CVE-2026 list

CVE-2026 records published in May 2026

Page six of seven: records 5,001 to 6,000 of the 6,293 published in May 2026, newest first. The first page carries the figures for May 2026.

CVE-2026 records published in May 2026, newest first: records 5,001 to 6,000 of 6,293
CVE Summary CVSS EPSS Published Signals
CVE-2026-41671Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens without Validation6.8CNA v3.10.4%2026-05-07Fix
CVE-2026-41670Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest8.2CNA v3.10.3%2026-05-07Fix
CVE-2026-41669Admidio: SAML signature validation result Ignored Forged AuthnRequests and LogoutRequests Processed8.2CNA v3.10.2%2026-05-07Fix
CVE-2026-41663Admidio: CSRF on Admin Preferences Triggers Unauthorized Backup, .htaccess Write, and Email Send3.5CNA v3.10.1%2026-05-07Fix
CVE-2026-41662Admidio: Missing Minimum Administrator Check in Role Membership Removal5.2CNA v3.10.4%2026-05-07Fix
CVE-2026-41661Admidio: Reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion6.1CNA v3.10.3%2026-05-07Fix
CVE-2026-41660Admidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTP7.1CNA v3.10.4%2026-05-07Fix
CVE-2026-41659Admidio: Hidden Profile Field Values Leaked via Blind Search Oracle in Member Assignment2.7CNA v3.10.3%2026-05-07Fix
CVE-2026-41658Admidio inventory module missing authorization6.5CNA v3.10.3%2026-05-07Fix
CVE-2026-41657Admidio: Cross-Organization Member data exposure via Permission Check Mismatch in contacts_data.php4.9CNA v3.10.4%2026-05-07Fix
CVE-2026-41656Admidio: Path traversal4.5CNA v3.10.4%2026-05-07Fix
CVE-2026-41655Admidio ECard preview path traversal6.5CNA v3.10.5%2026-05-07Fix
CVE-2026-41654Weblate is vulnerable to authenticated SSRF via Project Backup Import bypassing validate_repo_url5.3CNA v4.00.5%2026-05-07Fix
CVE-2026-41653BentoPDF: Stored XSS via Markdown Editor leading to Persistent File Exfiltration7.0CNA v4.00.5%2026-05-07Exploit codeFix
CVE-2026-41650fast-xml-parser XMLBuilder: XML Comment and CDATA injection via Unescaped Delimiters6.1CNA v3.10.3%2026-05-07Fix
CVE-2026-41648Incus: Unbounded YAML Metadata Decode via Parsing5.3CNA v4.00.4%2026-05-07Fix
CVE-2026-41647Incus: Nil-Pointer Dereference via S3 Bucket Import6.5CNA v3.10.5%2026-05-07Fix
CVE-2026-41644monetr is vulnerable to server-side request forgery in Lunch Flow link creation and refresh8.3CNA v4.00.4%2026-05-07Fix
CVE-2026-41643GoBGP: Remote denial of service (panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE7.5CNA v3.10.6%2026-05-07Fix
CVE-2026-41642GoBGP: Remote denial of service (panic) via Malformed Well-known Path attribute7.5CNA v3.10.6%2026-05-07Fix
CVE-2026-41641NocoBase vulnerable to SQL Validation Bypass via `sqlCollection:update` Missing `checkSQL` Call7.2CNA v3.12.4%2026-05-07NucleiFix
CVE-2026-41640NocoBase vulnerable to SQL injection via String Concatenation in Recursive Eager Loading7.5CNA v3.12.4%2026-05-07NucleiFix
CVE-2026-41589Wish has SCP path traversal that allows arbitrary file read/write9.6CNA v3.10.5%2026-05-07Fix
CVE-2026-41587CI4MS: Unrestricted PHP file upload8.6CNA v4.00.7%2026-05-07Fix
CVE-2026-41586Hyperledger Fabric channel deserialization deserialization of untrusted data9.3CNA v4.00.6%2026-05-07Fix
CVE-2026-41554Bricks Builder theme reflected cross-site scripting7.1CNA v3.10.3%2026-05-07Fix
CVE-2026-41519Weblate's API Token not Invalidated on Password Change4.2CNA v3.10.4%2026-05-07Fix
CVE-2026-41505RELATE: Predictable token Generation in auth.py and exam.py8.7CNA v3.10.4%2026-05-07
CVE-2026-41490Dagster vulnerable to SQL injection via Dynamic Partition Keys in Database I/O Manager Integrations8.3CNA v3.10.5%2026-05-07Exploit codeFix
CVE-2026-41422Daptin vulnerable to SQL injection via unvalidated goqu.L calls in aggregate API8.3CNA v3.10.5%2026-05-07Fix
CVE-2026-41413Istio vulnerable to SSRF via RequestAuthentication jwksUri5.0CNA v3.10.4%2026-05-07Fix
CVE-2026-41203ci4ms Theme::upload is vulnerable to Zip Slip leading to RCE9.4CNA v4.00.7%2026-05-07Fix
CVE-2026-41202ci4ms Backup::restore is vulnerable to Zip Slip leading to RCE9.4CNA v4.00.7%2026-05-07Fix
CVE-2026-41201CI4MS: Backup Management Full account takeover for All-Roles and Privilege-Escalation9.1CNA v3.10.6%2026-05-07Fix
CVE-2026-41143YesWiki vulnerable to authenticated SQL injection via id_fiche in EntryManager::formatDataBeforeSave8.8CNA v3.10.5%2026-05-07Fix
CVE-2026-41142OpenEXR is Vulnerable to integer overflow in ImageChannel::resize leads to heap OOB write8.8CNA v3.10.7%2026-05-07Fix
CVE-2026-41139Unsafe array index getter in mathjs8.8CNA v3.00.8%2026-05-07Fix
CVE-2026-41105Microsoft Azure Monitor Action Group notification system elevation of privilege8.1CNA v3.10.7%2026-05-07Fix
CVE-2026-41004Spring Cloud Config Server Logged Sensitive Information4.4CNA v3.10.2%2026-05-07Fix
CVE-2026-41002Spring Cloud Config Server Susceptible to TOCTOU Attack7.4CNA v3.10.2%2026-05-07Fix
CVE-2026-40982Spring Cloud Config vulnerable to path traversal9.1CNA v3.10.8%2026-05-07Fix
CVE-2026-40981Spring Cloud Config has an authorization bypass through user-controlled key7.5CNA v3.10.5%2026-05-07Fix
CVE-2026-40214OpenStack Cyborg's Accelerator Request (ARQ) API does not enforce project ownership at any layer6.3CNA v3.10.3%2026-05-07Fix
CVE-2026-40213OpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints7.4CNA v3.10.3%2026-05-07Fix
CVE-2026-40004Openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview5.5CNA v3.10.2%2026-05-07Fix
CVE-2026-40003USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM5.1CNA v3.10.3%2026-05-07Exploit codeFix
CVE-2026-39836Panic in Dial and LookupPort when handling NUL byte on Windows in net7.5v3.10.6%2026-05-07Fix
CVE-2026-39826Escaper bypass leads to XSS in html/template6.1CISA ADP v3.10.4%2026-05-07Fix
CVE-2026-39825ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3CISA ADP v3.10.4%2026-05-07Fix
CVE-2026-39823Bypass of meta content URL escaping causes XSS in html/template6.1CISA ADP v3.10.3%2026-05-07Fix
CVE-2026-39820Quadratic string concatentation in consumeComment in net/mail7.5v3.10.9%2026-05-07Fix
CVE-2026-39819Invoking go bug follows symlinks in predictable temporary filenames in cmd/go5.3v3.10.2%2026-05-07Fix
CVE-2026-39817Invoking go tool pack does not sanitize output paths in cmd/go5.9v3.10.2%2026-05-07Fix
CVE-2026-37709Snipe-IT has insecure permissions in file uploads9.8CISA ADP v3.10.8%2026-05-07Fix
CVE-2026-36458ChestnutCMS cms_content tag SQL injection9.8CISA ADP v3.10.5%2026-05-07
CVE-2026-36388PHPGurukal Hospital Management System edit-profile.php cross-site scripting5.4CISA ADP v3.10.2%2026-05-07
CVE-2026-36387CODEASTRO Membership Management System add_members.php vulnerability6.5CISA ADP v3.10.4%2026-05-07
CVE-2026-36341Webkul Krayin CRM is vulnerable to cross-site scripting in the /admin/activities/create endpoint5.4CISA ADP v3.10.3%2026-05-07Exploit codeFix
CVE-2026-35435Microsoft Azure AI Foundry elevation of privilege8.6CNA v3.11.1%2026-05-07Fix
CVE-2026-35428Microsoft Azure Cloud Shell spoofing9.6CNA v3.10.9%2026-05-07Fix
CVE-2026-34327Microsoft Partner Center spoofing8.2CNA v3.10.6%2026-05-07Fix
CVE-2026-33844Microsoft Azure Managed Instance for Apache Cassandra remote code execution9.0CNA v3.10.8%2026-05-07Fix
