790Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Headerhigress-group higress
- CVE-2026-92781Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributesBuilderIO @builder.io/sdk-react · BuilderIO @builder.io/… +5
- CVE-2026-92778CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routesyahoo CMAK
- CVE-2026-92774Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omissionrequarks Wiki.js
- CVE-2026-92764OpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scopeopencve
- CVE-2026-92754PatrowlManager through 1.8.4 Improper Access Control via users APIPatrowlManager
- CVE-2026-76426Cisco ISE REST API SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20121CIsco FTD Bypass Access ListCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76431Cisco Identity Services Engine Arbitrary File Deletion VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76427Cisco ISE XML External Entity Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76447Cisco Identity Services Engine Certificate Reload VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20285Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20287Cisco Identity Services Engine Hardening Release - Improper Privlege Management VulnerabilitiesCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20286Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76438Cisco BroadWorks CommPilot Application Software Authorization Bypass VulnerabilityCisco BroadWorks
- CVE-2026-20072ISE information disclosureCisco Identity Services Engine Software
- CVE-2026-76446Cisco Identity Services Engine External Entity Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20071ISE 802.1x Session Hijack VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76432Cisco Identity Services Engine Arbitrary File Write VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76448Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76434Cisco Identity Services Engine Arbitrary File Read VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20120Cisco FTD ACL bypass vulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76444Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76451Cisco Identity Services Engine Certificate Management SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20290Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCisco Secure Firewall Threat Defense (FTD) Software
- CVE-2026-20235Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76449Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76450Cisco Identity Services Engine SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20309Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2026-76428Cisco ISE Profiler SQL Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-76433Cisco Identity Services Engine Information Disclosure VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20248Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-76439Cisco Identity Services Engine Event Injection VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-20282Cisco Identity Services Engine Authenticated Write VulnerabilityCisco Identity Services Engine Software
- CVE-2026-20283Cisco Identity Services Engine IPSec Open API Command Injection VulnerabilityCisco Identity Services Engine Software
- CVE-2026-92527chatwoot Shopify OAuth callbacks_controller.rb server-side request forgerychatwoot
- CVE-2026-20350Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection VulnerabilityCisco ThousandEyes Enterprise Agent
- CVE-2026-81870OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsopen-telemetry opentelemetry-go · go.opentelemetry.io/ot… +4
- CVE-2026-62949AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONronf asyncssh · asyncssh
- CVE-2026-92526itsourcecode Leave Management System index.php sql injectionitsourcecode Leave Management System
- CVE-2026-92475GPAC downloader.c wait_for_header_and_parse out-of-boundsGPAC
- CVE-2026-87026Tanium addressed an improper access controls vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87113Tanium addressed an improper access controls vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87116Tanium addressed a server-side request forgery vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-87076Tanium addressed an information disclosure vulnerability in Discover.Tanium Discover
- CVE-2026-81866Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector ConfigurationApache Software Foundation Apache NiFi
- CVE-2026-82561Apache NiFi: Missing Authorization for Components Referenced in Flow Update MethodsApache Software Foundation Apache NiFi
- CVE-2026-86089Apache NiFi: Missing Process Group Authorization for Connector MigrationApache Software Foundation Apache NiFi
- CVE-2026-92474GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after freeGPAC
- CVE-2026-63225Redocly CLI: Path traversal when using `split` commandredocly-cli · @redocly/cli
- CVE-2026-86071Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction rootjunrar · com.github.junrar:junrar
- CVE-2026-73462On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IArista Networks EOS
- CVE-2026-92473GPAC BIFS commands.c gf_sg_command_del use after freeGPAC
- CVE-2026-73457Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.Arista Networks EOS
- CVE-2026-91103HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-73442On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving forArista Networks EOS
- CVE-2026-91101HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-91100HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-73443On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefArista Networks EOS
- CVE-2026-91099HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesHP Linux Imaging and Printing Software
- CVE-2026-92472GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after freeGPAC
- CVE-2026-77360oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypassmiddleapi orpc · @orpc/server
- CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM ProxyBerriAI litellm · litellm
- CVE-2026-81176Svelte devalue: DoS via malformed inputsveltejs devalue · devalue
- CVE-2026-75025Mattermost Desktop local network access from server-rendered contentMattermost
- CVE-2026-92418ChangeWeDer crm Save Endpoint customer.serve.js cross site scriptingChangeWeDer crm
- CVE-2026-69147vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationvllm-project vllm · vllm
- CVE-2026-92416Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertionOpen5GS
- CVE-2026-92413Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereferenceArtifex MuPDF
- CVE-2026-84397Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-18120Missing Authorization in legacy Express entries search endpoint allows disclosure of Express entry dataConcrete CMS
- CVE-2026-92406SourceCodester Inventory and Monitoring System btn_functions.php add sql injectionSourceCodester Inventory and Monitoring System
- CVE-2026-85387Concrete CMS before 9.5.4 allows a deactivated user to retain OAuth-authenticated REST API accessConcrete CMS
- CVE-2026-92405SourceCodester Inventory and Monitoring System index.php sql injectionSourceCodester Inventory and Monitoring System
- CVE-2026-92402ChangeWeDer crm top.upstudy.crm.controller.UserController UserController.java index authorizationChangeWeDer crm
- CVE-2026-87031Missing authorization in the REST API user creation endpoint in Concrete CMS 9.2.0 through 9.5.3 allows arbitrary account creationConcrete CMS
- CVE-2026-87028Cross-Board IDOR in the Board Custom Slot Preview in Concrete CMS 9.0.0 through 9.5.3 Discloses Restricted Page Summary FieldsConcrete CMS
- CVE-2026-57173vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completionsvllm-project vllm · vllm
- CVE-2026-92401ChangeWeDer crm improper authenticationChangeWeDer crm
- CVE-2026-84993MikroORM: SQL injection via unvalidated order direction in orderBymikro-orm
- CVE-2026-86358Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.Dell Update Package Framework
- CVE-2026-85732oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probingoras-project oras-go · oras.land/oras-go/v2
- CVE-2026-71182Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerDell Update Package Framework
- CVE-2026-71181Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerDell Update Package Framework
- CVE-2026-69200node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086)node-opcua
- CVE-2026-92399GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflowGPAC
- CVE-2026-59944Composer: CVE-2026-59946 fix bypass via symlinked package bin pathcomposer · composer/composer
- CVE-2026-19607Keycloak-services: keycloak-services: broker-originated username collision causes account lockoutRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-92615Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleedRed Hat Advanced Cluster Management for Kubernetes · Red Ha…
- CVE-2026-92627Heap Use-After-Free in H5T__conv_f_fThe HDF Group HDF5
- CVE-2026-92385SourceCodester Online Food Ordering System Category Update update_category.php cross site scriptingSourceCodester Online Food Ordering System
- CVE-2026-76104Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS.Dell ObjectScale
- CVE-2026-26947Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulneraDell ECS
- CVE-2025-36591Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky CryptographiDell Elastic Cloud Storage
- CVE-2026-92383PbootCMS User Management UserController.php mod cross-site request forgeryPbootCMS
- CVE-2026-84859Scada-LTS Authenticated Blind SQL InjectionScada-LTS
- CVE-2026-92381PbootCMS Template Rendering ContentController.php decode_string cross site scriptingPbootCMS
- CVE-2026-92569Hippo4j through 1.5.0 SSRF via clientAddress Parameteropengoofy hippo4j
- CVE-2026-92568MLRun through 1.11.0 Server-Side Request Forgery via Webhookmlrun
- CVE-2026-92565Rallly before 4.15.0 Information Disclosure via polls.getlukevella rallly
- CVE-2026-92380WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgeryWuzhiCMS
- CVE-2026-77401Zope AccessControl: Information disclosure through Python string `format` and `format_map` functionszopefoundation AccessControl · accesscontrol
- CVE-2026-77119NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsetsISC BIND
- CVE-2026-75029Message parser retains every identical singleton RDATA, enabling wire-to-work amplificationISC BIND
- CVE-2026-92366code-projects Matrimonial System Regular Search search.php sql injectioncode-projects Matrimonial System
- CVE-2026-19668Resource Exhaustion via Excessive DNSSEC Cryptographic Material MatchingISC BIND
- CVE-2026-88976@platejs/core HTML deserialization can trigger browser behavior during parsingudecode plate · @platejs/core
- CVE-2026-19033Unauthenticated IXFR deltas are applied to the live zone before TSIG verificationISC BIND
- CVE-2026-61709OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that useropenfga · github.com/openfga/openfga
- CVE-2026-89031Blog2Social WordPress Plugin < 9.1.0 Broken Access Control via b2s_calendar_move_postAdenion Blog2Social
- CVE-2026-89030Blog2Social WordPress Plugin < 9.1.0 User Email Disclosure via b2s_search_userAdenion Blog2Social
- CVE-2026-92365vllm-project vllm thinking_budget_state.py algorithmic complexityvllm-project vllm
- CVE-2026-89029Blog2Social WordPress Plugin < 9.1.0 User Enumeration via AJAX HandlerAdenion Blog2Social
- CVE-2026-78301Out-of-zone database nodes can become authoritative zone cutsISC BIND
- CVE-2026-92141Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishJenkins Project Jenkins Keycloak Authentication Plugin
- CVE-2026-92140Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resultJenkins Project Jenkins Gitee Plugin
- CVE-2026-92139Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and Jenkins Project Jenkins Bitbucket Push and Pull Request Plu…
- CVE-2026-92138The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the suJenkins Project Jenkins Bitbucket Server Integration Plugin
- CVE-2026-92133Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials undeJenkins Project Jenkins GitLab Plugin
- CVE-2026-92132Jenkins Gradle Plugin 2.19.1252.v15196b_5a_6e10 and earlier requests build scan data from the build scan link detected in the build log, eveJenkins Project Jenkins Gradle Plugin
- CVE-2026-92131Jenkins Pipeline: Groovy Libraries Plugin 805.va_fc79344957d and earlier does not restrict the library path provided to the library PipelineJenkins Project Jenkins Pipeline: Groovy Libraries Plugin
- CVE-2026-92130Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolJenkins Project Jenkins Pipeline: Multibranch Plugin
- CVE-2026-19941checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proofISC BIND
- CVE-2026-19662qpcache NOQNAME proof use-after-free crashes recursive resolverISC BIND
- CVE-2026-92364itsourcecode Leave Management System index.php sql injectionitsourcecode Leave Management System
- CVE-2026-85104Brain stimulation parameters can be modified via Bluetooth in SoomaSooma tDCS Home Therapy
- CVE-2026-92363ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumptionag-ui-protocol ag-ui
- CVE-2026-92362ag-ui-protocol ag-ui SSE Frame sse.rs resource consumptionag-ui-protocol ag-ui
- CVE-2026-56719MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndXMikroTik RouterOS
- CVE-2026-92361ag-ui-protocol ag-ui SSE Client client.go resource consumptionag-ui-protocol ag-ui
- CVE-2026-73169Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilityAdvantech EKI-1242IEIMS · Advantech EKI-1242EIMS
- CVE-2026-92360ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validationag-ui-protocol ag-ui
- CVE-2026-92359ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policyag-ui-protocol ag-ui
- CVE-2026-92461yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpointguchengwuyue yshop-crm
- CVE-2026-92458yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSaleguchengwuyue yshop-crm
- CVE-2026-92455yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpointsguchengwuyue yshop-crm
- CVE-2026-92357a2ui-project a2ui Model Processor model-processor.ts information disclosurea2ui-project a2ui
- CVE-2026-86107Security Advisory 0180Arista Networks VeloCloud
- CVE-2026-90040KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zappedLinux
- CVE-2026-90039NFSD: Guard admin state-revocation walks with NFSD_NET_UPLinux
- CVE-2026-90035drm/amd/display: fix division by zero in get_estimated_bw()Linux
- CVE-2026-90034usb: image: mdc800: change kmalloc() to kzalloc()Linux
- CVE-2026-90033ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()Linux
- CVE-2026-90031usb-storage: ene_ub6250: fix race between scan work and probeLinux
- CVE-2026-90029usb: storage: realtek_cr: fix use-after-free on disconnectLinux
- CVE-2026-90028usb: typec: hd3ss3220: track VBUS enable state per consumerLinux
- CVE-2026-90024usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqsLinux
- CVE-2026-90023usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()Linux
- CVE-2026-90021usb: gadget: f_midi: initialize work in f_midi_alloc()Linux
- CVE-2026-90020USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()Linux
- CVE-2026-90019usb: gadget: fix null pointer dereference in usb_put_function_instance()Linux
- CVE-2026-90015xhci: fix lost bounce buffers on TDs spanning several ring segmentsLinux
- CVE-2026-90006samples/damon/mtier: handle damon_stop() failureLinux
- CVE-2026-90005samples/damon/wsse: handle damon_start() failureLinux
- CVE-2026-90004mm/damon/core: handle region split failure in apply_min_nr_regions()Linux
- CVE-2026-89996dma-buf: dma-heap: don't publish fd before copy_to_user() succeedsLinux
- CVE-2026-89993dmaengine: dw-edma: Initialize IRQ data before requesting IRQsLinux
- CVE-2026-89991bpf: Fix infinite loop in pcpu_freelist push with one possible CPULinux
- CVE-2026-89989ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()Linux
- CVE-2026-89987mm/huge_memory: transfer the pmd dirty bit to the folio on zapLinux
- CVE-2026-89984perf/x86/intel: Fix kernel address leakages in LBR stackLinux
- CVE-2026-89983i2c: core: fix debugfs UAF on adapter removalLinux
- CVE-2026-89982i2c: mux: Fix channel node leak on adapter add failureLinux
- CVE-2026-89981arm64: Don't read GMID_EL1 when MTE is disabledLinux
- CVE-2026-89978accel/amdxdna: return early from a zero-length flushLinux
- CVE-2026-89977accel/ethosu: check MMIO mapping errors in probeLinux
- CVE-2026-89976accel/ethosu: fix job completion fence cleanupLinux
- CVE-2026-89975nvme-fabrics: fix DHCHAP secret leak on parse failureLinux
- CVE-2026-89966mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folioLinux
- CVE-2026-89964parisc: eisa: Fix infinite loop when parsing invalid IRQ valueLinux
- CVE-2026-89963powerpc/kexec_file: Fix null-ptr-def in extra size calculationLinux
- CVE-2026-89962powerpc/kexec_file: Prevent kexec range truncationLinux
- CVE-2026-89958s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULLLinux
- CVE-2026-89956s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objectsLinux
- CVE-2026-89955s390/vfio-ap: Fix NULL deref in status_show() during queue probeLinux
- CVE-2026-89953mtd: mtdoops: free page bitmap when the backing MTD is removedLinux
- CVE-2026-89952mtd: rawnand: validate ONFI extended parameter page sectionsLinux
- CVE-2026-89950batman-adv: mcast: linearize skbuff for packet generationLinux
- CVE-2026-89949batman-adv: dat: avoid unaligned fault in IP extractionLinux
- CVE-2026-89948batman-adv: bla: fix freeing of claims on meshif deletionLinux
- CVE-2026-89946ASoC: cs35l33: drain threaded IRQ before runtime suspendLinux
- CVE-2026-89945ASoC: cs35l34: drain threaded IRQ before runtime suspendLinux
- CVE-2026-89944ASoC: hdac_hda: Fix hlink refcount leak on component registration failureLinux
- CVE-2026-89939iio: chemical: atlas-sensor: fix PM reference leak in buffer postenableLinux
- CVE-2026-89937iio: chemical: sgp30: Handle IAQ thread creation failureLinux
- CVE-2026-89936iio: dac: m62332: Fix regulator reference count imbalanceLinux
- CVE-2026-89935iio: light: apds9306: fix PM reference leak in apds9306_read_data()Linux
- CVE-2026-89934iio: light: ltrf216a: fix runtime PM reference leak in error pathLinux
- CVE-2026-89933iio: pressure: dps310: fix NULL pointer dereference on ACPI probeLinux
- CVE-2026-89931KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-ExitLinux
- CVE-2026-89926KVM: s390: Fix length check __import_wp_info()Linux
- CVE-2026-89925KVM: s390: Fix memory leak in guest debug handlingLinux
- CVE-2026-89924KVM: s390: Fix old_data leak in guest debug error pathLinux
- CVE-2026-89923KVM: s390: Free guest debug data on vcpu destroyLinux
- CVE-2026-89921KVM: s390: Zero initialize data structures for inject_pfault_tokenLinux
- CVE-2026-89917KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmappingLinux
- CVE-2026-89909LoongArch: KVM: Free init resources if kvm_init() failsLinux
- CVE-2026-89905LoongArch: BPF: Move arena register slot below TCC contextLinux
- CVE-2026-89901media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL derefLinux
- CVE-2026-89900media: cec: core: Fix kmemleak due to missed rc_free_device() callLinux
- CVE-2026-89896media: cedrus: fix memory leak in cedrus_init_ctrls()Linux
- CVE-2026-89895media: cobalt: Avoid freeing ALSA private data twiceLinux
- CVE-2026-89892media: em28xx: defer audio-only extension registrationLinux
- CVE-2026-89891media: em28xx: fix use-after-free of dev_next->devlist on disconnectLinux
- CVE-2026-89889media: i2c: imx415: Release runtime PM reference on VBLANK errorLinux
- CVE-2026-89886media: intel/ipu6: fix async notifier cleanup leak on parse errorLinux
- CVE-2026-89884media: platform: mtk-mdp3: fix NULL deref on failed SCP lookupLinux
- CVE-2026-89881media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leakLinux
- CVE-2026-89879media: s2255: bound JPEG frame size before copying into the bufferLinux
- CVE-2026-89878media: s2255: check firmware size before reading trailing markerLinux
- CVE-2026-89876media: tda18250: fix possible integer overflowLinux
- CVE-2026-89874media: v4l2-async: avoid deleting unlinked ASC entry on link errorLinux
- CVE-2026-89872media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_linkLinux
- CVE-2026-89871media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failureLinux
- CVE-2026-89869media: qcom: iris: use disable_irq() during power-offLinux
- CVE-2026-89868media: chips-media: wave5: Add timeout while stop_streamingLinux
- CVE-2026-89867media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queuedLinux
- CVE-2026-89866media: chips-media: wave5: Resume device before setting EOS flagLinux
- CVE-2026-89865scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlersLinux
- CVE-2026-89864scsi: qla2xxx: Bound i2c->length in I2C bsg handlersLinux
- CVE-2026-89862scsi: qla2xxx: Fix BSG job leak on validate flash image error pathLinux
- CVE-2026-89859scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leakLinux
- CVE-2026-89858scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()Linux
- CVE-2026-89855scsi: qla2xxx: Serialize flash version read in reset handlerLinux
- CVE-2026-89853scsi: qla2xxx: Fix FCE trace use-after-free during firmware dumpLinux
- CVE-2026-89852scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()Linux
- CVE-2026-89851scsi: qla2xxx: Fix FCE trace enable parsing in debugfsLinux
- CVE-2026-89850scsi: qla2xxx: Don't query firmware state while chip is downLinux
- CVE-2026-89845scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()Linux
- CVE-2026-89843scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leakLinux
- CVE-2026-89842scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not startedLinux
- CVE-2026-89839f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()Linux
- CVE-2026-89837f2fs: fix dentry folio leak in find_in_levelLinux
- CVE-2026-89835f2fs: avoid NULL checkpoint thread access in sysfsLinux
- CVE-2026-89834f2fs: fix to migrate all curseg types during free_segment_rangeLinux
- CVE-2026-89833f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()Linux
- CVE-2026-89831f2fs: protect critical_task_priority updates with s_umountLinux
- CVE-2026-89830f2fs: fix valid block count leak on data block allocation failureLinux
- CVE-2026-89828drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()Linux
- CVE-2026-89827drm/amdgpu: avoid force-completing uninitialized UVD ringsLinux
- CVE-2026-89824drm/panel-edp: fix i2c adapter leak on probe failureLinux
- CVE-2026-89822drm/i915: Guard against NULL driver_data in i915_pci_probe()Linux
- CVE-2026-89821drm/amd/display: avoid divide-by-zero in __is_lut_linear()Linux
- CVE-2026-89820drm/amd/display: fix dc_lock leak on GPU reset error pathsLinux
- CVE-2026-89817drm/gud: NUL-terminate TV mode names read from the deviceLinux
- CVE-2026-89816drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is usedLinux
- CVE-2026-89813drm/amdgpu: force complete the KIQ ring fences on resetLinux
- CVE-2026-89812drm/amdgpu: force complete the MES ring fences on resetLinux
- CVE-2026-89809drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqdsLinux
- CVE-2026-89807drm/amdkfd: guard against NULL restore_mqd in CRIU queue restoreLinux
- CVE-2026-89802drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE opLinux
- CVE-2026-89800drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSELinux
- CVE-2026-89798rpcrdma: arm rn_done before publishing the notificationLinux
- CVE-2026-89797power: supply: ab8500_fg: fix use-after-free on removeLinux
- CVE-2026-89796mm/damon/core: avoid infinite kdamond_merge_regions() internal loopLinux
- CVE-2026-89794ksmbd: zero pipe read compound paddingLinux
- CVE-2026-92356a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumptiona2ui-project a2ui
- CVE-2026-77190Security Advisory 0177Arista Networks EOS
- CVE-2026-76151Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)qt
- CVE-2026-73468Security Advisory 0175Arista Networks EOS
- CVE-2026-73440Security Advisory 0178Arista Networks EOS
- CVE-2026-73469Security Advisory 0176Arista Networks EOS
- CVE-2026-73438Security Advisory 0172Arista Networks EOS
- CVE-2026-84501Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProviderApache Software Foundation Apache ZooKeeper
- CVE-2026-84439Apache ZooKeeper: Audit log injection via unsanitized output from multiple sourcesApache Software Foundation Apache ZooKeeper
- CVE-2026-73436Security Advisory 0171Arista Networks EOS
- CVE-2026-86443Cleartext Storage of Sensitive Information VulnerabilityFermax Electronica S.A.U. DuoxMe
- CVE-2026-19640Security Advisory 0170Arista Networks EOS
- CVE-2026-73463Security Advisory 0169Arista Networks EOS
- CVE-2026-73445Security Advisory 0167Arista Networks EOS
- CVE-2026-86465Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled keyApache Software Foundation Apache Airflow Akeyless provider
- CVE-2026-92081fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responsesfastify
- CVE-2026-89790ipv6: avoid divide by zero in rt6_multipath_rebalanceLinux
- CVE-2026-89787ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()Linux
- CVE-2026-89785fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid initLinux
- CVE-2026-89784SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6Linux
- CVE-2026-89780net: qualcomm: rmnet: restore skb->dev on deaggregated framesLinux
- CVE-2026-89776vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributesLinux
- CVE-2026-85501Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSECNLnet Labs Unbound
- CVE-2026-82720Use-after-free in DoH stream cleanup code pathNLnet Labs Unbound
- CVE-2026-80225Possible degradation of service from continuous queries on the same TCP/DoT connectionNLnet Labs Unbound
- CVE-2026-78227Use-after-free in DoQ stream output buffer on reset re-transmissionNLnet Labs Unbound
- CVE-2026-77955Possible ZONEMD verification bypass windowNLnet Labs Unbound
- CVE-2026-77860'serve-expired' can bypass Unbound 'wait-limit'NLnet Labs Unbound
- CVE-2026-86338Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracleash-project ash
- CVE-2026-88255mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slotZenHive mpp
- CVE-2026-89186mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared cachesZenHive mpp
- CVE-2026-89207A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17Siemens WTV676-HB6035 Web Interface · Siemens WTV776-HB6035…
- CVE-2026-86341Access Control Check Implemented After Asset is Accessed in GitLabGitLab
- CVE-2026-27553Information Disclosure via Schema Path ManipulationPepperl+Fuchs ICE2-8IOL1-G65L-V1D · Pepperl+Fuchs ICE2-… +13
- CVE-2026-92091Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops arrayRed Hat Ansible Automation Platform · Red Hat Enterprise… +2
- CVE-2026-81326QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's clieQualitySoft QND Premium · QualitySoft QND Standard +1
- CVE-2024-11222Time-of-check Time-of-use (TOCTOU) Race Condition in GitLabGitLab
- CVE-2026-3855Improper Control of Resource Identifiers ('Resource Injection') in GitLabGitLab
- CVE-2026-7514Missing Authorization in GitLabGitLab
- CVE-2026-8030Missing Authorization in GitLabGitLab
- CVE-2026-16794Missing Authorization in GitLabGitLab
- CVE-2026-19619Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
- CVE-2026-86475Appointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment SubmissionAppointment Hour Booking
- CVE-2026-84906Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction ReplayEventin
- CVE-2026-19857Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML TokenFormidable Forms
- CVE-2026-13407Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification EmailsRoyal Addons for Elementor
- CVE-2026-89328FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access ModificationFluentBoards
- CVE-2026-89327FluentBoards < 2.0.15 - Board Member+ Comment Author Spoofing via 'comment_by' ParameterFluentBoards
- CVE-2026-88910KBoard < 6.7 - Unauthenticated Board Media Deletion via IDORkboard
- CVE-2026-87959WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings UpdateWPBot
- CVE-2026-87907Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST RoutesRox Appointment Booking
- CVE-2026-87896Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST RouteRox Appointment Booking
- CVE-2026-87860Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRFSubscriptions for WooCommerce
- CVE-2026-87854Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key BypassSubscriptions for WooCommerce
- CVE-2026-87828Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State UpdateSeraphinite Accelerator
- CVE-2026-86823Newsletter < 9.3.7 - Unauthenticated Open Redirect and Subscriber Token Disclosure via ncu ParameterNewsletter
- CVE-2026-86784Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data SourceVisualizer
- CVE-2026-86449LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST APILearnPress
- CVE-2026-86448LearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_orderLearnPress
- CVE-2026-86447LearnPress < 4.4.7 - Unauthenticated Student Enrollment Disclosure via load_content_via_ajaxLearnPress
- CVE-2026-86445LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajaxLearnPress
- CVE-2026-85641Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' ParameterFormidable Forms
- CVE-2026-85572Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment DisclosureTutor LMS
- CVE-2026-85349FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDORFluentBoards
- CVE-2026-85131WPLP Cookie Consent < 4.4.4 - Arbitrary Post Deletion via CSRFWPLP Cookie Consent
- CVE-2026-84907Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST EndpointEventin
- CVE-2026-84905Eventin < 4.1.24 - Contributor+ User Creation via Speaker CreationEventin
- CVE-2026-84088Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetXpro Addons — 140+ Widgets for Elementor
- CVE-2026-82126Schema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema GenerationSchema & Structured Data for WP & AMP
- CVE-2026-82125Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDORSchema & Structured Data for WP & AMP
- CVE-2026-82124Schema & Structured Data for WP & AMP < 1.66 - Unauthenticated Password-Protected Post Content Disclosure via JSON-LD Schema OutputSchema & Structured Data for WP & AMP
- CVE-2026-78474Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' ParameterNi WooCommerce Sales Report
- CVE-2026-77702Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_tokenEventin
- CVE-2026-76559WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL HandlingWP Import Export Lite
- CVE-2026-76558WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field NamesWP Import Export Lite
- CVE-2026-76557WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import OptionsWP Import Export Lite
- CVE-2026-76556WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter RulesWP Import Export Lite
- CVE-2026-76555WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path TraversalWP Import Export Lite
- CVE-2026-76553WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path TraversalWP Import Export Lite
- CVE-2026-92358Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linkingRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-18555Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameterwordplus Better Messages – Chat Rooms, Group Chat, Private…
- CVE-2026-5920Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameterboldthemes Bold Page Builder
- CVE-2026-11996Advanced Popups <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Fieldcodesupplyco Advanced Popups
- CVE-2026-11984Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameterspacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2026-16588WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameterwpdirectorykit WP Directory Kit
- CVE-2026-86109Security Advisory 0182Arista Networks VeloCloud Edge
- CVE-2026-92247synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted uploadsynaptikcms synaptik-cms
- CVE-2026-73450Security Advisory 0161Arista Networks EOS
- CVE-2026-92221gedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injectiongedelumbung HospitalManagement
- CVE-2026-92220vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionvllm-project vLLM
- CVE-2026-92217a2ui-project a2ui Message Parsing message-processor.ts processMessages dynamically-determined object attributesa2ui-project a2ui
- CVE-2026-92298EspoCRM through 10.0.8 Weak Token Generation via rand()EspoCRM
- CVE-2026-92216a2ui-project a2ui Binder generic-binder.ts openUrl redirecta2ui-project a2ui
- CVE-2026-92215a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgerya2ui-project a2ui
- CVE-2026-92214a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross site scriptinga2ui-project a2ui
- CVE-2026-92213a2ui-project a2ui Angular Renderer server-to-client.ts z.any injectiona2ui-project a2ui
- CVE-2025-56566MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage.
- CVE-2026-88593kkFileView 5.0.0 through 5.0.2 allows reflected XSS via the /onlinePreview endpoint.