CVE-2026-97416 - In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential b

CVE-2026-97415 - In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate n

CVE-2026-97414 - In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm:

CVE-2026-97413 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer unde

CVE-2026-97412 - In the Linux kernel, the following vulnerability has been resolved: pds_core: quiesce DMA before fr

CVE-2026-97411 - In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potent

CVE-2026-97410 - In the Linux kernel, the following vulnerability has been resolved: netconsole: take target_cleanup

CVE-2026-97409 - In the Linux kernel, the following vulnerability has been resolved: nvme-fc: Do not cancel requests

CVE-2026-97408 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate conn

CVE-2026-97407 - In the Linux kernel, the following vulnerability has been resolved: ASoC: rockchip: rockchip_pdm: H

CVE-2026-97231 - A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function

CVE-2026-94613 - authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthe

CVE-2026-94612 - authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authent

CVE-2026-94611 - authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik

CVE-2026-94609 - authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account

CVE-2026-94606 - authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik

CVE-2026-94604 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-94281 - An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be us

CVE-2026-93830 - In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RB

CVE-2026-93829 - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd

CVE-2026-93828 - In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged

CVE-2026-93827 - In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on

CVE-2026-93826 - In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF i

CVE-2026-93825 - In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get

CVE-2026-93824 - In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of

CVE-2026-93823 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide b

CVE-2026-93822 - In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus re

CVE-2026-93821 - In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus r

CVE-2026-93820 - In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus

CVE-2026-93819 - In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus

CVE-2026-93818 - In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus rem

CVE-2026-93817 - In the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges li

CVE-2026-93816 - In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry na

CVE-2026-93815 - In the Linux kernel, the following vulnerability has been resolved: net: au1000: move free_irq out

CVE-2026-93814 - In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target

CVE-2026-93813 - In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate I

CVE-2026-93812 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory l

CVE-2026-93811 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sd_buf memory le

CVE-2026-93810 - In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fi

CVE-2026-93809 - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU c

CVE-2026-93808 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: caiaq: validat

CVE-2026-93807 - In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: avoid reading TKIP M

CVE-2026-93806 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate assoc

CVE-2026-93805 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx

CVE-2026-93804 - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for

CVE-2026-93803 - In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index rec

CVE-2026-93802 - In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon leng

CVE-2026-93801 - In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize sta

CVE-2026-93800 - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on re

CVE-2026-93799 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate st

CVE-2026-93798 - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup i

CVE-2026-93797 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-

CVE-2026-93796 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX po

CVE-2026-93795 - In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix leaks and onlin

CVE-2026-93794 - In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data be

CVE-2026-93793 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX

CVE-2026-93792 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possi

CVE-2026-93791 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check

CVE-2026-93790 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-

CVE-2026-93789 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TL

CVE-2026-93788 - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate W

CVE-2026-93787 - In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name

CVE-2026-93786 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited P

CVE-2026-93785 - In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payloa

CVE-2026-93784 - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in

CVE-2026-93783 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb

CVE-2026-93782 - In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after

CVE-2026-93781 - In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag

CVE-2026-93545 - An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by maliciou

CVE-2026-93544 - An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used b

CVE-2026-93543 - An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X

CVE-2026-93542 - An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi be

CVE-2026-93288 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait

CVE-2026-93287 - In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized bl

CVE-2026-93286 - In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointe

CVE-2026-93285 - In the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in

CVE-2026-93284 - In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages be

CVE-2026-91161 - OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessi

CVE-2026-91160 - OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSoc

CVE-2026-91134 - Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0

CVE-2026-91133 - Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0

CVE-2026-91132 - Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0

CVE-2026-91123 - Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0

CVE-2026-91122 - Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0

CVE-2026-88390 - An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0)

CVE-2026-88385 - Mini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML parsing

CVE-2026-88384 - OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially cr

CVE-2026-88383 - libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When pars

CVE-2026-88382 - hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its

CVE-2026-88378 - QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().

CVE-2026-88377 - Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom p

CVE-2026-88376 - Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAto

CVE-2026-88373 - libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. W

CVE-2026-88372 - libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing craft

CVE-2026-88367 - NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during

CVE-2026-84302 - Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0

CVE-2026-79766 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-79764 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-79763 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-79762 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-63498 - Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint G

CVE-2026-63493 - Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session

CVE-2026-62368 - Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.crea

CVE-2026-56744 - `@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-too

CVE-2026-56738 - phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.

CVE-2026-47132 - phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL L

CVE-2026-26054 - SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in

CVE-2026-97226 - A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function

CVE-2026-97225 - A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file pac

CVE-2026-96873 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-96750 - MongoDB Compass can interpolate a database name without escaping into the initial input of its embed

CVE-2026-96746 - An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unaut

CVE-2026-96745 - Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can ca

CVE-2026-96744 - Improper neutralization of special elements in data query logic in the cache lock implementation of

CVE-2026-93541 - An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

CVE-2026-93425 - Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoD

CVE-2026-93283 - In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix device_registe

CVE-2026-93282 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed acce

CVE-2026-93281 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended ca

CVE-2026-93280 - In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topol

CVE-2026-93279 - In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing ta

CVE-2026-93278 - In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing na

CVE-2026-93277 - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Validate udata be

CVE-2026-93276 - In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb

CVE-2026-93275 - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/sta

CVE-2026-93274 - In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove

CVE-2026-93273 - In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device

CVE-2026-93272 - In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix han

CVE-2026-93271 - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range

CVE-2026-93270 - In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallb

CVE-2026-93269 - In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock depende

