CVE-2026-68263 - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double cal

CVE-2026-68262 - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array

CVE-2026-68261 - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error chec

CVE-2026-68260 - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx

CVE-2026-68259 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in all

CVE-2026-68258 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRI

CVE-2026-68257 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow

CVE-2026-68256 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detect_link_an

CVE-2026-68255 - In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block re

CVE-2026-68254 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min

CVE-2026-68253 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[]

CVE-2026-68252 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUG

CVE-2026-68251 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUG

CVE-2026-68250 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUG

CVE-2026-68249 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUG

CVE-2026-68248 - In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error

CVE-2026-68247 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP

CVE-2026-68246 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUG_O

CVE-2026-68245 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue

CVE-2026-68244 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak sibli

CVE-2026-68243 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in

CVE-2026-68242 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on

CVE-2026-68241 - In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI

CVE-2026-68240 - In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap ea

CVE-2026-68239 - In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and h

CVE-2026-68238 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI t

CVE-2026-68237 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinit

CVE-2026-68236 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream

CVE-2026-68235 - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip n

CVE-2026-68234 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo->pin leaking

CVE-2026-68233 - In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache tim

CVE-2026-68232 - In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference le

CVE-2026-68231 - In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued bu

CVE-2026-68230 - In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validati

CVE-2026-68229 - In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.2

CVE-2026-68228 - In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move

CVE-2026-68227 - In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres life

CVE-2026-68226 - In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap ret

CVE-2026-68225 - In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critica

CVE-2026-68224 - In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible E

CVE-2026-68223 - In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory

CVE-2026-68222 - In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued b

CVE-2026-68221 - In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix

CVE-2026-68220 - In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missi

CVE-2026-68219 - In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix poten

CVE-2026-68218 - In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free alloca

CVE-2026-68217 - In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fill_buf on s

CVE-2026-68216 - In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffe

CVE-2026-68215 - In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister

CVE-2026-68214 - In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-f

CVE-2026-68213 - In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queu

CVE-2026-68212 - In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible

CVE-2026-68211 - In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return que

CVE-2026-68210 - In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister

CVE-2026-68209 - In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued

CVE-2026-68208 - In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error c

CVE-2026-68207 - In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 dev

CVE-2026-68206 - In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEV

CVE-2026-68205 - In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev

CVE-2026-68204 - In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_

CVE-2026-68203 - In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs

CVE-2026-68202 - In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened qu

CVE-2026-68201 - In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's ca

CVE-2026-68200 - In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an

CVE-2026-68199 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access fr

CVE-2026-68198 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-fre

CVE-2026-68197 - In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL derefer

CVE-2026-68196 - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc

CVE-2026-68195 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRX_N

CVE-2026-68194 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_N

CVE-2026-68193 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_N

CVE-2026-68192 - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make release_sc

CVE-2026-68191 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer

CVE-2026-68190 - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB rea

CVE-2026-68189 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UU

CVE-2026-68188 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session

CVE-2026-68187 - In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter

CVE-2026-68186 - In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: set have_execfd on

CVE-2026-68185 - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jump_label_init

CVE-2026-68184 - In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds

CVE-2026-68183 - In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix me

CVE-2026-68182 - In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_parport: deal wi

CVE-2026-68181 - In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device und

CVE-2026-68180 - In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device

CVE-2026-68179 - In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev

CVE-2026-68178 - In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while

CVE-2026-68177 - In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count

CVE-2026-68176 - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible

CVE-2026-68175 - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on m

CVE-2026-68174 - In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of

CVE-2026-68173 - In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready()

CVE-2026-68172 - In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handl

CVE-2026-68171 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-68170 - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk refere

CVE-2026-68169 - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-a

CVE-2026-68168 - In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove()

CVE-2026-68167 - In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression f

CVE-2026-68166 - In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registrati

CVE-2026-68165 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges

CVE-2026-68164 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlap

CVE-2026-68163 - In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-

CVE-2026-68162 - In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl

CVE-2026-68161 - In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets

CVE-2026-68160 - In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bound

CVE-2026-68159 - In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,u

CVE-2026-68158 - In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication ove

CVE-2026-68157 - In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH ty

CVE-2026-68156 - In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authoriz

CVE-2026-68155 - In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps adverti

CVE-2026-68154 - In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket typ

CVE-2026-68153 - In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files b

CVE-2026-68152 - In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT

CVE-2026-68151 - In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour t

CVE-2026-68150 - In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw do

CVE-2026-68149 - In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE sta

CVE-2026-68148 - In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock

CVE-2026-68147 - In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocati

CVE-2026-68146 - In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to ser

CVE-2026-68145 - In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap

CVE-2026-68144 - In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free

CVE-2026-68143 - In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive ag

CVE-2026-68142 - In the Linux kernel, the following vulnerability has been resolved: geneve: require CAP_NET_ADMIN i

CVE-2026-68141 - In the Linux kernel, the following vulnerability has been resolved: net/af_iucv: fix NULL deref in

CVE-2026-68140 - In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of

CVE-2026-68139 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom fo

CVE-2026-68138 - In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab

CVE-2026-68137 - In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in

CVE-2026-68136 - In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregatio

CVE-2026-68135 - In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak

CVE-2026-68134 - In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing faci

CVE-2026-68133 - In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during

CVE-2026-68132 - In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadl

CVE-2026-68131 - In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result code

CVE-2026-68130 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_s

CVE-2026-68129 - In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on allo

CVE-2026-68128 - In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype

CVE-2026-68127 - In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after p

CVE-2026-68126 - In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface re

CVE-2026-68125 - In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames

CVE-2026-68124 - In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-lengt

CVE-2026-68123 - In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace

CVE-2026-68122 - In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in

CVE-2026-68121 - In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer af

CVE-2026-68120 - In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang c

CVE-2026-68119 - In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-

CVE-2026-68118 - In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exac

CVE-2026-68117 - In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the fai

CVE-2026-68116 - In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list cor

CVE-2026-68115 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_O

CVE-2026-68114 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG

CVE-2026-68113 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_O

CVE-2026-68112 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BU

CVE-2026-68111 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON

CVE-2026-68110 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace B

CVE-2026-68109 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG

CVE-2026-68108 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer ove

CVE-2026-68107 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereadin

CVE-2026-68106 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zer

CVE-2026-68105 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic du

CVE-2026-68104 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pm_genpd_rem

CVE-2026-68103 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a re

CVE-2026-68102 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mappin

CVE-2026-68101 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-68100 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth whe

CVE-2026-68099 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on che

CVE-2026-68098 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to

CVE-2026-68097 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size agains

CVE-2026-68096 - In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking de

CVE-2026-68095 - In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between re

CVE-2026-68094 - In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking

CVE-2026-68093 - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation

CVE-2026-59233 - Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.

CVE-2026-59090 - A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow

CVE-2026-19429 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-19278 - A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange. When an a

CVE-2026-18370 - entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a

CVE-2026-13206 - Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi

CVE-2026-12984 - Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedde

CVE-2026-68092 - In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies

CVE-2026-68091 - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after

CVE-2026-68090 - In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against

CVE-2026-68089 - In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized da

CVE-2026-68088 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: a

CVE-2026-68087 - In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in w

CVE-2026-68086 - In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty

CVE-2026-68085 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_

CVE-2026-68084 - In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location

CVE-2026-68083 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in k

CVE-2026-64941 - URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_v

CVE-2026-59088 - A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin wh

CVE-2026-72594 - A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-

CVE-2026-72593 - A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated rem

CVE-2026-72592 - An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated

CVE-2026-72591 - A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenti

CVE-2026-72590 - An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthentic

CVE-2026-72589 - An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthentic

CVE-2026-72588 - A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated

CVE-2026-72587 - A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remot

CVE-2026-72586 - A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated re

CVE-2026-72585 - Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid.

CVE-2026-72584 - A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthen

CVE-2026-72583 - A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privile

CVE-2026-72582 - A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated rem

CVE-2026-72581 - A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allo

CVE-2026-72580 - An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote a

CVE-2026-72579 - An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attack

CVE-2026-72578 - A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticate

CVE-2026-72577 - Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker t

CVE-2026-72576 - A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authe

CVE-2026-72575 - An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote att

CVE-2026-72574 - A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote

CVE-2026-72573 - An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remot

CVE-2026-72572 - A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attac

CVE-2026-72571 - A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticat

CVE-2026-72570 - A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows

CVE-2026-72569 - A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated

CVE-2026-72568 - Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid.

CVE-2026-72567 - An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows

CVE-2026-72566 - A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a lo

CVE-2026-72565 - A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attacke

CVE-2026-72564 - An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated re

CVE-2026-71394 - GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in

CVE-2026-71393 - GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c.

CVE-2026-71392 - GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() functio

CVE-2026-71391 - GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The share

CVE-2026-66642 - Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella allows Cross Site Request Forgery. T

CVE-2026-66486 - GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing func

CVE-2026-66485 - GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepat

CVE-2026-66484 - GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When e

CVE-2026-65948 - UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0.  Note:  UnixAuth is NOT a

CVE-2026-65945 - Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgra

CVE-2026-65942 - TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are recomme

CVE-2026-61899 - Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to downlo

CVE-2026-59087 - A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks f

CVE-2026-55814 - Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0. Users are recommended to

CVE-2026-55799 - Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are

CVE-2026-44416 - Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apach

CVE-2026-42537 - Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgr

CVE-2026-40920 - Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are re

CVE-2026-32227 - SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recomme

CVE-2026-28672 - Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in

CVE-2026-66915 - Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.6.9 - An unauthenticated attac

CVE-2026-44630 - Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthentica

CVE-2026-19404 - A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintena

CVE-2026-66411 - DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket commu

CVE-2026-66410 - Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be

CVE-2026-66409 - DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networ

CVE-2026-66408 - The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physica

CVE-2026-66407 - DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication.

CVE-2026-66406 - DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A