CVE-2026-33823Microsoft Team Events portal information disclosure9.6CNA v3.10.9%2026-05-07Fix
CVE-2026-33814Go HTTP/2 transport infinite loop7.5v3.10.9%2026-05-07Fix
CVE-2026-33811Crash when handling long CNAME response in net7.5v3.10.9%2026-05-07Fix
CVE-2026-33589Open Notebook arbitrary file read via local file inclusion (LFI)6.5NVD v3.10.3%2026-05-07Fix
CVE-2026-33588Open Notebook arbitrary file write through path traversal8.1v3.10.3%2026-05-07Fix
CVE-2026-33587Open Notebook remote code execution (RCE) via server-side template injection (SSTI)10.0v3.10.4%2026-05-07Fix
CVE-2026-33111Copilot Chat (Microsoft Edge) information disclosure7.5CNA v3.11.0%2026-05-07Fix
CVE-2026-33109Microsoft Azure Managed Instance for Apache Cassandra remote code execution9.9CNA v3.10.8%2026-05-07Fix
CVE-2026-32686Unbounded exponent in decimal enables unauthenticated DoS6.9CNA v4.00.3%2026-05-07Fix
CVE-2026-32207Microsoft Azure Machine Learning Notebook spoofing8.8CNA v3.10.5%2026-05-07Fix
CVE-2026-30496Optoma CinemaX P2 projector HTTP control API improper authorization9.8CISA ADP v3.10.6%2026-05-07
CVE-2026-30495Optoma CinemaX P2 projector Android Debug Bridge interface improper authorization8.8CISA ADP v3.10.4%2026-05-07
CVE-2026-28201SurrealDB injection on Open Notebook7.8v3.10.2%2026-05-07Fix
CVE-2026-27421Royal Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-05-07Fix
CVE-2026-27416PDF Poster WordPress plugin broken access control5.3CNA v3.10.3%2026-05-07Fix
CVE-2026-27415BEAR WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-05-07Fix
CVE-2026-27329YITH WooCommerce Wishlist WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-05-07Fix
CVE-2026-26164M365 Copilot information disclosure7.5CNA v3.11.0%2026-05-07Fix
CVE-2026-26129M365 Copilot information disclosure7.5CNA v3.11.0%2026-05-07Fix
CVE-2026-25468Happy Addons for Elementor WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-05-07Fix
CVE-2026-25436Royal Elementor Addons WordPress plugin broken access control5.3CNA v3.10.3%2026-05-07Fix
CVE-2026-8142VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as Ticket creation or Ticket updates.6.5CISA ADP v3.10.2%2026-05-07
CVE-2026-8115gyoridavid short-video-maker REST API rest.ts path traversal6.9CNA v4.00.6%2026-05-07
CVE-2026-8114JeecgBoot JSON object loadTreeData SQL injection5.3CNA v4.00.3%2026-05-07
CVE-2026-81138421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal6.5v3.10.6%2026-05-07
CVE-2026-81128421bit MiniClaw kernel.ts executeCognitivePulse os command injection8.8v3.14.2%2026-05-07
CVE-2026-8106GitHub Enterprise Server Management Console login page HTML injection5.9CNA v4.00.3%2026-05-07Fix
CVE-2026-8098code-projects Feedback System checklogin.php SQL injection6.9CNA v4.00.4%2026-05-07
CVE-2026-8097CodeAstro Online Classroom askquery.php SQL injection5.3CNA v4.00.3%2026-05-07
CVE-2026-8094Mozilla Firefox WebRTC code injection9.8CISA ADP v3.10.6%2026-05-07Fix
CVE-2026-8093Memory safety bugs fixed in Thunderbird8.1CISA ADP v3.10.4%2026-05-07Fix
CVE-2026-8092Memory safety bugs fixed in Thunderbird ESR and Thunderbird8.1CISA ADP v3.10.5%2026-05-07Fix
CVE-2026-8091Mozilla Firefox incorrect boundary conditions in the Audio/Video: Playback component9.8CISA ADP v3.10.6%2026-05-07Fix
CVE-2026-8090Mozilla Firefox use-after-free in the DOM: Networking component7.3CISA ADP v3.10.4%2026-05-07Fix
CVE-2026-8088OSGeo gdal GDapi.c GDfieldinfo out-of-bounds5.5v3.10.2%2026-05-07Fix
CVE-2026-8087OSGeo gdal GDapi.c GDnentries heap-based overflow7.8v3.10.3%2026-05-07Fix
CVE-2026-8086OSGeo gdal SWapi.c SWnentries heap-based overflow7.8v3.10.3%2026-05-07Fix
CVE-2026-8084OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds5.5v3.10.2%2026-05-07Fix
CVE-2026-8083SourceCodester Pharmacy Sales and Inventory System ajax.php save_user SQL injection6.9CNA v4.00.4%2026-05-07
CVE-2026-8081router-for-me CLIProxyAPI api_tools.go server-side request forgery5.3CNA v4.00.4%2026-05-07
CVE-2026-8080MISP core stored XSS in MISP template (old engine) element attribute type5.4v3.10.2%2026-05-07Fix
CVE-2026-8063MongoDB Server aggregation view pipeline null pointer dereference7.1CNA v4.00.4%2026-05-07Fix
CVE-2026-8034Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer7.9CNA v4.00.9%2026-05-07Fix
CVE-2026-7821Ivanti Endpoint Manager Mobile improper certificate validation7.4CNA v3.10.9%2026-05-07Fix
CVE-2026-7541Denial of service vulnerability in GitHub Enterprise Server allowed service disruption6.3CNA v4.00.7%2026-05-07Fix
CVE-2026-7415Open MQTT orchestration without read/write ACLs in Yarbo robot Firmware9.8CNA v3.10.7%2026-05-07
CVE-2026-7414Hard-coded credentials in Yarbo robot Firmware9.8CNA v3.10.7%2026-05-07
CVE-2026-7413Persistent undocumented backdoor access in Yarbo robot9.8v3.10.6%2026-05-07
CVE-2026-7252WP-Optimize WordPress plugin arbitrary file deletion8.1CNA v3.11.2%2026-05-07Fix
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) improper input validation7.2CNA v3.12.5%2026-05-07KEVKCVFix
CVE-2026-6805Vulnerability on Cryptobox external sharing feature6.9CNA v4.00.4%2026-05-07Fix
CVE-2026-6795Open redirect in DivvyDrive Information Technologies' DivvyDrive9.6CNA v3.10.4%2026-05-07Fix
CVE-2026-6736GitHub Enterprise Server signup endpoint authentication bypass6.3CNA v4.00.4%2026-05-07Fix
CVE-2026-6692Slider Revolution - Authenticated (Subscriber+) arbitrary file upload via _get_media_url8.8CNA v3.10.8%2026-05-07Fix
CVE-2026-6508RCE in TUBITAK BILGEM's Liderahenk9.8CNA v3.10.3%2026-05-07Exploit codeFix
CVE-2026-6411MAXHUB Pivot client application use of a broken or risky cryptographic algorithm7.3CNA v3.10.3%2026-05-07Fix
CVE-2026-6222Forminator Forms WordPress plugin missing authorization5.3CNA v3.10.4%2026-05-07Fix
CVE-2026-6214Forminator Forms WordPress plugin missing authorization6.5CNA v3.10.5%2026-05-07Fix
CVE-2026-6002HTML injection in DivvyDrive Information Technologies' DivvyDrive8.8CNA v3.10.5%2026-05-07Fix
CVE-2026-5791CSRF in DivvyDrive Information Technologies' DivvyDrive6.5CNA v3.10.2%2026-05-07Fix
CVE-2026-5788Ivanti Endpoint Manager Mobile improper access control7.0CNA v3.11.5%2026-05-07Fix
CVE-2026-5787Ivanti Endpoint Manager Mobile improper certificate validation8.9CNA v3.10.9%2026-05-07Fix
CVE-2026-5786Ivanti Endpoint Manager Mobile improper access control8.8CNA v3.11.2%2026-05-07Fix
CVE-2026-5784Stored XSS in DivvyDrive Information Technologies' DivvyDrive8.8CNA v3.10.5%2026-05-07Fix
CVE-2026-4807Appointment Booking Calendar WordPress plugin missing authorization6.5CNA v3.10.5%2026-05-07Fix
CVE-2026-4430The Document Foundation LibreOffice heap buffer overflow in AgileEngine5.4CNA v4.00.1%2026-05-07Fix
CVE-2026-4348BetterDocs Pro WordPress plugin unauthenticated SQL injection via Encyclopedia limit parameter7.5CNA v3.10.5%2026-05-07Fix
CVE-2026-3953Reflected XSS in Gosoft Software's Proticaret E-Commerce8.8CNA v3.10.5%2026-05-07Fix
CVE-2026-44405Paramiko rsakey.py allows the SHA-1 algorithm3.4CNA v3.10.1%2026-05-06Fix
CVE-2026-44118OpenClaw Owner Context spoofing via Bearer Token header8.5CNA v4.00.2%2026-05-06Fix
CVE-2026-44117OpenClaw server-side request forgery in QQBot Direct Media upload6.3CNA v4.00.4%2026-05-06Fix
CVE-2026-44116OpenClaw server-side request forgery in Zalo Photo URL Validation6.9CNA v4.00.5%2026-05-06Fix
CVE-2026-44115OpenClaw Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist8.7CNA v4.00.6%2026-05-06Fix
CVE-2026-44114OpenClaw Environment Variable Namespace Collision via Workspace dotenv8.5CNA v4.00.2%2026-05-06Fix
CVE-2026-44113OpenClaw Time-of-Check/Time-of-use race condition in OpenShell FS Bridge6.3NVD v3.10.3%2026-05-06Fix
CVE-2026-44112OpenClaw Symlink Swap race condition in OpenShell FS Bridge Writes6.3NVD v3.10.4%2026-05-06Fix
CVE-2026-44111OpenClaw arbitrary Markdown File Read via QMD memory_get2.3CNA v4.00.4%2026-05-06Fix
CVE-2026-44110OpenClaw authorization bypass in Matrix Room Control commands via DM Pairing Store7.7CNA v4.00.5%2026-05-06Fix
CVE-2026-44109OpenClaw authentication bypass in Feishu Webhook and Card-Action Validation9.2CNA v4.01.1%2026-05-06Fix
CVE-2026-43975Apache Wicket: Possible malicious path traversal in FolderUploadsFileManager6.5CISA ADP v3.11.0%2026-05-06Fix
CVE-2026-43646Apache Wicket: Crafted URLs can bypass PackageResourceGuard7.5CISA ADP v3.10.6%2026-05-06Fix
CVE-2026-43585OpenClaw Bearer Token Validation Bypass via Stale SecretRef Resolution9.8v3.10.8%2026-05-06Fix
CVE-2026-43584OpenClaw Insufficient Environment Variable Denylist in Exec Policy8.7CNA v4.00.7%2026-05-06Fix
CVE-2026-43583OpenClaw Loss of Group Tool-Policy Context in Delivery Queue Recovery6.5v3.10.4%2026-05-06Fix
CVE-2026-43582OpenClaw DNS Rebinding SSRF via Hostname Validation Bypass4.9CNA v4.00.3%2026-05-06Fix
CVE-2026-43581OpenClaw Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding9.0CNA v4.00.4%2026-05-06Fix
CVE-2026-43580OpenClaw Incomplete Navigation Guard Coverage in Browser Interactions4.9CNA v4.00.5%2026-05-06Fix
CVE-2026-43579OpenClaw insufficient access control in Nostr Profile Mutation Routes6.0CNA v4.00.4%2026-05-06Fix
CVE-2026-43578OpenClaw privilege escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade9.1CNA v4.00.5%2026-05-06Fix
CVE-2026-43577OpenClaw arbitrary file read via Browser Interaction Routes7.1CNA v4.00.4%2026-05-06Fix
CVE-2026-43576OpenClaw Second-hop SSRF via CDP /json/version WebSocket URL4.9CNA v4.00.4%2026-05-06Fix
CVE-2026-43575OpenClaw authentication bypass in Sandbox noVNC Helper route9.2CNA v4.00.8%2026-05-06Fix
CVE-2026-43283In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle dma_free_coherent() in error path takes priv->rx_buf.alloc_len as the dma handle. This would lead to improper unmapping of the buffer. Change the dma handle to priv->rx_bu8.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43282Linux kernel ionic RDMA driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43281Linux kernel firmware mailbox index translation out-of-bounds read7.1v3.10.1%2026-05-06Fix
CVE-2026-43280Linux kernel Xe graphics driver madvise handling out-of-bounds read7.1CNA v3.10.2%2026-05-06Fix
CVE-2026-43279Linux kernel USB audio driver out-of-bounds write7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43278Linux kernel device-mapper request cloning double free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43277Linux kernel GHES CPER record handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43276Linux kernel mana use-after-free7.8v3.10.1%2026-05-06Fix
CVE-2026-43275Linux kernel UFS driver power management race condition4.7v3.10.1%2026-05-06Fix
CVE-2026-43274Linux kernel mchp-ipc-sbi out-of-bounds access8.4CNA v3.10.2%2026-05-06Fix
CVE-2026-43273Linux kernel Ceph client vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43272Linux kernel trace ring buffer null pointer dereference5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43271Linux kernel MD cluster driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43270In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdp_probe(), vpu_get_plat_device() increases the reference count of the returned platform device. Add platform_device_put() to prevent reference leak.5.5v3.10.1%2026-05-06Fix
CVE-2026-43269Linux kernel Atmel HLCDC display driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43268In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_open()") requires any inode be one of S_IFDIR/S_IFLNK/S_IFREG/S_IFCHR/S_IFBLK/ S_IFIFO/S_IFSOCK type, use S_IFREG for spe5.5v3.10.1%2026-05-06Fix
CVE-2026-43267Linux kernel rtw89 Wi-Fi driver divide by zero5.5v3.10.1%2026-05-06Fix
CVE-2026-43266Linux kernel CPER record parser vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43265Linux kernel KVM nested virtualization vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43264Linux kernel OF display timing parser vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43263Linux kernel wave5 null pointer dereference7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43262Linux kernel GFS2 fiemap vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43261Linux kernel arm64 Spectre-BHB mitigation information disclosure5.5v3.10.1%2026-05-06Fix
CVE-2026-43260Linux kernel bnxt_en Ethernet driver double free7.8v3.10.1%2026-05-06Fix
CVE-2026-43259Linux kernel i.MX8MQ USB PHY driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43258Linux kernel Alpha page migration TLB handling out-of-bounds write7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43257Linux kernel cx88 ALSA audio driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43256Linux kernel vfe out-of-bounds access7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43255Linux kernel Libertas Wi-Fi USB driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43254Linux kernel ovpn integer overflow7.5CNA v3.10.6%2026-05-06Fix
CVE-2026-43253Linux kernel AMD IOMMU driver improper locking7.5CNA v3.10.5%2026-05-06Fix
CVE-2026-43252Linux kernel in-kernel improper locking5.5v3.10.1%2026-05-06Fix
CVE-2026-43251Linux kernel Prodikeys HID driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43250Linux kernel ChipIdea USB device controller driver out-of-bounds write7.8NVD v3.10.2%2026-05-06Fix
CVE-2026-43249Linux kernel 9p Xen transport driver double free8.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43248Linux kernel vDPA simulator driver out-of-bounds write7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43247Linux kernel Wave5 video codec driver denial of service5.5v3.10.1%2026-05-06Fix
CVE-2026-43246Linux kernel i2c/tw9906 memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43245In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not block ... so don't use __getname() there. Switch it (and ntfs_d_hash(), while we are at it) to kmalloc(PATH_MAX, GFP_NOWAIT). Yes, ntfs_d_hash() almost certainly can do with smaller allocations, but7.5CNA v3.10.6%2026-05-06Fix
CVE-2026-43244Linux kernel KCM socket layer memory leak5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43243Linux kernel AMD display DCN401 driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43242Linux kernel TI K3 SoC info driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43241Linux kernel switchtec NTB driver out-of-bounds read7.1v3.10.1%2026-05-06Fix
CVE-2026-43240Linux kernel x86 kexec IMA buffer handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43239Linux kernel SMB client interface query race condition8.8CNA v3.10.3%2026-05-06Fix
CVE-2026-43238Linux kernel act_skbedit divide by zero5.5v3.10.1%2026-05-06Fix
CVE-2026-43237Linux kernel amdgpu GEM VA ioctl use-after-free7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43236Linux kernel atmel-hlcdc display driver use-after-free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43235Linux kernel iris video driver SM8750 platform data vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43234In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEV_CHANGEMTU event when unregistering slave syzbot is reporting unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 3 ref_tracker: netdev@ffff88807dcf8618 has 1/2 users at __netde5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43233Linux kernel H.323 netfilter connection tracking out-of-bounds read8.2CNA v3.10.5%2026-05-06Fix
CVE-2026-43232Linux kernel FarSync WAN driver use-after-free8.8CNA v3.10.6%2026-05-06Fix
CVE-2026-43231Linux kernel radio-keene USB radio driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43230Linux kernel RDS reconnect worker vulnerability7.5CNA v3.10.7%2026-05-06Fix
CVE-2026-43229Linux kernel Chips&Media wave5 video driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43228Linux kernel HFS filesystem reachable assertion5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43227Linux kernel sh_tmu clocksource driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43226Linux kernel RDS connection state handling vulnerability7.5CNA v3.10.7%2026-05-06Fix
CVE-2026-43225Linux kernel rtl8723bs Wi-Fi driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43224Linux kernel io_uring/zcrx memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43223Linux kernel pvrusb2 driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43222Linux kernel Verisilicon AV1 decoder driver vulnerability7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43221Linux kernel IPMB event handler vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43220Linux kernel AMD IOMMU driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43219In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet If an error occurs during register_netdev() for the first MAC in cpsw_register_ports(), even though cpsw->slaves[0].ndev is set to NULL, cpsw->slav5.5v3.10.1%2026-05-06Fix
CVE-2026-43218Linux kernel i2c/tw9903 memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43217Linux kernel iris gen2 video driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43216Linux kernel TX timestamp locking deadlock5.5NVD v3.10.1%2026-05-06Fix
CVE-2026-43215Linux kernel CIFS client improper locking8.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43214Linux kernel KVM PDPTR register reads vulnerability7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43213Linux kernel rtw89 PCI Wi-Fi driver null pointer dereference7.5CNA v3.10.3%2026-05-06Fix
CVE-2026-43212Linux kernel NUMA cpumask lookup vulnerability7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43211Linux kernel PCI slot locking improper locking7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43210Linux kernel ftrace ring buffer vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43209Linux kernel minix superblock parsing vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43208Linux kernel net out-of-bounds access9.8CNA v3.10.6%2026-05-06Fix
CVE-2026-43207Linux kernel mtk-mdp resource leak7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43206Linux kernel amdkfd event page handling out-of-bounds write7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43205Linux kernel DPAA2 Ethernet switch driver out-of-bounds write7.8v3.10.1%2026-05-06Fix
CVE-2026-43204In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit a354f030dbce ("ASoC: qcom: q6asm: handle the responses after closing")' attempted to ignore DSP responses arriving after a stream had been closed. However, tho5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43203Linux kernel fore200e ATM driver use-after-free7.5CNA v3.10.6%2026-05-06Fix
CVE-2026-43202In the Linux kernel, the following vulnerability has been resolved: fbdev: vt8500lcdfb: fix missing dma_free_coherent() fbi->fb.screen_buffer is allocated with dma_alloc_coherent() but is not freed if the error path is reached.5.5v3.10.1%2026-05-06Fix
CVE-2026-43201Linux kernel ACPI GHES ARM processor error handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43200Linux kernel PCI endpoint configfs denial of service5.5v3.10.1%2026-05-06Fix
CVE-2026-43199Linux kernel mlx5 IPsec driver vulnerability7.5CNA v3.10.5%2026-05-06Fix
CVE-2026-43198Linux kernel IPv6 TCP handshake race condition9.8CNA v3.10.3%2026-05-06Fix
CVE-2026-43197Linux kernel netconsole out-of-bounds read9.1CNA v3.10.5%2026-05-06Fix
CVE-2026-43196Linux kernel pruss double free7.8v3.10.1%2026-05-06Fix
CVE-2026-43195Linux kernel amdgpu user queue management vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43194In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgro_frglist.sh and udpgro_bench.sh are the flakiest tests currently in NIPA. They fail in the same exact way, TCP GRO test stalls occasionally and the test gets killed after 10min. These7.5CNA v3.10.8%2026-05-06Fix
CVE-2026-43193Linux kernel nfsd resource leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43192Linux kernel device-mapper multipath vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43191Linux kernel DCN35 display PHY vulnerability5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43190Linux kernel netfilter xt_tcpmss out-of-bounds read8.2CNA v3.10.5%2026-05-06Fix
CVE-2026-43189Linux kernel v4l2-async subdevice matching improper error handling5.5v3.10.1%2026-05-06Fix
CVE-2026-43188Linux kernel Ceph client improper error handling5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43187Linux kernel XFS attribute leaf freemap integer underflow8.8CNA v3.10.7%2026-05-06Fix
CVE-2026-43186Linux kernel IOAM IPv6 trace data out-of-bounds write9.8CNA v3.10.9%2026-05-06Fix
CVE-2026-43185Linux kernel ksmbd SMB Direct negotiation out-of-bounds write9.8CNA v3.10.7%2026-05-06Fix
CVE-2026-43184Linux kernel rnbd-srv response buffer vulnerability7.5CNA v3.10.6%2026-05-06Fix
CVE-2026-43183Linux kernel cx25821 media driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43182Linux kernel ccs divide by zero5.5v3.10.1%2026-05-06Fix
CVE-2026-43181Linux kernel GPIO sysfs interface vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43180Linux kernel kaweth USB Ethernet driver vulnerability7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43179Linux kernel EROFS file system vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43178Linux kernel procfs PROCMAP_QUERY double free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43177Linux kernel ipu6 camera driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43176Linux kernel rtw89 PCI Wi-Fi driver denial of service8.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43175Linux kernel rs9 clock driver out-of-bounds write5.5v3.10.1%2026-05-06Fix
CVE-2026-43174In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools are terminated right away, let the refcounting do the work instead of releasing the zcrx ctx directly.5.5v3.10.1%2026-05-06Fix
CVE-2026-43173Linux kernel ixp4xx Ethernet driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43172Linux kernel iwlwifi Wi-Fi driver vulnerability8.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43171Linux kernel EFI CPER error record parsing integer underflow5.5v3.10.1%2026-05-06Fix
CVE-2026-43170Linux kernel dwc3 USB gadget driver denial of service5.5v3.10.1%2026-05-06Fix
CVE-2026-43169Linux kernel DRM buddy allocator denial of service5.5v3.10.1%2026-05-06Fix
CVE-2026-43168Linux kernel OCFS2 reflink xattr cleanup vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43167Linux kernel xfrm state handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43166Linux kernel EROFS file system out-of-bounds read7.1CNA v3.10.2%2026-05-06Fix
CVE-2026-43165Linux kernel nct7363 hwmon driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43164Linux kernel UDP-Lite socket initialization null pointer dereference7.5CNA v3.10.6%2026-05-06Fix
CVE-2026-43163Linux kernel md bitmap resize race condition4.7v3.10.1%2026-05-06Fix
CVE-2026-43162Linux kernel Tegra video driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43161In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace (e.g., QEMU, DPDK) can hard-lock the host when their link drops, either by surpris5.5v3.10.1%2026-05-06Fix
CVE-2026-43160Linux kernel macsmc null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43159Linux kernel rtl8723bs Wi-Fi driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43158Linux kernel XFS extended attribute leaf block out-of-bounds write8.8CNA v3.10.5%2026-05-06Fix
CVE-2026-43157Linux kernel octeontx2 CGX driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43156Linux kernel Pegasus USB Ethernet driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43155Linux kernel mmio mux driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43154Linux kernel EROFS volume label handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43153Linux kernel XFS extended attribute lookup vulnerability7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43152Linux kernel hid-pl driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43151Linux kernel Iris video driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43150Linux kernel perf/arm-cmn out-of-bounds write7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43149In the Linux kernel, the following vulnerability has been resolved: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() The priv->rx_buffer and priv->tx_buffer are alloc'd together as contiguous buffers in uhdlc_init() but freed as two buffers in uhdlc_memclean(). Change the cleanu5.5v3.10.1%2026-05-06Fix
CVE-2026-43148Linux kernel powerpc SMP thread groups null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43147Linux kernel PCI SR-IOV locking deadlock5.5v3.10.1%2026-05-06Fix
CVE-2026-43146Linux kernel Iris video driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43145Linux kernel i.MX remoteproc driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43144Linux kernel brcmfmac Wi-Fi driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43143Linux kernel MFD core node list vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43142Linux kernel Iris video driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43141Linux kernel Switchtec NTB driver out-of-bounds read7.1v3.10.1%2026-05-06Fix
CVE-2026-43140Linux kernel Magic Mouse HID input handling null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43139Linux kernel xfrm6 uninitialized resource use8.6CNA v3.10.4%2026-05-06Fix
CVE-2026-43138Linux kernel GPIO reset controller sysfs use-after-free7.8v3.10.1%2026-05-06Fix
CVE-2026-43137Linux kernel SOF Intel HDA DAI null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43136Linux kernel Logitech HID++ report length handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43135Linux kernel cx23885 ALSA DMA handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43134Linux kernel L2CAP LE connection request handling vulnerability8.1CNA v3.10.2%2026-05-06Fix
CVE-2026-43133In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KVM always use vmcb01 for the fields controlled by VMSAVE/VMLOAD, but it missed7.9CNA v3.10.1%2026-05-06Fix
CVE-2026-43132Linux kernel dm-verity crash5.5v3.10.1%2026-05-06Fix
CVE-2026-43131Linux kernel drm/amd/pm null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43130In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac ("iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected") relies on pci_dev_is_disconnected() to skip ATS5.5v3.10.1%2026-05-06Fix
CVE-2026-43129Linux kernel IMA kexec measurement buffer restore vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43128Linux kernel RDMA/umem double free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43127Linux kernel NTFS3 run allocation deadlock5.5NVD v3.10.1%2026-05-06Fix
CVE-2026-43126Linux kernel ALSA OSS mixer use-after-free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43125Linux kernel dlm out-of-bounds write9.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43124Linux kernel pstore RAM console null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43123Linux kernel fbcon null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43121Linux kernel io_uring/zcrx race condition4.7v3.10.1%2026-05-06Fix
CVE-2026-43120Linux kernel RDMA memory region re-registration double free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43119Linux kernel Bluetooth HCI command synchronization race condition5.5v3.10.1%2026-05-06Fix
CVE-2026-43118Linux kernel btrfs inode logging vulnerability5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43117Linux kernel btrfs sync file tracepoint denial of service9.1CNA v3.10.5%2026-05-06Fix
CVE-2026-43116Linux kernel conntrack netlink interface race condition7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43115Linux kernel tiny SRCU use-after-free5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43114Linux kernel netfilter pipapo AVX2 set matching vulnerability9.4CNA v3.10.4%2026-05-06Fix
CVE-2026-43113Linux kernel wl1251 Wi-Fi driver TX completion null pointer dereference8.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43112Linux kernel SMB client path sanitization out-of-bounds read8.8CNA v3.10.4%2026-05-06Fix
CVE-2026-43111Linux kernel Roccat HID driver use-after-free7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43110Linux kernel brcmfmac Wi-Fi driver interface events vulnerability8.8CNA v3.10.3%2026-05-06Fix
CVE-2026-43109Linux kernel x86 shadow stack signal frames improper error handling5.5v3.10.1%2026-05-06Fix
CVE-2026-43108Linux kernel pd-mapper crash5.5v3.10.1%2026-05-06Fix
CVE-2026-43107Linux kernel xfrm interface ID netlink events denial of service5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43106Linux kernel cachefiles object culling vulnerability7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43105Linux kernel VC4 GPU hang state buffer object array memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43104Linux kernel VC4 GPU hang state handling memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43103In the Linux kernel, the following vulnerability has been resolved: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE lapbeth_data_transmit() expects the underlying device type to be ARPHRD_ETHER. Returning NOTIFY_BAD from lapbeth_device_event() makes sure bonding driver can not break this expectatio5.5v3.10.1%2026-05-06Fix
CVE-2026-43102Linux kernel Airoha QDMA RX driver memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43101Linux kernel IPv6 IOAM trace data null pointer dereference7.5CNA v3.10.6%2026-05-06Fix
CVE-2026-43100Linux kernel bridge VLAN-0 FDB handling null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43099Linux kernel ICMP probe handling null pointer dereference7.5CNA v3.10.7%2026-05-06Fix
CVE-2026-43098Linux kernel s3fwrn5 NFC driver null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43097Linux kernel hv double free7.8v3.10.1%2026-05-06Fix
CVE-2026-43096Linux kernel mshv guest memory intercepts infinite loop5.5v3.10.1%2026-05-06Fix
CVE-2026-43095Linux kernel ASoC SDCA interrupt handling vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43094Linux kernel ixgbevf Hyper-V driver null pointer dereference5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43093In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdp_umem_reg() could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermo7.8CNA v3.10.1%2026-05-06Fix
CVE-2026-43092Linux kernel AF_XDP zero-copy socket bind vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43091Linux kernel xfrm policy namespace teardown vulnerability7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43090Linux kernel xfrm policy migration lookup memory leak5.5v3.10.1%2026-05-06Fix
CVE-2026-43089Linux kernel xfrm_user SA mapping information disclosure5.5NVD v3.10.1%2026-05-06Fix
CVE-2026-43088Linux kernel af_key PF_KEY sockaddr export information disclosure5.5v3.10.1%2026-05-06Fix
CVE-2026-43087Linux kernel mcp23s08 pin controller driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43086Linux kernel IPVS scheduler binding null pointer dereference5.5v3.10.1%2026-05-06Fix
CVE-2026-43085Linux kernel nfnetlink_log vulnerability5.5NVD v3.10.2%2026-05-06Fix
CVE-2026-43084Linux kernel nfnetlink_queue use-after-free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43083Linux kernel IOAM6 trace processing out-of-bounds read9.1CNA v3.10.7%2026-05-06Fix
CVE-2026-43082In the Linux kernel, the following vulnerability has been resolved: net: txgbe: leave space for null terminators on property_entry Lists of struct property_entry are supposed to be terminated with an empty property, this driver currently seems to be allocating exactly the amount of entry used. Ch5.5v3.10.1%2026-05-06Fix
CVE-2026-43081Linux kernel IPA GENERIC_CMD register vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43080Linux kernel L2TP UDP encapsulation vulnerability5.5NVD v3.10.1%2026-05-06Fix
CVE-2026-43079Linux kernel Intel uncore PMU driver vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43078Linux kernel af_alg tsgl page handling out-of-bounds write7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43077Linux kernel algif_aead vulnerability5.5v3.10.1%2026-05-06Fix
CVE-2026-43076Linux kernel ocfs2 inline data validation use-after-free7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43075Linux kernel ocfs2 inline data out-of-bounds write7.8CNA v3.10.2%2026-05-06Fix
CVE-2026-43074Linux kernel eventpoll use-after-free7.8CNA v3.10.2%2026-05-06Exploit codeFix
CVE-2026-42509Apache Wicket: Crafted strings can break out of the JavaScript sequence6.1v3.10.4%2026-05-06Fix
CVE-2026-42503Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/Gopls8.8CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-41938Vvveb RCE via Media upload handler8.7CNA v4.01.0%2026-05-06Fix
CVE-2026-41936Vvveb XML external entity injection via Import8.6CNA v4.00.5%2026-05-06Fix
CVE-2026-41934Vvveb Authenticated RCE via Code Editor8.7CNA v4.01.0%2026-05-06Fix
CVE-2026-41931Vvveb information disclosure via Debug Exception handler6.9CNA v4.00.4%2026-05-06Fix
CVE-2026-41930Vvveb hard-coded credentials information disclosure via phpMyAdmin9.2CNA v4.00.6%2026-05-06Fix
CVE-2026-41484OpenTelemetry.Exporter.OneCollector vulnerable to denial of service5.3CNA v3.10.4%2026-05-06Fix
CVE-2026-41483Unbounded HTTP response body read in OpenTelemetry.Resources.Azure5.9CNA v3.10.4%2026-05-06Fix
CVE-2026-41417Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri5.3CNA v3.10.3%2026-05-06Fix
CVE-2026-41310opentelemetry-dotnet resource exhaustion5.3CNA v3.10.4%2026-05-06Fix
CVE-2026-41288WatchGuard Agent on Windows privilege escalation7.3CNA v4.00.1%2026-05-06Fix
CVE-2026-41287WatchGuard Agent stack-based buffer overflow7.1CNA v4.00.3%2026-05-06Fix
CVE-2026-41286WatchGuard Agent stack-based buffer overflow7.1CNA v4.00.3%2026-05-06Fix
CVE-2026-40562Gazelle versions for Perl allows HTTP request smuggling via Improper Header Precedence7.5CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-40332MasaCMS masa CMS open redirect via improper handling of scheme-relative URLs5.3CNA v4.00.5%2026-05-06Fix
CVE-2026-40326MasaCMS masa CMS CSRF in site bundle creation allows unauthorized site data export7.1CNA v4.00.2%2026-05-06Fix
CVE-2026-40325MasaCMS masa CMS CSRF in content restoration allows unauthorized restoration of deleted content8.7CNA v4.00.2%2026-05-06Fix
CVE-2026-40309MasaCMS masa CMS CSRF in trash management allows unauthorized permanent deletion of deleted content7.2CNA v4.00.2%2026-05-06Fix
CVE-2026-40296PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes5.4CNA v3.10.2%2026-05-06Fix
CVE-2026-40281Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values10.0CNA v3.12.1%2026-05-06NucleiExploit codeFix
CVE-2026-40251Incus out-of-bounds panic in snapshot metadata handling allows denial of service7.1CNA v4.00.5%2026-05-06Fix
CVE-2026-40243Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation2.3CNA v4.00.2%2026-05-06Fix
CVE-2026-40197Incus nil-pointer dereference in custom volume import allows denial of service7.1CNA v4.00.4%2026-05-06Fix
CVE-2026-40195Incus nil-pointer dereference in storage bucket import allows denial of service7.1CNA v4.00.4%2026-05-06Fix
CVE-2026-40174MasaCMS masa CMS CSRF in user address management allows unauthorized address changes7.1CNA v4.00.2%2026-05-06Fix
CVE-2026-40171Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker8.4CNA v4.00.7%2026-05-06Fix
CVE-2026-40076OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload9.4CNA v4.00.9%2026-05-06
CVE-2026-40010Apache Wicket: Possible session fixation using AuthenticatedWebSession9.1v3.10.4%2026-05-06Fix
CVE-2026-40001Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client5.2CNA v3.10.2%2026-05-06
CVE-2026-36358Juzaweb CMS v.5.0.0 cross-site scripting5.4CISA ADP v3.10.3%2026-05-06Exploit code
CVE-2026-35255Oracle Cloud Native Environment Command Line Interface code injection6.6CNA v3.10.2%2026-05-06
CVE-2026-35254Oracle OCI CLI of Oracle Open Source Projects path traversal6.1CNA v3.10.2%2026-05-06Fix
CVE-2026-35253Oracle Macaron Tool of Oracle Open Source Projects origin validation error4.7CNA v3.10.2%2026-05-06
CVE-2026-34474ZTE ZXHN H298A information disclosure7.5CISA ADP v3.12.1%2026-05-06Emerging ThreatsExploit code
CVE-2026-34473ZTE H8102E Unauthenticated denial of service7.5CISA ADP v3.11.9%2026-05-06Exploit code
CVE-2026-33079Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles8.7CNA v4.00.7%2026-05-06Fix
CVE-2026-29090Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database9.0CNA v4.00.5%2026-05-06Fix
CVE-2026-29080Rucio SQL injection in FilterEngine Oracle JSON Path via DID Search API9.4CNA v4.00.5%2026-05-06Fix
CVE-2026-23928Zabbix stored XSS vulnerability in the Item history/Plain text widget7.3CNA v4.00.3%2026-05-06Fix
CVE-2026-23927Zabbix agent 2 Oracle plugin TNS connection string injection via the service parameter5.1CNA v4.00.2%2026-05-06Fix
CVE-2026-23926Zabbix stored XSS vulnerability in host navigator widget maintenance tooltip7.3CNA v4.00.3%2026-05-06Fix
CVE-2026-23870Facebook React has a denial of service vulnerability in React Server components7.5CNA v3.11.5%2026-05-06Exploit codeFix
CVE-2026-21661AC2000 uncontrolled search path element8.4CNA v4.00.1%2026-05-06Fix
CVE-2026-20219Cisco Slido insecure direct object reference5.4CNA v3.10.2%2026-05-06Fix
CVE-2026-20195Cisco Identity Services Engine observable response discrepancy5.3CNA v3.10.3%2026-05-06Fix
CVE-2026-20193Cisco Identity Services Engine authentication bypass4.3CNA v3.10.2%2026-05-06Fix
CVE-2026-20189Cisco Prime Infrastructure information disclosure4.3CNA v3.10.2%2026-05-06Fix
CVE-2026-20188Cisco Crosswork Network controller and Cisco Network Services Orchestrator Advisory0.0CNA v3.10.3%2026-05-06Fix
CVE-2026-20185Cisco SG350 and SG350X Series Managed Switches SNMP denial of service Vunerability7.7CNA v3.10.4%2026-05-06
CVE-2026-20172Cisco Enterprise Chat and Email Lite agent file upload4.3CNA v3.10.1%2026-05-06Fix
CVE-2026-20169Cisco IoT Field Network Director command injection6.4CNA v3.10.2%2026-05-06Exploit codeFix
CVE-2026-20168Cisco IoT Field Network Director path traversal6.5CNA v3.10.3%2026-05-06Fix
CVE-2026-20167Cisco IoT Field Network Director Remote Device denial of service7.7CNA v3.10.3%2026-05-06Fix
CVE-2026-20035Cisco Unity Connection server-side request forgery7.2CNA v3.10.3%2026-05-06Fix
CVE-2026-20034Cisco Unity Connection remote code execution8.8CNA v3.10.7%2026-05-06Fix
CVE-2026-8033PicoTronica e-Clinic Healthcare System ECHS Response header v2 information disclosure6.9CNA v4.00.5%2026-05-06
CVE-2026-8032PicoTronica e-Clinic Healthcare System ECHS echs.js hard-coded credentials6.9CNA v4.00.5%2026-05-06
CVE-2026-8031PicoTronica e-Clinic Healthcare System ECHS API endpoint patient-records missing authentication6.9CNA v4.00.7%2026-05-06
CVE-2026-8028FlowiseAI Flowise endpoint account.service.ts verify information disclosure6.3CNA v4.00.5%2026-05-06
CVE-2026-8027FlowiseAI Flowise User controller authorization5.3CNA v4.00.4%2026-05-06
CVE-2026-8026FlowiseAI Flowise API Response account.service.ts login information disclosure5.3v3.10.4%2026-05-06
CVE-2026-8022Google Chrome MHTML inappropriate implementation3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8021Google Chrome UI injection4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8020Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8019Google Chrome WebApp insufficient policy enforcement5.4CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8018Google Chrome DevTools insufficient policy enforcement8.1CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8017Google Chrome Media side-channel information leak3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8016Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-8015Google Chrome Media inappropriate implementation5.4CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8014Google Chrome Preload inappropriate implementation4.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8013Google Chrome improper input validation4.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8012Google Chrome MHTML inappropriate implementation5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8011Google Chrome Search insufficient policy enforcement4.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8010Google Chrome improper input validation6.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8009Google Chrome Cast inappropriate implementation5.0CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8008Google Chrome DevTools inappropriate implementation5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8007Google Chrome privilege escalation7.5CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8006Google Chrome DevTools insufficient policy enforcement5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8005Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8004Google Chrome DevTools insufficient policy enforcement4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8003Google Chrome spoofing5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-8002Google Chrome Audio use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-8001Google Chrome Printing use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-8000Google Chrome arbitrary code execution8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7999Google Chrome V8 inappropriate implementation4.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7998Google Chrome spoofing5.4CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7997Google Chrome privilege escalation7.8CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7996Google Chrome spoofing4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7995Google Chrome AdFilter out-of-bounds read8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7994Google Chrome Chromoting inappropriate implementation7.8CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7993Google Chrome improper input validation4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7992Google Chrome arbitrary code execution8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7991Google Chrome UI use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7990Google Chrome privilege escalation7.8CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7989Google Chrome DataTransfer improper input validation4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7988Google Chrome WebRTC type confusion8.8CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-7987Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-7986Google Chrome Autofill insufficient policy enforcement4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7985Google Chrome GPU use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7984Google Chrome ReadingMode use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7983Google Chrome Dawn out-of-bounds read4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7982Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7981Google Chrome Codecs out-of-bounds read8.1CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7980Google Chrome WebAudio use-after-free8.8CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-7979Google Chrome Media inappropriate implementation4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7978Google Chrome Companion inappropriate implementation8.1CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7977Google Chrome Canvas inappropriate implementation6.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7976Google Chrome Views use-after-free7.5CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7975Google Chrome DevTools use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7974Google Chrome Blink use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7973Google Chrome Dawn integer overflow8.8CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7972Google Chrome uninitialized variable use4.