CVE-2026-93268 - In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansio

CVE-2026-93267 - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use af

CVE-2026-93266 - In the Linux kernel, the following vulnerability has been resolved: arm64: RSI: fix field-spanning

CVE-2026-93265 - In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: tc9563: Fix parsin

CVE-2026-93264 - In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length

CVE-2026-93263 - In the Linux kernel, the following vulnerability has been resolved: clk: eswin: Zero-initialize sta

CVE-2026-93262 - In the Linux kernel, the following vulnerability has been resolved: md/raid5-ppl: fix use-after-fre

CVE-2026-93261 - In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Fix NULL point

CVE-2026-93260 - In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI ini

CVE-2026-93259 - In the Linux kernel, the following vulnerability has been resolved: powerpc/irq: Fix missing r2 clo

CVE-2026-93258 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: do not use make_bad_inod

CVE-2026-93257 - In the Linux kernel, the following vulnerability has been resolved: block: handle nogenerate/noveri

CVE-2026-93256 - In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: mask DAIF bef

CVE-2026-93255 - In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENT_BUFFER_

CVE-2026-93254 - In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary

CVE-2026-93253 - In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing

CVE-2026-93252 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dep

CVE-2026-93251 - In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi_bus_g

CVE-2026-93250 - In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free

CVE-2026-93249 - In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Make sure c

CVE-2026-93248 - In the Linux kernel, the following vulnerability has been resolved: drm/xe: don't WARN on kernel jo

CVE-2026-93247 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix 'hdev->dis

CVE-2026-93246 - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix out-of-bounds

CVE-2026-93245 - In the Linux kernel, the following vulnerability has been resolved: apparmor: policy_int make sure

CVE-2026-93244 - In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve s

CVE-2026-93243 - In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account

CVE-2026-93242 - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response que

CVE-2026-93241 - In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and o

CVE-2026-93240 - In the Linux kernel, the following vulnerability has been resolved: memcg: make the v1 soft limit k

CVE-2026-93239 - In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix the lockless pag

CVE-2026-93238 - In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use

CVE-2026-93237 - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT_MAP_PHYSM

CVE-2026-93236 - In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL po

CVE-2026-93235 - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to zero post-EOF data

CVE-2026-93234 - In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate TV mode names

CVE-2026-93233 - In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix callocate

CVE-2026-93232 - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix boot panic with

CVE-2026-93231 - In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in

CVE-2026-93230 - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic

CVE-2026-93229 - In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier

CVE-2026-93228 - In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chu

CVE-2026-93227 - In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: deferred_grow_zone(

CVE-2026-93226 - In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump

CVE-2026-93225 - In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec

CVE-2026-93224 - In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix unmatched rn_unreg

CVE-2026-93223 - In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fi

CVE-2026-93222 - In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo na

CVE-2026-93221 - In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean

CVE-2026-93220 - In the Linux kernel, the following vulnerability has been resolved: sched_ext: Keep kick_sync waiti

CVE-2026-93219 - In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sun4i

CVE-2026-93218 - In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: skip device-pri

CVE-2026-93217 - In the Linux kernel, the following vulnerability has been resolved: mm/madvise: skip device-private

CVE-2026-93216 - In the Linux kernel, the following vulnerability has been resolved: mm/page_owner: use memcg_data s

CVE-2026-93215 - In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs

CVE-2026-93214 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: fix deadloc

CVE-2026-93213 - In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in o

CVE-2026-93212 - In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsd_serv deref in

CVE-2026-93211 - In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table

CVE-2026-93210 - In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache a

CVE-2026-93209 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: use skb_ge

CVE-2026-93208 - In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race wi

CVE-2026-93207 - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpc_gss_wire_cred

CVE-2026-93206 - In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file_ns_capable()

CVE-2026-93205 - In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teard

CVE-2026-92680 - Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for rem

CVE-2026-88371 - ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function

CVE-2026-88370 - libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled load_ini_buffe

CVE-2026-88369 - zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().

CVE-2026-88368 - NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's

CVE-2026-88366 - NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo()

CVE-2026-88365 - minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsi

CVE-2026-88362 - MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A

CVE-2026-88361 - SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when

CVE-2026-88358 - simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parse_unpadded()

CVE-2026-88357 - nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code.

CVE-2026-88355 - An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr().

CVE-2026-79761 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-79760 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-79759 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-79758 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capa

CVE-2026-77581 - BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate a

CVE-2026-76907 - LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0,

CVE-2026-75907 - The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's

CVE-2026-67233 - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and

CVE-2026-63630 - BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkfl

CVE-2026-63203 - Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0,

CVE-2026-56739 - Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fe

CVE-2026-56737 - phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authenticati

CVE-2025-32000 - HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately

CVE-2026-97404 - In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a r

CVE-2026-97362 - HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticate

CVE-2026-97224 - A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function

CVE-2026-90959 - A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' pa

CVE-2026-90481 - In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentica

CVE-2026-88351 - An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. W

CVE-2026-82094 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse

CVE-2026-82093 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-81552 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-81549 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain se

CVE-2026-81548 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-81547 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-81545 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-81539 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute a

CVE-2026-77874 - IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerab

CVE-2026-77825 - IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API l

CVE-2026-77707 - Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary

CVE-2026-77703 - Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows

CVE-2026-73064 - In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source

CVE-2026-6544 - IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls whic

CVE-2026-65422 - A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a u

CVE-2026-58008 - Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of I

CVE-2026-58007 - Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of

CVE-2026-58006 - Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of

CVE-2026-58005 - Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and O

CVE-2026-58004 - Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and O

CVE-2026-56736 - phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in

CVE-2026-52001 - An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive inf

CVE-2026-51997 - An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary co

CVE-2026-51996 - An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary co