CVEs published October 6, 2026
1,016 CVEs were published on October 6, 2026: 99 critical, 370 high.
- Published
- 1,016
- Critical
- 99
- High
- 370
- Medium
- 365
- Low
- 27
- Unrated
- 155
- Now in CISA KEV
- 0
- Fix available
- 729
Most affected products
- Google Chrome
- 247
- Linux
- 207
- Gitea
- 30
- Hewlett Packard Enterprise (HPE) ClearPass Policy Manager
- 28
- Red Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- 21
- payloadcms payload · payload
- 17
- Qualcomm Snapdragon
- 15
- Dell Container Storage Modules
- 13
- IBM Langflow OSS
- 11
- OpenBSD OpenSSH
- 11
Critical 99
- CVE-2026-104334Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-101023Gitea OAuth2 refresh token grant accepts access tokensGitea
- CVE-2026-106501Backstage: Sensitive information exposure in Scaffolderbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-106446Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)handlebars-lang handlebars.js · handlebars
- CVE-2026-102159Security Advisory 0190Arista Networks CloudVision CUE
- CVE-2026-106445Handlebars: JavaScript Injection via Own Property Check Bypasshandlebars-lang handlebars.js · handlebars
- CVE-2026-101155Security Advisory 0189Arista Networks CloudVision Portal
- CVE-2026-73278Gitea WebAuthn bypass during OAuth and OIDC sign-inGitea
- CVE-2026-94205Gitea fork workflow approval bypass through maintainer-triggered eventsGitea
- CVE-2026-95106Gitea review and execution mismatch through duplicate tree entriesGitea
- CVE-2026-103059Gitea built-in SSH server authentication bypass through key case foldingGitea
- CVE-2026-79805Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79801Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client AgentHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79798Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79796Authentication Bypass Vulnerabilities in ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79794Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management InterfaceHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76754Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76753Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76752Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative AccessHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76751Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code ExecutionHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76750Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76747Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-76746Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-76745Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-76744Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-76743Authentication Bypass Vulnerability in the Management Interface of AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-76742Authentication Bypass in the Web Management Interface of AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-106511CVE-2026-106511MultiversX Labs S.R.L. multisig-improved
- CVE-2026-106234Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially exeGoogle Chrome
- CVE-2026-106294Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restricGoogle Chrome
- CVE-2026-106195Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access reGoogle Chrome
- CVE-2026-106237Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTMGoogle Chrome
- CVE-2026-106417Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside thGoogle Chrome
- CVE-2026-106372Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsidGoogle Chrome
- CVE-2026-106401Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsideGoogle Chrome
- CVE-2026-106375Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside tGoogle Chrome
- CVE-2026-106414Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerinGoogle Chrome
- CVE-2026-106241Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerGoogle Chrome
- CVE-2026-106329Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potGoogle Chrome
- CVE-2026-106211Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially exGoogle Chrome
- CVE-2026-106227Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via aGoogle Chrome
- CVE-2026-106298Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-106281Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sGoogle Chrome
- CVE-2026-106323Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineGoogle Chrome
- CVE-2026-106419Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside thGoogle Chrome
- CVE-2026-106239Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cGoogle Chrome
- CVE-2026-102322Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a cGoogle Chrome
- CVE-2026-106358Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandboxGoogle Chrome
- CVE-2026-106197Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox viGoogle Chrome
- CVE-2026-106382Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandboxGoogle Chrome
- CVE-2026-55330In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-86360Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuDell System Update
- CVE-2026-106102Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()quasarframework quasar · quasar
- CVE-2026-105863Payload authentication token field handling issuepayloadcms payload · payload
- CVE-2026-105859Payload: Unauthorized update to collection documentspayloadcms payload · payload
- CVE-2026-105857Payload: RCE in Payload Form Builderpayloadcms payload · @payloadcms/plugin-form-builder
- CVE-2026-104070SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCESPIP Crayons Plugin
- CVE-2026-105851Payload: Field access control bypass on auth collectionspayloadcms payload
- CVE-2026-105845Payload: SQL Injection in SQLite and Postgrespayloadcms payload · payload
- CVE-2026-105844Payload: Prototype pollution in Payload Import Export pluginpayloadcms payload · @payloadcms plugin-import-export +1
- CVE-2026-67273Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template EnginDell Container Storage Modules
- CVE-2026-61421Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM AuthorizationDell Container Storage Modules
- CVE-2026-54472Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs.Dell Container Storage Modules
- CVE-2026-67269Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContaDell Container Storage Modules
- CVE-2026-63692Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability.Dell Container Storage Modules
- CVE-2026-63688Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in thDell Container Storage Modules
- CVE-2026-105794MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSLmicrosoft msquic · Microsoft.Native.Quic.MsQuic.OpenSSL
- CVE-2026-105793Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`microsoft UFO
- CVE-2026-106037Mooncake through 0.3.13.post1 Missing Authentication in Store REST Servicekvcache-ai Mooncake
- CVE-2026-91140OS command injection in Progress Software Autonomous REST Connector GenAI AgentsProgress Software Autonomous REST Connector GenAI Agents
- CVE-2026-105835PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpointplanka
- CVE-2026-106016Mitigation bypass in the File Handling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-82531Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cachesmarty-php smarty
- CVE-2026-98365RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB accessLinux
- CVE-2026-98323RDMA/siw: Bound fragmented header copies by the remaining lengthLinux
- CVE-2026-42417WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerabilityreputeinfosystems ARMember Premium
- CVE-2026-42415WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerabilityp-themes Porto Theme - Functionality
- CVE-2026-41555WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerabilityWeblizar – WordPress Themes & Plugin Newsletter Subscriptio…
- CVE-2026-39797WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerabilityData443 Risk Mitigation GDPR Framework By Data443
- CVE-2026-39795WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerabilitybrewlabs SendPress Newsletters
- CVE-2026-39785WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerabilitySerhii Pasyuk Gmedia Photo Gallery
- CVE-2026-39773WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerabilityAmentoTech Doctreat Core
- CVE-2026-39770WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerabilityAmentoTech Doctreat
- CVE-2026-39764WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerabilityRadiusTheme Radius Booking — Booking Calendar for Appointme…
- CVE-2026-39761WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerabilityeLightUp Meta Box AIO
- CVE-2026-39759WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerabilityAmentoTech Workreap Core
- CVE-2026-39757WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerabilityAmentoTech Taskbot
- CVE-2026-39755WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerabilityrevmakx WP Duplicate
- CVE-2026-39753WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerabilityAmentoTech Taskbot
- CVE-2026-39746WordPress Booknetic plugin < 5.10.3 - SQL Injection vulnerabilityBooknetic
- CVE-2026-32579WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerabilityKognetiks Chatbot for WordPress
- CVE-2026-32568WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerabilityJMAPlugins WooCommerce Designer Pro
- CVE-2026-32557WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerabilityBookingWP WooCommerce Appointments
- CVE-2026-85153Information Disclosure Vulnerability in Schmooze dating mobile ApplicationSchmooze dating mobile Application
- CVE-2026-105778Tenda AC5 Wifi setWifi stack-based overflowTenda AC5
- CVE-2026-94293Missing authentication for critical function in the aas-edge-client REST APIMurrelektronik Software AAS Edge Client all versions
- CVE-2026-105484TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injectionTOTOLINK X6000R
- CVE-2025-71383Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/lo
- CVE-2026-77178Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp
High 370
- CVE-2026-97674Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-97678Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-97679Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-97680Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-97655Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-97676Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-101331Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-103360Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-104335Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-106509Backstage: Improper validation of MkDocs theme configuration in TechDocsbackstage · @backstage plugin-techdocs-node +1
- CVE-2026-106505Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backendbackstage · @backstage plugin-techdocs-node +1
- CVE-2026-106503Backstage: Scaffolder action input authorization bypassbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-105267Gitea tag delete route deletes releases without release permissionGitea
- CVE-2026-106500Backstage: Improper task state validation in Scaffolder backendbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-106498Backstage: Improper URL validation in catalog entity placeholder resolutionbackstage · @backstage plugin-catalog-backend +1
- CVE-2026-86684Gitea push mirror local path check uses the repository ownerGitea
- CVE-2026-65142NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data.NVIDIA Model-Optimizer
- CVE-2026-106492Backstage: Improper preservation of access restrictions during service credential delegationbackstage · @backstage backend-defaults +1
- CVE-2026-106488Backstage: Improper authentication in the OIDC providerbackstage · @backstage plugin-auth-backend-module-oidc-p… +1
- CVE-2026-106486Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actionsbackstage · @backstage plugin-scaffolder-backend-module-… +3
- CVE-2026-105812Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent importaws bedrock-agentcore-starter-toolkit
- CVE-2026-106459Backstage: Improper input validation in Sentry scaffolder actionsbackstage · @backstage plugin-scaffolder-backend-module-… +1
- CVE-2026-106547HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadataThe HDF Group HDF5
- CVE-2026-106550CVE-2026-106550Mozilla Node-convict
- CVE-2026-43598Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent aAMD Instinct™ MI210 · AMD Instinct™ MI250 +7
- CVE-2026-106455Backstage: Improper validation of MkDocs plugin configuration in TechDocsbackstage · @backstage plugin-techdocs-node +1
- CVE-2026-105811Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWSqnabot-on-aws
- CVE-2026-106062Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface fileRed Hat Enterprise Linux
- CVE-2026-101258Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-freeRed Hat Enterprise Linux
- CVE-2026-106451yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local useryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106448StableLib: Prototype poisoning via `__proto__` map keys in CBOR decodingstablelib · @stablelib/cbor
- CVE-2026-106447StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tagsstablelib · @stablelib/cbor
- CVE-2026-102165Security Advisory 0198Arista Networks Wi-Fi Access Points
- CVE-2026-102167Security Advisory 0197Arista Networks Wi-Fi Access Points
- CVE-2026-102163Security Advisory 0195Arista Networks Wi-Fi Access Points
- CVE-2026-102162Security Advisory 0193Arista Networks Wi-Fi Access Points
- CVE-2026-101157Security Advisory 0192Arista Networks CloudVision CUE
- CVE-2026-101156Security Advisory 0192Arista Networks CloudVision CUE
- CVE-2026-102161Security Advisory 0190Arista Networks CloudVision CUE
- CVE-2026-102160Security Advisory 0190Arista Networks CloudVision CUE
- CVE-2026-102155Security Advisory 0190Arista Networks CloudVision CUE
- CVE-2026-101154Security Advisory 0189Arista Networks CloudVision Portal
- CVE-2026-101153Security Advisory 0188Arista Networks CloudVision Portal · Arista Networks CloudV…
- CVE-2026-101152Security Advisory 0187Arista Networks CloudVision Portal
- CVE-2026-101158Security Advisory 0185Arista Networks CloudVision Portal
- CVE-2026-103009Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information DisclosureElasticsearch
- CVE-2026-103007Incorrect Authorization in Elasticsearch Leading to Privilege EscalationElasticsearch
- CVE-2026-102406Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data InterceptionElastic Kibana · elk +1
- CVE-2026-96580Gitea Actions memory exhaustion through large static matricesGitea
- CVE-2026-96404Gitea installer authentication bypass for existing accountsGitea
- CVE-2026-96399Gitea denial of service through external issue tracker patternsGitea
- CVE-2026-79960Gitea deploy key pushes acting as the repository ownerGitea
- CVE-2026-70357Gitea repository migration SSRF through DNS rebindingGitea
- CVE-2026-104636Gitea SSRF through Git HTTP redirects in mirrors and fetchesGitea
- CVE-2026-103504Gitea API team demotion not applied to unit permissionsGitea
- CVE-2026-89430Gitea push mirror SSRF and forced writes to internal Git hostsGitea
- CVE-2026-103670Gitea trusted workflow cancellation by unapproved fork runsGitea
- CVE-2026-101027Gitea migration SSRF through ALLOWED_DOMAINS address check bypassGitea
- CVE-2026-104626Gitea fork workflow job revival through later approvalGitea
- CVE-2026-104632Gitea fork workflow approval bypass through cancel and rerunGitea
- CVE-2026-79811Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager APIHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79810Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79809Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization BypassHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79808Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard AgentHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79807Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client SoftwareHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79806Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux AgentHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79803Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager APIHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79802Command Injection Vulnerability in the ClearPass Policy Manager Client SoftwareHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79800Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79799Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79797Improper Access Control in HPE Networking ClearPass Android Client ApplicationHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76748Authenticated Privilege Escalation Vulnerability in the API of AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-106443WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCEKozea WeasyPrint · weasyprint
- CVE-2026-96890Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hostsGitHub Enterprise Server
- CVE-2026-106442Hydra instantiate target blacklist bypasses permit code executionhydra-ecosystem hydra · hydra-core
- CVE-2026-106441Hydra logging configuration permits unsafe callable resolutionhydra-ecosystem hydra · hydra-core
- CVE-2026-106440Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_methodhydra-ecosystem hydra · hydra-optuna-sweeper
- CVE-2026-82162Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability.Dell Command | Configure
- CVE-2026-106439Hydra: Mutable instantiate policy sets allow target blocklist bypasshydra-ecosystem hydra · hydra-core
- CVE-2026-106512MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSSMISP sachertortephp
- CVE-2026-106269Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-106334Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensiGoogle Chrome
- CVE-2026-106256Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering Google Chrome
- CVE-2026-106371Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sGoogle Chrome
- CVE-2026-106350Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a cGoogle Chrome
- CVE-2026-106374Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-106249Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive infoGoogle Chrome
- CVE-2026-106221Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to Google Chrome
- CVE-2026-106220Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafteGoogle Chrome
- CVE-2026-106247Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potenGoogle Chrome
- CVE-2026-106186Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potGoogle Chrome
- CVE-2026-106199Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-106252Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code insideGoogle Chrome
- CVE-2026-106309Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informaGoogle Chrome
- CVE-2026-106191Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-106409Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromGoogle Chrome
- CVE-2026-106341Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-106207Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-106352Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtGoogle Chrome
- CVE-2026-106271Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-106212Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtaiGoogle Chrome
- CVE-2026-106292Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potenGoogle Chrome
- CVE-2026-106301Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-106373Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside theGoogle Chrome
- CVE-2026-106403Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-106367Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineeringGoogle Chrome
- CVE-2026-106205Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the rGoogle Chrome
- CVE-2026-106387Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-106228Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-106201Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-106279Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised tGoogle Chrome
- CVE-2026-106342Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a craftedGoogle Chrome
- CVE-2026-106198Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-106378Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-106196Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy Google Chrome
- CVE-2026-106335Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-106189Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to byGoogle Chrome
- CVE-2026-106363Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-106225Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain Google Chrome
- CVE-2026-106314Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via aGoogle Chrome
- CVE-2026-106291Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sGoogle Chrome
- CVE-2026-106283Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially eGoogle Chrome
- CVE-2026-106194Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-106274Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engiGoogle Chrome
- CVE-2026-106315Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-106238Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-106200Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-106204Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-106421Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cGoogle Chrome
- CVE-2026-106349Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-106383Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-106240Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crGoogle Chrome
- CVE-2026-106357Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-106190Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-106346Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary codGoogle Chrome
- CVE-2026-106423Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-106411Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-106318Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-106233Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execGoogle Chrome
- CVE-2026-106278Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrarGoogle Chrome
- CVE-2026-106268Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-106257Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a Google Chrome
- CVE-2026-106235Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-106248Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox viGoogle Chrome
- CVE-2026-106393Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execGoogle Chrome
- CVE-2026-106255Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandGoogle Chrome
- CVE-2026-106193Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via Google Chrome
- CVE-2026-106203Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to Google Chrome
- CVE-2026-106426Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the Google Chrome
- CVE-2026-106412Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-106377Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to executGoogle Chrome
- CVE-2026-106293Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-106308Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging socialGoogle Chrome
- CVE-2026-106327Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2026-106347Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via aGoogle Chrome
- CVE-2026-104944Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500TP-Link Systems Tapo C500
- CVE-2026-86362Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.Dell System Update
- CVE-2026-86361Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell System Update
- CVE-2026-56906In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-105488Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vauDevolutions Server
- CVE-2026-63697Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability.Dell System Update
- CVE-2026-83550Postgres-exporter: net/http/pprof exposed on metrics listenerRed Hat Multicluster Global Hub
- CVE-2026-71168Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vuDell System Update
- CVE-2026-106118ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writeSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-106117ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharpSixLabors ImageSharp · ImageSharp
- CVE-2026-106115ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output bufferSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-106113ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram indexSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-106112ImageSharp: ICC LUT16 output channel count can write beyond Vector4SixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-101207Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special EleDell OpenManage Integration
- CVE-2026-106110ImageSharp: TIFF CCITT T4 encoder can write past its compressed output bufferSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-106107Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrainedquasarframework quasar · @quasar app-vite +1
- CVE-2026-106106Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassablequasarframework quasar · @quasar render-ssr-error +3
- CVE-2026-106105Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissionsquasarframework quasar · @quasar app-vite +5
- CVE-2026-106104Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR serverquasarframework quasar · quasar
- CVE-2026-106103Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profilequasarframework quasar · @quasar icongenie +1
- CVE-2026-106100Payload: Field-level write access bypass in Payload on MongoDBpayloadcms payload · @payloadcms/db-mongodb
- CVE-2026-105868Payload: Uploaded XML files could execute same-origin JavaScriptpayloadcms payload · payload
- CVE-2026-105867Payload: Client uploads could overwrite S3 objectspayloadcms payload · @payloadcms storage-s3 +1
- CVE-2026-105865Payload: Incomplete validation during the upload file lifecyclepayloadcms payload · payload
- CVE-2026-105862Payload: Bypassed sanitization of user uploaded SVGspayloadcms payload · payload
- CVE-2026-105861Payload external upload trust validation issuepayloadcms payload · payload
- CVE-2026-105860Payload: Tenant authorization bypass in Multi-Tenant Pluginpayloadcms payload · @payloadcms/plugin-multi-tenant
- CVE-2026-106218In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possibleJetBrains TeamCity
- CVE-2026-105858Payload: Remote Code Execution through first-registerpayloadcms payload · payload
- CVE-2026-105856Payload: SQL injection in SQLite/Postgrespayloadcms payload · @payloadcms db-d1-sqlite +7
- CVE-2026-105855Payload: Field-level password update restrictions were not enforcedpayloadcms payload · payload
- CVE-2026-105854Payload: ReDoS in Multipart Content-Type Validationpayloadcms payload · payload
- CVE-2026-105853Payload: Token refresh and password reset responses may expose restricted user fieldspayloadcms payload · payload
- CVE-2026-105850Payload: Order confirmation validation issue in Payload Ecommercepayloadcms payload · @payloadcms plugin-ecommerce +1
- CVE-2026-105849Payload: API key disclosure through ordinary document readspayloadcms payload · payload
- CVE-2026-104850MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP servermodelcontextprotocol typescript-sdk · @modelcontextproto… +1
- CVE-2026-105847Payload: Polymorphic join queries could disclose hidden fieldspayloadcms payload · payload
- CVE-2026-105806Payload: Improper access control for MCP API keyspayloadcms payload · @payloadcms plugin-mcp +1
- CVE-2026-26287External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltrationexternal-secrets · github.com/external-secrets/external-sec…
- CVE-2026-70411Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in theDell Container Storage Modules
- CVE-2026-61411Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability.Dell Container Storage Modules
- CVE-2026-76105Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability.Dell Container Storage Modules
- CVE-2026-67270Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-serverDell Container Storage Modules
- CVE-2026-104069HortusFox < 6.2 Remote Code Execution via Theme Importdanielbrendel hortusfox-web
- CVE-2026-105801openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generationopenapi-generators openapi-python-client · openapi-python-c…
- CVE-2026-105798SimpleChat: Stored XSS via group document filename in inline onclick handlermicrosoft simplechat
- CVE-2026-105797SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)microsoft simplechat
- CVE-2026-105796Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generatorsmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-105791Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injectionmicrosoft UFO
- CVE-2026-105788Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_appmicrosoft UFO
- CVE-2026-106040Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPCkvcache-ai Mooncake
- CVE-2026-106038Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCskvcache-ai Mooncake
- CVE-2026-85523OS Command Injection in Felisify Informatics' SambaBoxFelisify Information Technologies Industry and Trade SambaB…
- CVE-2026-105841lrzsz before 0.13.0 OS Command Injection via lrz Pipe ModeUwe Ohse lrzsz
- CVE-2026-105840lrzsz before 0.13.0 Path Traversal via lrz Restricted Mode checkpath()Uwe Ohse lrzsz
- CVE-2026-105839libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBODsezero libmikmod
- CVE-2026-105837libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflowsezero libmikmod
- CVE-2026-105834Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Sourcerundeck
- CVE-2026-103831Insecure deserialization in the TrueLayer Magento 2 pluginTrueLayer Magento 2 Plugin
- CVE-2026-105985Authenticated RCE via render-components Entry Type overridescraftcms cms
- CVE-2026-84854Out of Bound Write on WibuKey for Windowswibu-systems-ag wibukey
- CVE-2026-98369xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()Linux
- CVE-2026-98368esp: downgrade zerocopy managed frags before mutating skb fragsLinux
- CVE-2026-98367RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_acceptLinux
- CVE-2026-98366RDMA/rxe: validate access flags before swapping the MR's PDLinux
- CVE-2026-98364xfrm: hold net_device reference under RCU in bundle creationLinux
- CVE-2026-98361RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write pathsLinux
- CVE-2026-98360RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeedsLinux
- CVE-2026-98359RDMA/core: Reject unregistering netdevs in ib_get_eth_speedLinux
- CVE-2026-98357IB/isert: wait for deferred control PDU completions before releasing the connectionLinux
- CVE-2026-98349wifi: libipw: reject too-short beacon and probe responsesLinux
- CVE-2026-98348wifi: libipw: reject too-short association responsesLinux
- CVE-2026-98341wifi: cfg80211: don't free driver-owned scan requestsLinux
- CVE-2026-98339wifi: cfg80211: don't filter by BSS type when removing stale entriesLinux
- CVE-2026-98331wifi: mac80211: unlist vifs when their netdev is unregisteredLinux
- CVE-2026-98330wifi: cfg80211: get the wiphy out of a dying network namespaceLinux
- CVE-2026-98324dmaengine: pxa: fix double counting of the hw descriptorsLinux
- CVE-2026-98320netfilter: flowtable: hold reference on ct until flow is releasedLinux
- CVE-2026-98318smb: client: validate absolute native symlink targets before NT fixupsLinux
- CVE-2026-98315ntfs: protect runlist updates with the runlist lockLinux
- CVE-2026-98311wifi: virt_wifi: don't transfer operstate before registerLinux
- CVE-2026-98305net: dsa: mxl862xx: disable the stats poll on teardownLinux
- CVE-2026-98290Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanupLinux
- CVE-2026-98283KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()Linux
- CVE-2026-98282powerpc/iommu: Fix the overflow validation in iommu_tce_check_iobaLinux
- CVE-2026-98281futex: Also allocate private hash on vfork()Linux
- CVE-2026-98276net: lock the socket in sock_gettstamp()Linux
- CVE-2026-98261cifs: Fix server use-after-free in cifs_chan_skip_or_disable()Linux
- CVE-2026-98260exec: Cleanup POSIX timers right after de_thread()Linux
- CVE-2026-98258posix-cpu-timers: Prevent freeing a timer which is queued on the expiry listLinux
- CVE-2026-98257rds: ib: use rds_conn_drop() on protocol version mismatchLinux
- CVE-2026-98256signal: Prevent exec() raceLinux
- CVE-2026-98254swiotlb: use the adjusted address for the highmem page lookupLinux
- CVE-2026-98253RDMA/ucma: Serialize join and leave on copy_to_user failureLinux
- CVE-2026-98252RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()Linux
- CVE-2026-98251openvswitch: avoid reallocating confirmed conntrack labelsLinux
- CVE-2026-98243dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3Linux
- CVE-2026-98241ipv6: xfrm: use full sockets in local error pathsLinux
- CVE-2026-98239net: lan743x: fix RX checksum use-after-freeLinux
- CVE-2026-98230xfrm: use hlist_del_init_rcu for state_cache and state_cache_inputLinux
- CVE-2026-98229xfrm: save input state data before secpath resetsLinux
- CVE-2026-98228mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQLinux
- CVE-2026-98216IB/hfi1: Fix the PIO_CRED credit-return mmapLinux
- CVE-2026-98197hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on removeLinux
- CVE-2026-98180drm/msm: RCU-free the scheduler-containing ring and VM objectsLinux
- CVE-2026-98175smb: client: cancel reconnect work in clean_demultiplex_info()Linux
- CVE-2026-98174smb: client: fix rlist race and missing initializationLinux
- CVE-2026-98173smb: client: fix use-after-free of iface in cifs_try_adding_channels()Linux
- CVE-2026-98171smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUsLinux
- CVE-2026-98169smb: client: fix potential OOB read in smb3_enum_snapshots()Linux
- CVE-2026-98166drm/ttm: fix swapped-out resources never leaving their bulk_move rangeLinux
- CVE-2026-95105Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flippingdanielberkompas cloak · cloak
- CVE-2026-105317WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerabilityCozmoslabs Paid Member Subscriptions
- CVE-2026-105071WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerabilityRoyal Plugins SiteVault – Backup, Restore, Migration &…
- CVE-2026-105070WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerabilityDimitri Grassi Salon booking system
- CVE-2026-105061WordPress WP Mailster plugin <= 1.9.0.0 - Cross Site Scripting (XSS) vulnerabilityBởi brandtoss WP Mailster
- CVE-2026-105058WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerabilityJohn James Jacoby WP User Profiles
- CVE-2026-104814WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerabilityepiphyt Form Block
- CVE-2026-104757WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerabilityJavier Carazo Import and export users and customers
- CVE-2026-104747WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerabilityEdge-Themes Haaken
- CVE-2026-104672WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityNexcess GiveWP
- CVE-2026-104670WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerabilityThimPress LearnPress
- CVE-2026-104406WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerabilitypicu
- CVE-2026-104405WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerabilityNexcess GiveWP
- CVE-2026-104395WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerabilitypicu
- CVE-2026-104394WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerabilitySyed Balkhi Charitable
- CVE-2026-104387WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerabilityblubrry PowerPress Podcasting
- CVE-2026-104385WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerabilityAdrian Tobey Groundhogg
- CVE-2026-102915WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerabilityMarco van Wieren WPO365
- CVE-2026-102387WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerabilityXserver Migrator
- CVE-2026-95594WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerabilityCozy Vision Technologies Pvt. SMS Alert Order Notifications
- CVE-2026-95526WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerabilityRealMag777 BEAR
- CVE-2026-94675WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Cross Site Scripting (XSS) vulnerabilityFluent Forms Free vs Pro Fluent Forms Pro Add On Pack
- CVE-2026-62072WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerabilityProgress Planner
- CVE-2026-48199WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerabilityBeplusthemes Sermon'e
- CVE-2026-48197WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerabilityPublishPress Capabilities
- CVE-2026-42638WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerabilityAwesomemotive Easy Digital Downloads
- CVE-2026-42636WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerabilityWP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…
- CVE-2026-42635WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerabilitywpgenie WooCommerce Simple Auctions
- CVE-2026-42634WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilitybPlugins Video Background Block – Use video as background i…
- CVE-2026-42418WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerabilitySocialrocket Social Rocket
- CVE-2026-42416WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerabilityAndonDesign UDesign Core
- CVE-2026-42414WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerabilityCridioStudio ListingPro
- CVE-2026-42413WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerabilityDaftPlug Snapshotify – All-in-One Backup & Restor…
- CVE-2026-41562WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilitynorvisgabriel Norvis Backup
- CVE-2026-41561WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerabilityAdrian Lin Museder RestoreOne
- CVE-2026-41560WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerabilitywxdlabs WXD Backup Lite
- CVE-2026-41559WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerabilityPluginjoy SafeSnap – Verified WordPress Backup & Restore
- CVE-2026-40807WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerabilityAman CF7 Views – Complete Entry Management for Contac…
- CVE-2026-40806WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerabilityPlugin Devs Blog, Posts and Category Filter for Elementor
- CVE-2026-39796WordPress Advanced Posts Listing – Show Post List Easily plugin <= 1.0.8 - Broken Access Control vulnerabilityFlipper Code – WordPress Development Company Advanced Posts…
- CVE-2026-39794WordPress WooCommerce Multivendor Marketplace – REST API plugin <= 1.6.3 - Broken Access Control vulnerabilityWC Lovers WooCommerce Multivendor Marketplace – REST API
- CVE-2026-39793WordPress Simple JWT Login plugin 4.0.0 - Broken Authentication vulnerabilityNicu Micle Simple JWT Login
- CVE-2026-39792WordPress Simple File List plugin <= 6.3.11 - Arbitrary File Deletion vulnerabilityMitchell Bennis Simple File List
- CVE-2026-39790WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikRentCar
- CVE-2026-39784WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerabilitynicdark Hotel Booking
- CVE-2026-39781WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerabilityDan Rossiter Document Gallery
- CVE-2026-39780WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityYouzify
- CVE-2026-39778WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilitythemeansar Ansar Import – One Click Starter Sites – for Ele…
- CVE-2026-39776WordPress Tabs plugin <= 2.5 - Remote Code Execution (RCE) vulnerabilitywpshopmart Tabs
- CVE-2026-39775WordPress JobZilla - Job Board WordPress Theme theme <= 2.2 - Privilege Escalation vulnerabilityDexignZone JobZilla - Job Board WordPress Theme
- CVE-2026-39774WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerabilityTourfic AI Studio Tourfic Pro
- CVE-2026-39771WordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerabilityMightyNetworks vs BuddyBoss Buddyboss Platform
- CVE-2026-39769WordPress Graphina plugin <= 3.1.12 - Broken Authentication vulnerabilityIqonic Designs Graphina – Charts and Graphs For Elementor
- CVE-2026-39766WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerabilityreputeinfosystems ARForms
- CVE-2026-39765WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerabilityWebAppick Challan
- CVE-2026-39758WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerabilityMidtrans-WooCommerce
- CVE-2026-39752WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerabilityBlueGlass Interactive AG Jobs for WordPress
- CVE-2026-39751WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerabilityPayPlug for WooCommerce
- CVE-2026-39750WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilityweDevs StoreGrowth: Smart Sales Booster for WooCommerce | B…
- CVE-2026-39748WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeMove EduMall
- CVE-2026-39747WordPress Woffice theme <= 5.4.35 - SQL Injection vulnerabilityWofficeIO Woffice
- CVE-2026-39745WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerabilitybestweblayout Contact Form to DB by BestWebSoft
- CVE-2026-39731WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilitycode4life Database for CF7
- CVE-2026-39730WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerabilityMarcin Wise Chat
- CVE-2026-39729WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerabilityWisdmLabs Edwiser Bridge
- CVE-2026-39728WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerabilityinstapagedev Instapage Plugin
- CVE-2026-39726WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityLumise NEO Lumise Product Designer
- CVE-2026-39724WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerabilityveppa HTTP Requests Manager
- CVE-2026-39722WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerabilityVibeThemes WPLMS
- CVE-2026-39720WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityMapster WP Maps
- CVE-2026-39719WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerabilityDeKnows PDF Smart Viewer for Elementor
- CVE-2026-32581WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerabilitymooberrydreams Mooberry Book Manager
- CVE-2026-32580WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerabilitywpgenie WooCommerce Lottery
- CVE-2026-32578WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerabilitytechsupport ECPay Ecommerce for WooCommerce
- CVE-2026-32577WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerabilityN-Media Frontend File Manager
- CVE-2026-32575WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerabilityFantastic Plugins SUMO Affiliates Pro
- CVE-2026-32574WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerabilityEDGARROJAS Smart Forms
- CVE-2026-32572WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerabilityweDevs WP User Frontend Pro
- CVE-2026-32570WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilityDaftPlug Progressify - Progressive Web App
- CVE-2026-32569WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerabilityJoomunited WP Media folder
- CVE-2026-25434WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerabilityTobias @Saleswonder.biz WP2LEADS
- CVE-2026-25433WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerabilityTobias @Saleswonder.biz WP2LEADS
- CVE-2026-4889SQL Injection (SQLi) in eLoanApp Platform by RDL TechnologiesRDL Technologies eLoanApp Platform
- CVE-2026-103346WordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerabilityTomlister Payflex Payment Gateway
- CVE-2026-59358UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant typeCloud Foundry UAA · Cloud Foundry cf-deployment
- CVE-2026-105701ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email TemplateMauro Cassani ACPT
- CVE-2026-57559Use After Free in DSP_ServicesQualcomm Snapdragon
- CVE-2026-57555Use After Free in DSP ServiceQualcomm Snapdragon
- CVE-2026-57554Use After Free in DSP ServiceQualcomm Snapdragon
- CVE-2026-57546Buffer Over-read in WLAN HALQualcomm Snapdragon
- CVE-2026-57545Untrusted Pointer Dereference in GraphicsQualcomm Snapdragon
- CVE-2026-57537Use After Free in DSP ServiceQualcomm Snapdragon
- CVE-2026-25302Improper Verification of Cryptographic Signature in BootQualcomm Snapdragon
- CVE-2026-25291Use After Free in GraphicsQualcomm Snapdragon
- CVE-2026-25267Missing Authorization in CoreQualcomm Snapdragon
- CVE-2026-75962Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)saadiqbal Post SMTP – Complete Email Delivery and SMTP Solu…
- CVE-2026-41563WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerabilityDawer Drew Sitemovr
- CVE-2026-41558WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerabilityWP Migration Plugin DB & Files – WP Synchro
- CVE-2026-39789WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerabilityWP Manage Ninja Fluent Affiliate Pro
- CVE-2026-39760WordPress Real 3D FlipBook plugin <= 5.5 - Cross Site Scripting (XSS) vulnerabilityCreative interactive media Real 3D FlipBook
- CVE-2026-39723WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerabilityGreen Invoice Morning for WooCommerce
- CVE-2026-105072WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerabilityWP Manage Ninja FluentBooking Pro
- CVE-2025-45871LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated
- CVE-2026-95140kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java.
Medium, low and unrated 547
- CVE-2026-101329Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS
- CVE-2026-106583In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.OpenBSD OpenSSH
- CVE-2026-80048Sssd: sssd-kcm: local denial of service via excessive memory preallocationRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-106508Backstage: Potential file exposure through local TechDocs publisherbackstage · @backstage plugin-techdocs-node +1
- CVE-2026-106507Backstage: TechDocs arbitrary file read via mkdocs snippetsbackstage · @backstage/plugin-techdocs-node plugin-techdocs…
- CVE-2026-106506Backstage: Improper input validation in scaffolder task list orderingbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-106504Backstage: Sensitive information exposure in scaffolder task logsbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-97626Gitea profile feed disclosure bypassing user visibilityGitea
- CVE-2026-96594Gitea repository media API stored XSSGitea
- CVE-2026-89182Gitea push-to-create bypass of FORCE_PRIVATE policyGitea
- CVE-2026-105268Gitea issue attachment API allows changing comment attachmentsGitea
- CVE-2026-104633Gitea migration memory exhaustion from zero page sizeGitea
- CVE-2026-106502Backstage: Sensitive information may be exposed in Scaffolder task failure eventsbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-106499Backstage: Secret-derived values may be exposed in scaffolder task logsbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-106589In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileOpenBSD OpenSSH
- CVE-2026-106497Backstage: Inconsistent catalog property permission evaluationbackstage · @backstage plugin-catalog-backend
- CVE-2026-97208Gitea push mirror API bypass of DISABLE_NEW_PUSH policyGitea
- CVE-2026-106496Backstage: Inconsistent enforcement of allowed location types during catalog processingbackstage · @backstage plugin-catalog-backend +1
- CVE-2026-106588In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpectOpenBSD OpenSSH
- CVE-2026-106587In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean OpenBSD OpenSSH
- CVE-2026-65122NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read.NVIDIA TensorRT
- CVE-2026-106586In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a OpenBSD OpenSSH
- CVE-2026-106494Backstage: Improper input validation in cloud storage URL readersbackstage · @backstage backend-defaults +1
- CVE-2026-106585In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly cOpenBSD OpenSSH
- CVE-2026-106493Backstage: Cloud storage catalog locations may cross configured storage boundariesbackstage · @backstage plugin-catalog-backend-module-azu… +4
- CVE-2026-106584In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling.OpenBSD OpenSSH
- CVE-2026-106491Backstage: Improper input validation in proxy-backendbackstage · @backstage plugin-proxy-backend +1
- CVE-2026-106490Backstage: Improper input validation in TechDocs static content requestsbackstage · @backstage plugin-techdocs-backend +1
- CVE-2026-106489Backstage: Improper authorization enforcement for TechDocs static contentbackstage · @backstage plugin-techdocs-backend +1
- CVE-2026-104045Sssd: sssd: denial of service via race condition in autofs responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-106487Backstage: Unsupported catalog cluster authentication mode in kubernetes backendbackstage · @backstage plugin-kubernetes-backend +1
- CVE-2026-106582In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "CrOpenBSD OpenSSH
- CVE-2026-106032Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent importaws bedrock-agentcore-starter-toolkit
- CVE-2026-106463Backstage: Improper authorization in GitLab organizational user ingestionbackstage · @backstage plugin-catalog-backend-module-git… +1
- CVE-2026-106462Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallbackbackstage · @backstage plugin-scaffolder-backend +11
- CVE-2026-106555In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.OpenBSD OpenSSH
- CVE-2026-106553In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.OpenBSD OpenSSH
- CVE-2026-106461Backstage: Incorrect authorization in scaffolder task listingbackstage · @backstage plugin-scaffolder-backend +1
- CVE-2026-106460Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalizationbackstage · @backstage plugin-auth-node +1
- CVE-2026-106552In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recuOpenBSD OpenSSH
- CVE-2026-106458Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updatesbackstage · @backstage plugin-catalog-backend-module-bit… +1
- CVE-2026-106457Backstage: Insufficient audience validation in the Cloudflare Access auth providerbackstage · @backstage plugin-auth-backend-module-cloudf… +1
- CVE-2026-106456Backstage: Inconsistent credential enforcement for overlapping proxy routesbackstage · @backstage plugin-proxy-backend +1
- CVE-2026-104046Sssd: sssd: denial of service via incomplete identity provider authentication requestsRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-19029HDF5 scale-offset filter heap buffer over-read via crafted chunkThe HDF Group HDF5
- CVE-2026-106454Twisted: IMAP wildcardToRegexp() ReDoStwisted
- CVE-2026-106453yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryErroryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106452yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream headeryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-105244Apache log4net: RemoteSyslogAppender silently deletes non-ASCII contentApache Software Foundation Apache log4net
- CVE-2026-105243Apache log4net: Oversize EventLogAppender record silently discardedApache Software Foundation Apache log4net
- CVE-2026-105242Apache log4net: Request validation failure drops the event in the aspnet-request converterApache Software Foundation Apache log4net
- CVE-2026-105241Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batchApache Software Foundation Apache log4net
- CVE-2026-106450yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputsyawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-105240Apache log4net: NUL character truncates OutputDebugStringAppender recordsApache Software Foundation Apache log4net
- CVE-2026-105239Apache log4net: NUL character truncates EventLogAppender recordsApache Software Foundation Apache log4net
- CVE-2026-106449yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowErroryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-105111Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSSApache Software Foundation Apache Commons BCEL
- CVE-2026-94114Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoningApache Software Foundation Apache Commons BCEL
- CVE-2026-102164Security Advisory 0196Arista Networks Wi-Fi Access Points
- CVE-2026-102169Security Advisory 0194Arista Networks Wi-Fi Access Points
- CVE-2026-102168Security Advisory 0194Arista Networks Wi-Fi Access Points
- CVE-2026-102156Security Advisory 0191Arista Networks CloudVision CUE
- CVE-2026-102158Security Advisory 0190Arista Networks CloudVision CUE
- CVE-2026-102157Security Advisory 0190Arista Networks CloudVision CUE
- CVE-2026-101151Security Advisory 0187Arista Networks CloudVision Portal
- CVE-2026-101150Security Advisory 0186Arista Networks CloudVision Portal
- CVE-2026-101149Security Advisory 0186Arista Networks CloudVision Portal
- CVE-2026-106063Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensionsRed Hat Enterprise Linux
- CVE-2026-104048Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluationRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104047Sssd: sssd: information disclosure via query injection in entra id lookupsRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-103008Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-103006Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-103005Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-102413Uncaught Exception in Elastic Endpoint Leading to Denial of ServiceElastic Agent and Elastic Defend
- CVE-2026-102412Incorrect Authorization in Kibana Leading to Sensitive Information DisclosureElastic Kibana · elk +1
- CVE-2026-102411Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-102410Missing Authorization in Kibana Leading to Information DisclosureElastic Kibana · elk +1
- CVE-2026-102409Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-102408Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-102407Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream ModificationElasticsearch
- CVE-2026-102404Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceElasticsearch
- CVE-2026-96589Gitea private repository access retained after rejected transferGitea
- CVE-2026-96400Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINSGitea
- CVE-2026-95112Gitea issue reference parsing CPU exhaustionGitea
- CVE-2026-76061Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypasscri-o · Red Hat OpenShift Container Platform
- CVE-2026-103667Gitea container registry stored XSS through blob media typeGitea
- CVE-2026-101029Gitea migration and pull mirror SSRF through multi-answer DNSGitea
- CVE-2026-79818Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79817Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client SoftwareHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79816Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client InterfaceHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79815Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard AgentHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79814Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard AgentHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79813Local Privilege Escalation in ClearPass Client SoftwareHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-79812Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy ManagerHewlett Packard Enterprise (HPE) ClearPass Policy Manager
- CVE-2026-76749Unauthenticated Sensitive Information Disclosure in AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-76741Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-SHewlett Packard Enterprise (HPE) AOS-Switch
- CVE-2026-106444Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templateshandlebars-lang handlebars.js · handlebars
- CVE-2026-106513MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration ChangeMISP
- CVE-2026-103620Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQLGitHub Enterprise Server
- CVE-2026-103778Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability.Dell Command | Configure
- CVE-2026-104073NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Linksnetbox-community netbox
- CVE-2026-70414Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability.Dell Command | Configure
- CVE-2026-106355Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-106272UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeGoogle Chrome
- CVE-2026-106345Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-106310Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer prGoogle Chrome
- CVE-2026-106251UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeringGoogle Chrome
- CVE-2026-106236UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeGoogle Chrome
- CVE-2026-106390Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak senGoogle Chrome
- CVE-2026-106325Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leGoogle Chrome
- CVE-2026-106385Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially Google Chrome
- CVE-2026-106316UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeringGoogle Chrome
- CVE-2026-106320Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-106339Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-106413Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spooGoogle Chrome
- CVE-2026-106343Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elementGoogle Chrome
- CVE-2026-106418Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass wGoogle Chrome
- CVE-2026-106305UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crGoogle Chrome
- CVE-2026-106288Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass sGoogle Chrome
- CVE-2026-106270Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a craftGoogle Chrome
- CVE-2026-106331Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bGoogle Chrome
- CVE-2026-106368UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-106179UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted Google Chrome
- CVE-2026-106380UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elemeGoogle Chrome
- CVE-2026-106296Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerinGoogle Chrome
- CVE-2026-106259Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrGoogle Chrome
- CVE-2026-106285UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to byGoogle Chrome
- CVE-2026-106264Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to Google Chrome
- CVE-2026-106399Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially reaGoogle Chrome
- CVE-2026-106192Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via phGoogle Chrome
- CVE-2026-106422Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HGoogle Chrome
- CVE-2026-106299Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-106275Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sanGoogle Chrome
- CVE-2026-106362Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass Google Chrome
- CVE-2026-106260Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak Google Chrome
- CVE-2026-106297Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crGoogle Chrome
- CVE-2026-106287Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network tGoogle Chrome
- CVE-2026-106427Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions iGoogle Chrome
- CVE-2026-106306Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions viGoogle Chrome
- CVE-2026-106394Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-oriGoogle Chrome
- CVE-2026-106187Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-106250Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass sysGoogle Chrome
- CVE-2026-106312Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain seGoogle Chrome
- CVE-2026-106353Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerinGoogle Chrome
- CVE-2026-106359Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin poliGoogle Chrome
- CVE-2026-106344Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-106317UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via Google Chrome
- CVE-2026-106338UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address baGoogle Chrome
- CVE-2026-106276UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UIGoogle Chrome
- CVE-2026-106340Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitiGoogle Chrome
- CVE-2026-106254Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information viGoogle Chrome
- CVE-2026-106210Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a craftedGoogle Chrome
- CVE-2026-106321Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitivGoogle Chrome
- CVE-2026-106384Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer prGoogle Chrome
- CVE-2026-106351Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the rGoogle Chrome
- CVE-2026-106386Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via aGoogle Chrome
- CVE-2026-106183Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive infoGoogle Chrome
- CVE-2026-106404Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-106263Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypasGoogle Chrome
- CVE-2026-106337UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafteGoogle Chrome
- CVE-2026-106295Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-106330Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTMLGoogle Chrome
- CVE-2026-106304Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a craftGoogle Chrome
- CVE-2026-106395Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the saGoogle Chrome
- CVE-2026-106388Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-106398Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HGoogle Chrome
- CVE-2026-106307Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-106348Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted Google Chrome
- CVE-2026-106360Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTMGoogle Chrome
- CVE-2026-106262Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-106336Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTGoogle Chrome
- CVE-2026-106391Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the Google Chrome
- CVE-2026-106232UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI Google Chrome
- CVE-2026-106229UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypassGoogle Chrome
- CVE-2026-106226Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-106230Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromiseGoogle Chrome
- CVE-2026-106213Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a craGoogle Chrome
- CVE-2026-106400Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spGoogle Chrome
- CVE-2026-106328Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering Google Chrome
- CVE-2026-106216Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social Google Chrome
- CVE-2026-106209UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to Google Chrome
- CVE-2026-106284Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-106410Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-106277Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTMLGoogle Chrome
- CVE-2026-106289Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HGoogle Chrome
- CVE-2026-106333Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UIGoogle Chrome
- CVE-2026-106303Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-106180Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin datGoogle Chrome
- CVE-2026-106206Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informatGoogle Chrome
- CVE-2026-106280Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web oriGoogle Chrome
- CVE-2026-106322Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web oGoogle Chrome
- CVE-2026-106405Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via Google Chrome
- CVE-2026-106356Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements viaGoogle Chrome
- CVE-2026-106370Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-106188Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictioGoogle Chrome
- CVE-2026-106392Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a cGoogle Chrome
- CVE-2026-106282UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML pagGoogle Chrome
- CVE-2026-106182UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML pageGoogle Chrome
- CVE-2026-106416Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI eleGoogle Chrome
- CVE-2026-106302UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-106246Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTMLGoogle Chrome
- CVE-2026-106311Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UGoogle Chrome
- CVE-2026-106402Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoGoogle Chrome
- CVE-2026-106361Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveragGoogle Chrome
- CVE-2026-106253Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crGoogle Chrome
- CVE-2026-106424Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to readGoogle Chrome
- CVE-2026-106354Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via aGoogle Chrome
- CVE-2026-106326Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions inGoogle Chrome
- CVE-2026-106290Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-106406Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-106261Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crGoogle Chrome
- CVE-2026-106408Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin poliGoogle Chrome
- CVE-2026-106397Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering Google Chrome
- CVE-2026-106389Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass sysGoogle Chrome
- CVE-2026-106407Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-106244Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictionGoogle Chrome
- CVE-2026-106185Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-106224Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-106415Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a craftedGoogle Chrome
- CVE-2026-106266Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-106425Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-106217Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-106381Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policyGoogle Chrome
- CVE-2026-106242Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering toGoogle Chrome
- CVE-2026-106223Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sanGoogle Chrome
- CVE-2026-106300Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-106313Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineerGoogle Chrome
- CVE-2026-106267Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-106365Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a craftGoogle Chrome
- CVE-2026-106181Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-106286Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted networkGoogle Chrome
- CVE-2026-106208Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitiGoogle Chrome
- CVE-2026-106222Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafteGoogle Chrome
- CVE-2026-106420Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering tGoogle Chrome
- CVE-2026-106324Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system aGoogle Chrome
- CVE-2026-106265UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI eleGoogle Chrome
- CVE-2026-106184Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Google Chrome
- CVE-2026-104945Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500TP-Link Systems Tapo C500
- CVE-2026-106379Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HGoogle Chrome
- CVE-2026-106332Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Google Chrome
- CVE-2026-106273Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2026-106202Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sGoogle Chrome
- CVE-2026-106231Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandboGoogle Chrome
- CVE-2026-106396Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social enginGoogle Chrome
- CVE-2026-106364Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-106214Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive informationGoogle Chrome
- CVE-2026-106243Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crGoogle Chrome
- CVE-2026-106369Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-106215Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sGoogle Chrome
- CVE-2026-106376Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sGoogle Chrome
- CVE-2026-106258Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sGoogle Chrome
- CVE-2026-106366Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policyGoogle Chrome
- CVE-2026-106245Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Google Chrome
- CVE-2026-56952In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-56936In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-55307In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2026-0198In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-105485Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a uDevolutions Server
- CVE-2026-106033Ansible: ansible-ui: ansible ui dom xss in /redirect next parameterRed Hat Ansible Automation Platform · Red Hat Hardened Imag…
- CVE-2026-9226Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take overDevolutions Server
- CVE-2026-106123RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()rabbitmq-java-client · com.rabbitmq amqp-client +1
- CVE-2026-106122RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumersrabbitmq-java-client · com.rabbitmq amqp-client +1
- CVE-2026-106121RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoSrabbitmq-java-client · com.rabbitmq amqp-client +1
- CVE-2026-106120LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iterationharttle liquidjs · liquidjs
- CVE-2026-106119LangChain: MongoDBChatMessageHistory query injection can allow cross-session accesslangchain-ai langchainjs · @langchain mongodb +1
- CVE-2026-106116ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loopSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-88252Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustionRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-106114ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensionsSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-66666WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerabilityAutomattic WordPress
- CVE-2026-106111ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflateSixLabors ImageSharp · SixLabors.ImageSharp
- CVE-2026-106109Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directoriesquasarframework quasar · @quasar app-vite +1
- CVE-2026-106101Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Servicequasarframework quasar · quasar
- CVE-2026-105866Payload: Unauthenticated account-lockout denial of servicepayloadcms payload · payload
- CVE-2026-105864Payload: Cross-tenant create in @payloadcms/plugin-multi-tenantpayloadcms payload · @payloadcms plugin-multi-tenant +1
- CVE-2026-106219In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the serverJetBrains TeamCity
- CVE-2026-105852Payload relationship-query authorization bypasspayloadcms payload · payload
- CVE-2026-105848Payload: Insufficient Access Control in Stripe REST Proxypayloadcms payload · @payloadcms plugin-stripe +1
- CVE-2026-105846Payload: Untrusted redirect URL parameter exploitpayloadcms payload · @payloadcms next +2
- CVE-2026-105957SourceCodester Performance Indicator System view_product.php sql injectionSourceCodester Performance Indicator System
- CVE-2026-105950getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scriptinggetformwork formwork
- CVE-2026-63690Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csiDell Container Storage Modules
- CVE-2026-63691Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMDell Container Storage Modules
- CVE-2026-105805Payload: Sort queries could expose protected field informationpayloadcms payload · payload
- CVE-2026-105804Payload: Password hashes use insufficient PBKDF2 iterationspayloadcms payload · payload
- CVE-2026-63689Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability.Dell Container Storage Modules
- CVE-2025-8352Denial-of-service vulnerability in ESET PROTECT On-PremESET spol. s.r.o ESET PROTECT On-Prem
- CVE-2026-105800i18next-http-backend incomplete URL validation permits SSRFi18next-http-backend
- CVE-2026-105799LangChain: RediSearch Filter Injection via Unescaped Tag/Text Valueslangchain-ai langchainjs · @langchain redis +1
- CVE-2026-105922vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of servicevllm-project vLLM · vllm
- CVE-2026-105795Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsmicrosoft kiota · Microsoft.OpenApi.Kiota +1
- CVE-2026-105921Kusalkasilva Learning-Management-System search_class.php sql injectionKusalkasilva Learning-Management-System
- CVE-2026-105792Microsoft UFO: Authenticated task-result request can deadlock UFO server session managermicrosoft UFO
- CVE-2026-105790Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinning via redirectsmicrosoft UFO
- CVE-2026-105789Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` toolmicrosoft UFO
- CVE-2026-106041Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPCkvcache-ai Mooncake
- CVE-2026-106039Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPCkvcache-ai Mooncake
- CVE-2026-34498L4LJohnson Controls Illustra Standard - L4L China
- CVE-2026-87975Privilege abuse in model formsets with editable primary keysdjangoproject Django
- CVE-2026-106026tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump RuleH. Peter Anvin tftp-hpa
- CVE-2026-105842lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() PathnameUwe Ohse lrzsz
- CVE-2026-105838libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loadersezero libmikmod
- CVE-2026-87890Potential request forgery via spatial lookup byte valuesdjangoproject Django
- CVE-2026-84429Potential denial-of-service vulnerability in HTTP header parsingdjangoproject Django
- CVE-2026-77050Potential denial-of-service vulnerability in get_supported_language_variant()djangoproject Django
- CVE-2026-82924PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert MailPusula Communication, IT, and Internet Industry and Trade C…
- CVE-2026-105920Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injectionKusalkasilva Learning-Management-System
- CVE-2025-15591Cross-Site Scripting (XSS) vulnerability identified in OpenText™ Content ManagementOpenText Content Management
- CVE-2026-12380Reflected XSS in Akıllı Ticaret's E-Commerce PackAkıllı Ticaret Software Technologies Ltd. E-Commerce Pack
- CVE-2026-105919Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injectionKusalkasilva Learning-Management-System
- CVE-2026-105836QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRoomsWebkul QloApps
- CVE-2026-56596HCL BigFix Service Management is affected by multiple security vulnerabilities.HCL Software HCL BigFix Service Management
- CVE-2026-105918Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injectionKusalkasilva Learning-Management-System
- CVE-2026-75820Integer Truncation Leading to Heap Corruption in GNU AspellGNU Aspell
- CVE-2026-75819Out-of-bounds Read in GNU AspellGNU Aspell
- CVE-2026-75818Heap Buffer Overflow in GNU Aspell's prezip utilityGNU Aspell
- CVE-2026-80327Open Redirect in PingGateway Fragment FilterPing Identity PingGateway
- CVE-2026-98372xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()Linux
- CVE-2026-98371xfrm: iptfs: fix runt reassembly panic from short inner tot_lenLinux
- CVE-2026-98370xfrm: fix compat ALLOCSPI request use-after-freeLinux
- CVE-2026-98363firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPSLinux
- CVE-2026-98362clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rateLinux
- CVE-2026-98358IB/iser: reject a remote invalidation of an unregistered directionLinux
- CVE-2026-98356RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setupLinux
- CVE-2026-98355RDMA/rtrs: guard against null kobj nameLinux
- CVE-2026-98354RDMA/mad: Fix receive buffer leak when PKey enforcement failsLinux
- CVE-2026-98353RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tablesLinux
- CVE-2026-98352RDMA/rtrs-clt: Fix CQ pool leak when connect is interruptedLinux
- CVE-2026-98351wifi: virt_wifi: free skb when disconnectedLinux
- CVE-2026-98350wifi: brcmfmac: cyw: pass PMKID to firmware if presentLinux
- CVE-2026-98347IB/IPoIB: Avoid restoring OPER_UP after multicast flushLinux
- CVE-2026-98346wifi: cfg80211: don't get the radio mask for netdev-less wdevsLinux
- CVE-2026-98345wifi: cfg80211: check IP header size in cfg80211_classify8021d()Linux
- CVE-2026-98344dmaengine: Fix device kref underflow in dma_chan_put()Linux
- CVE-2026-98343dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()Linux
- CVE-2026-98342dmaengine: wait for RCU readers before releasing dma_deviceLinux
- CVE-2026-98340wifi: cfg80211: only group hidden BSSes with beacon entriesLinux
- CVE-2026-98338wifi: cfg80211: ibss: ref BSS entry for joined eventLinux
- CVE-2026-98337wifi: mac80211: don't start a ROC while scanningLinux
- CVE-2026-98336wifi: mac80211: don't offload TC setup on AP_VLAN interfacesLinux
- CVE-2026-98335wifi: mac80211: abort chanswitch when leaving a meshLinux
- CVE-2026-98334wifi: mac80211: reset state when starting AP failsLinux
- CVE-2026-98333wifi: mac80211: reset the LED state when ifup failsLinux
- CVE-2026-98332wifi: mac80211: only operate on TDLS peers in the TDLS codeLinux
- CVE-2026-98329wifi: mac80211: don't allow injecting frames wider than the chanctxLinux
- CVE-2026-98328wifi: mac80211: add HE 6 GHz capability in the scan elems lenLinux
- CVE-2026-98327wifi: mac80211: mesh: reset the CSA state when leavingLinux
- CVE-2026-98326wifi: mac80211: mesh: release the channel if start failsLinux
- CVE-2026-98325wifi: mac80211: set up the TX info early to fix failure pathsLinux
- CVE-2026-98322netfilter: nft_nat: fully initialise new_addr in netmap setupLinux
- CVE-2026-98321netfilter: nf_nat: unregister and release hooks on errorLinux
- CVE-2026-98319drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptrLinux
- CVE-2026-98317neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.Linux
- CVE-2026-98316ALSA: bcd2000: Fix race between rawmidi and disconnectLinux
- CVE-2026-98314ALSA: pcm: set timer->private_data before registering the PCM timerLinux
- CVE-2026-98313drm/msm/dp: skip PUSH_IDLE when the link was never enabledLinux
- CVE-2026-98312ALSA: 6fire: fix OOB write from device-reported iso lengthLinux
- CVE-2026-98310drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memoryLinux
- CVE-2026-98309drm/vc4: Use managed KMS polling to fix UAF on unbindLinux
- CVE-2026-98308ALSA: hda: trace PCM open only after assigning a streamLinux
- CVE-2026-98307wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()Linux
- CVE-2026-98306seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulationLinux
- CVE-2026-98304net: bcmgenet: restore the hardware filters on openLinux
- CVE-2026-98303ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookupLinux
- CVE-2026-98302net: fddi: skfp: fix NULL deref when setting the MAC address while downLinux
- CVE-2026-98301net: bridge: mst: move switchdev call outside rcuLinux
- CVE-2026-98300tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().Linux
- CVE-2026-98299tcp: do not let tcp_rmem be set below 4096Linux
- CVE-2026-98298dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()Linux
- CVE-2026-98297Bluetooth: hci_core: Fix queuing tx_work after workqueue is drainedLinux
- CVE-2026-98296Bluetooth: btintel_pcie: validate TX skb length in send_syncLinux
- CVE-2026-98295Bluetooth: coredump: Quiesce dump work on unregisterLinux
- CVE-2026-98294Bluetooth: hci_qca: Do not write to the serial port after it is closedLinux
- CVE-2026-98293Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()Linux
- CVE-2026-98292Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct accessLinux
- CVE-2026-98291Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submitLinux
- CVE-2026-98289af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().Linux
- CVE-2026-98288net: stmmac: fix TSO header length truncationLinux
- CVE-2026-98287pppoatm: ensure a writable skb header and linear dataLinux
- CVE-2026-98286drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardownLinux
- CVE-2026-98285net: bridge: vlan: fix bugs caused by switchdev deletion errorsLinux
- CVE-2026-98284netlink: do not free nlk->groups while lockless readers can use itLinux
- CVE-2026-98280drm/xe/i2c: Disable IRQ on unbindLinux
- CVE-2026-98279btrfs: handle lack of space when cleaning up verity itemsLinux
- CVE-2026-98278net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop checkLinux
- CVE-2026-98277eth: fbnic: ring the doorbell if a burst ends in a dropLinux
- CVE-2026-98275net: ethernet: cortina: Ack RX overrun interrupt correctlyLinux
- CVE-2026-98274net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()Linux
- CVE-2026-98273x86/kprobes: Fix crash when probing CS CALL instructionsLinux
- CVE-2026-98272net: mvpp2: prevent buffer overflow in page_pool allocationLinux
- CVE-2026-98271net: skbuff: do not leave stale header offsets after pskb_carve()Linux
- CVE-2026-98270drm/amdgpu: check ras and obj before dereferenceLinux
- CVE-2026-98269btrfs: abort transaction on failure to update inode for hole punching and reflinkingLinux
- CVE-2026-98268perf: Fix null pointer access in is_include_guest_event()Linux
- CVE-2026-982679p: Fix v9fs_issue_write() to update i_size and remote_i_sizeLinux
- CVE-2026-98266ALSA: core: Fix potential UAF after asynchronous card releaseLinux
- CVE-2026-98265ALSA: usb-audio: Clamp implicit feedback packet count to URB capacityLinux
- CVE-2026-98264ALSA: virtio: reset device before deleting virtqueuesLinux
- CVE-2026-98263ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->typeLinux
- CVE-2026-98262ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLYLinux
- CVE-2026-98259fs/dax: check zero or empty entry before converting xarray entryLinux
- CVE-2026-98255tcp: exclude old ACKs from tcp fast pathLinux
- CVE-2026-98250nfsd: fix handling of NFSEXP_PNFS in the netlink codepathLinux
- CVE-2026-98249arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvcLinux
- CVE-2026-98248arm64: percpu: Fix LSE operations on {8,16}-bit typesLinux
- CVE-2026-98247Bluetooth: hci_codec: validate vendor codec count lengthLinux
- CVE-2026-98246Bluetooth: hci_sync: Serialize local codec list cleanupLinux
- CVE-2026-98245btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()Linux
- CVE-2026-98244btrfs: clear free space tree creation state on rebuild failureLinux
- CVE-2026-98242dma-buf: Fix silent overflow for phys vec to sgtLinux
- CVE-2026-98240net: ip_tunnel: initialize `options_len` before referencing optionsLinux
- CVE-2026-98238net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()Linux
- CVE-2026-98237net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chainLinux
- CVE-2026-98236net: wwan: mhi_wwan_mbim: check skb_copy_bits() return valueLinux
- CVE-2026-98235net/sched: act_api: release tail references on DELACTION failureLinux
- CVE-2026-98234net/sched: hhf: cap hh_flows_limit at change timeLinux
- CVE-2026-98233net/packet: clear RX owner on VNET header errorLinux
- CVE-2026-98232scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()Linux
- CVE-2026-98231xfrm: serialize state GC with device state flushLinux
- CVE-2026-98227memstick: ms_block: destroy io_queue workqueue on removalLinux
- CVE-2026-98226mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage countLinux
- CVE-2026-98225mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmemLinux
- CVE-2026-98224mm/vma: correctly unaccount on mmap_prepare() failureLinux
- CVE-2026-98223mm: filemap: retain mapped dropbehind foliosLinux
- CVE-2026-98222KEYS: encrypted: fix integer overflow of datablob_lenLinux
- CVE-2026-98221KEYS: trusted: Fix tpm2_load_cmd() boundary checkLinux
- CVE-2026-98220sched_ext: Fix NULL sched deref in kfunc sub-sched error pathsLinux
- CVE-2026-98219sched_ext: Close the pre-enable ops error claim windowLinux
- CVE-2026-98218i2c: atr: fix dangling adapter pointer on add failureLinux
- CVE-2026-98217IB/mlx4: Fix use-after-free on pkey sysfs registration failureLinux
- CVE-2026-98215selinux: preserve user SID across nested backing filesLinux
- CVE-2026-98214selinux: recheck intermediate backing files on mprotect()Linux
- CVE-2026-98213mmc: core: Cancel SDIO IRQ work before freeing hostLinux
- CVE-2026-98212mmc: hsq: Fix use-after-free in retry workLinux
- CVE-2026-98211mmc: mmci: Fix use-after-free in busy-timeout workLinux
- CVE-2026-98210mmc: mxcmmc: cancel data work and watchdog on removeLinux
- CVE-2026-98209mmc: sdhci-of-aspeed: Remove children before releasing SDC resourcesLinux
- CVE-2026-98208mmc: sdio_uart: fix xmit_fifo leak when the port table is fullLinux
- CVE-2026-98207mmc: spi: reset bytes_xfered before retrying CRC failuresLinux
- CVE-2026-98206Input: cyttsp5 - clamp the HID report size before memcpyLinux
- CVE-2026-98205Input: evdev - zero absinfo before partial copy in EVIOCSABSLinux
- CVE-2026-98204Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()Linux
- CVE-2026-98203Input: soc_button_array - check btns_desc->package.countLinux
- CVE-2026-98202Input: synaptics-rmi4 - fix GPF in suspend and resume when unboundLinux
- CVE-2026-98201Input: zero ff_effect before compat copy in input_ff_effect_from_userLinux
- CVE-2026-98200hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()Linux
- CVE-2026-98199hwmon: (pmbus/core) increase number of phases and add new maskLinux
- CVE-2026-98198hwmon: (pwm-fan) Stop RPM timer before freeing tach dataLinux
- CVE-2026-98196wifi: brcmsmac: fix UAF in brcms_free_timer()Linux
- CVE-2026-98195wifi: iwlegacy: fix broadcast stations deallocationLinux
- CVE-2026-98194wifi: libertas_tf: fix UAF in lbtf_free_adapter()Linux
- CVE-2026-98193wifi: libipw: reject TKIP frames without a full MICLinux
- CVE-2026-98192wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardownLinux
- CVE-2026-98191wifi: wlcore: release runtime PM ref on regdomain config failureLinux
- CVE-2026-98190wifi: wilc1000: fix out-of-bounds read in P2P public action framesLinux
- CVE-2026-98189wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()Linux
- CVE-2026-98188wifi: p54: validate curve data length in the calibration curve convertersLinux
- CVE-2026-98187wifi: p54: require a full exp_if record in PDR_INTERFACE_LISTLinux
- CVE-2026-98186wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE lengthLinux
- CVE-2026-98185wifi: mwifiex: validate scan response extentsLinux
- CVE-2026-98184wifi: mwifiex: prevent authentication frame length truncationLinux
- CVE-2026-98183wifi: mac80211: avoid out-of-bounds read for empty PREQ elementsLinux
- CVE-2026-98182wifi: mac80211: refuse to make a monitor active when it has no queueLinux
- CVE-2026-98181drm/gud: fix out-of-bounds write in gud_plane_atomic_check()Linux
- CVE-2026-98179drm/amdgpu: fix rmmio iounmap skipped on device removalLinux
- CVE-2026-98178drm/amdgpu: Skip KFD mapping clear before initializationLinux
- CVE-2026-98177drm/amdkfd: Avoid integer underflow in EOP ring size calculation.Linux
- CVE-2026-98176drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calcLinux
- CVE-2026-98172smb: client: fix smbd_connection leak on cifs_get_tcp_session() errorLinux
- CVE-2026-98170smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()Linux
- CVE-2026-98168smb: client: fix reparse buffer bounds in cifs_query_reparse_point()Linux
- CVE-2026-98167smb: client: fix server->total_read for compound encrypted PDUsLinux
- CVE-2026-104399WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerabilityStylemixThemes Motors
- CVE-2026-94206Cloak PBKDF2 field ignores the configured iteration count and runs only :size roundsdanielberkompas cloak_ecto · danielberkompas cloak +2
- CVE-2026-105059WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerabilityroyalnavneet Delete All Comments of wordpress
- CVE-2026-105057WordPress Zero Spam plugin <= 5.7.11 - Bypass vulnerability vulnerabilityBen Marshall Zero Spam
- CVE-2026-100518WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerabilityWebFactory Advanced Google reCAPTCHA
- CVE-2026-97308WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerabilityWebFactory Login Lockdown
- CVE-2026-42637WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerabilityPayPlug for WooCommerce
- CVE-2026-39798WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerabilityThemetechMount TrueBooker
- CVE-2026-39791WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerabilityMailjet Email Marketing
- CVE-2026-39788WordPress Front End PM plugin <= 11.4.6 - Cross Site Scripting (XSS) vulnerabilityShamim Hasan Front End PM
- CVE-2026-39787WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability10Web Social Photo Feed
- CVE-2026-39772WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerabilityCaptcha by BestWebSoft
- CVE-2026-39767WordPress WPBase Cache plugin <= 5.5.6 - Denial of Service Attack vulnerabilitybaseapp WPBase Cache
- CVE-2026-39762WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.17.1 - Broken Access Control vulnerabilityPatterns In The Cloud Autoship Cloud for WooCommerce Subscr…
- CVE-2026-39756WordPress Wappointment plugin <= 2.7.7 - Insecure Direct Object References (IDOR) vulnerabilityWappointment team Wappointment
- CVE-2026-39754WordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Arbitrary File Download vulnerabilityAbout Piotnet Piotnet Addons For Elementor
- CVE-2026-39749WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerabilitydigitalpoint App for Cloudflare®
- CVE-2026-39727WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerabilitySaravana Kumar K WC Fields Factory
- CVE-2026-32571WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerabilityColabrio Ohio Extra
- CVE-2026-105809SourceCodester Simple Student Information System Profile Field register.php cross site scriptingSourceCodester Simple Student Information System
- CVE-2026-105879WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
- CVE-2026-105808SourceCodester Simple Student Information System searchresults.php clean cross site scriptingSourceCodester Simple Student Information System
- CVE-2026-105305Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcementRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-105807SourceCodester Simple Student Information System searchquery.php sql injectionSourceCodester Simple Student Information System
- CVE-2026-59357Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessionsCloud Foundry UAA · Cloud Foundry cf-deployment
- CVE-2026-25274Use After Free in Windows WLAN HostQualcomm Snapdragon
- CVE-2026-25273Out-of-bounds Write in Camera DriverQualcomm Snapdragon
- CVE-2026-25272Out-of-bounds Write in Camera DriverQualcomm Snapdragon
- CVE-2026-25270Out-of-bounds Write in Camera DriverQualcomm Snapdragon
- CVE-2026-25269Out-of-bounds Write in Camera DriverQualcomm Snapdragon
- CVE-2026-25263Out of Bounds write in Linux CameraQualcomm Snapdragon
- CVE-2026-86786Slider Pro <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro_multiple_imagesSlider Pro
- CVE-2026-94278File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compatFile Media Renamer
- CVE-2026-89289Fast Courier <= 5.2.3 - Unauthenticated Order Fulfillment Update via order-status-update REST EndpointFast Courier
- CVE-2026-94299elegro Crypto Payment <= 1.0.1 - Unauthenticated Arbitrary Order Status Change via IPN Callbackelegro Crypto Payment
- CVE-2026-94271Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Confirmation Forgery via Unverified Success ReturnDeema Payment Gateway
- CVE-2026-94270Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via WebhookDeema Payment Gateway
- CVE-2026-105776bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injectionbhagya3929 Employee-Movement-Tracking-and-Monitoring-Websit…
- CVE-2026-105775vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-boundsvllm-project vLLM
- CVE-2026-105708imgproxy SVG svg.go sanitizeElement cross site scriptingimgproxy
- CVE-2026-97300WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerabilityArraytics WP Event Solution
- CVE-2026-39599WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerabilitywallstrdev WDS MCP Content Manager
- CVE-2026-32582WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerabilityiatoai IATO MCP
- CVE-2026-32576WordPress Faktur Pro for WooCommerce plugin <= 3.2.2 - Insecure Direct Object References (IDOR) vulnerabilityZWEISCHNEIDER Faktur Pro for WooCommerce
- CVE-2026-105707uptrace user_handler.go Login information exposureuptrace
- CVE-2026-105706SourceCodester Drug Recommendation System cross-site request forgerySourceCodester Drug Recommendation System
- CVE-2026-105705SourceCodester Drug Recommendation System add_drug.php cross site scriptingSourceCodester Drug Recommendation System
- CVE-2026-105704SourceCodester Drug Recommendation System Auth Guard improper authenticationSourceCodester Drug Recommendation System
- CVE-2026-105703PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorizationPHPGurukul User Registration & Login and User Management Sy…
- CVE-2026-105621jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorizationjishenghua jshERP
- CVE-2026-105611chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorizationchillzhuang SpringBlade
- CVE-2026-105610chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorizationchillzhuang SpringBlade
- CVE-2026-105573newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic errornewbee-ltd newbee-mall
- CVE-2026-105572PickMall Lilishop Buyer Invoice List receipt authorizationPickMall Lilishop
- CVE-2026-105571PickMall Lilishop Mobile Binding bindMobile improper authorizationPickMall Lilishop
- CVE-2026-105487yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injectionyogeshojha reNgine
- CVE-2026-105486OSSRS srs System API api.go systemAPI.Run missing authenticationOSSRS srs
- CVE-2026-104380Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_onePunk
- CVE-2026-104044Sssd: sssd: denial of service via crafted passkey kerberos authentication requestRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104043Sssd: sssd: denial of service via undersized packet parsing in nss responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104042Sssd: sssd: denial of service via out-of-bounds read in pam responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104041Sssd: sssd: denial of service via unbounded negative cache growthRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104040Sssd: sssd: information disclosure via odata injection in entra id lookupsRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104039Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-105472girishsaraf Online-Appointment-Booking-System Booking book.php sql injectiongirishsaraf Online-Appointment-Booking-System
- CVE-2026-104038Sssd: sssd: denial of service via missing sid extension in certificate mappingRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104037Sssd: sssd: denial of service via packet length underflow in autofs responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-92821Sssd: sssd: access control bypass via premature ldap access rule evaluationRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104036Sssd: sssd: denial of service via out-of-bounds write in nfs idmap pluginRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104035Sssd: sssd: denial of service via memory exhaustion in kcm responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104034Sssd: sssd: denial of service via use-after-free in kcm ticket renewalRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104033Sssd: sssd: access control bypass via improper ldap shadow expiration checkRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidationRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-104031Sssd: sssd: denial of service via memory exhaustion in autofs responderRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2025-71384Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer
- CVE-2026-95153An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-dr