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7971Google Chrome ORB inappropriate implementation6.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7970Google Chrome TopChrome use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7969Google Chrome Network integer overflow4.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7968Google Chrome improper input validation3.1CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7967Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7966Google Chrome improper input validation3.1CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7965Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7964Google Chrome improper input validation4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7963Google Chrome ServiceWorker inappropriate implementation8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7962Google Chrome DirectSockets insufficient policy enforcement5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7961Google Chrome improper input validation4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7960Google Chrome race condition5.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7959Google Chrome Navigation inappropriate implementation3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7958Google Chrome ServiceWorker inappropriate implementation5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7957Google Chrome Media out-of-bounds write8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7956Google Chrome Navigation use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7955Google Chrome uninitialized variable use5.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7954Google Chrome race condition3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7953Google Chrome improper input validation6.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7952Google Chrome extensions insufficient policy enforcement4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7951Google Chrome WebRTC out-of-bounds write8.8CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-7950Google Chrome GFX out-of-bounds read5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7949Google Chrome Skia out-of-bounds read3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7948Google Chrome race condition7.5CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7947Google Chrome spoofing4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7946Google Chrome WebUI insufficient policy enforcement4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7945Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7944Google Chrome improper input validation3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7943Google Chrome improper input validation4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7942Google Chrome ANGLE integer overflow4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7941Google Chrome improper input validation4.4CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7940Google Chrome V8 use-after-free8.8CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7939Google Chrome SanitizerAPI inappropriate implementation5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7938Google Chrome CSS use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7937Google Chrome DevTools insufficient policy enforcement3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7935Google Chrome Speech inappropriate implementation5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7934Google Chrome improper input validation4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7933Google Chrome WebCodecs out-of-bounds read4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7932Google Chrome Downloads insufficient policy enforcement4.4CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7931Google Chrome spoofing5.4CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7929Google Chrome MediaRecording use-after-free7.5CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7928Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-05-06Fix
CVE-2026-7927Google Chrome Runtime type confusion8.8v3.10.3%2026-05-06Fix
CVE-2026-7926Google Chrome PresentationAPI use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7925Google Chrome Chromoting use-after-free7.8CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7924Google Chrome uninitialized variable use6.5CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7923Google Chrome Skia out-of-bounds write8.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7922Google Chrome ServiceWorker use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7921Google Chrome Passwords use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7920Google Chrome Skia use-after-free8.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7919Google Chrome Aura use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7918Google Chrome GPU use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7917Google Chrome Fullscreen use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7916Google Chrome InterestGroups improper input validation8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7915Google Chrome DevTools improper input validation4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7914Google Chrome Accessibility type confusion8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7913Google Chrome DevTools insufficient policy enforcement7.8CISA ADP v3.10.1%2026-05-06Fix
CVE-2026-7912Google Chrome GPU integer overflow4.2CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7911Google Chrome Aura use-after-free8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7910Google Chrome Views use-after-free9.6v3.10.2%2026-05-06Fix
CVE-2026-7909Google Chrome ServiceWorker inappropriate implementation3.1CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7908Google Chrome Fullscreen use-after-free9.6CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7907Google Chrome DOM use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7906Google Chrome SVG use-after-free8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7905Google Chrome sandbox escape8.3CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7904Google Chrome Fonts out-of-bounds read4.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7903Google Chrome ANGLE integer overflow8.8CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7902Google Chrome V8 out-of-bounds access8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7901Google Chrome ANGLE use-after-free8.8CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7900Google Chrome ANGLE heap-based buffer overflow8.3CISA ADP v3.10.2%2026-05-06Fix
CVE-2026-7899Google Chrome V8 out-of-bounds read8.8CISA ADP v3.10.4%2026-05-06Fix
CVE-2026-7898Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7897Google Chrome Mobile use-after-free7.5CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7896Google Chrome Blink integer overflow8.8CISA ADP v3.10.3%2026-05-06Fix
CVE-2026-7875NanoClaw Host/Container Filesystem Boundary vulnerability via Outbound Attachment Handling9.3CNA v4.00.2%2026-05-06Fix
CVE-2026-7841GeoVision ASManager GV-ASWeb remote code execution (RCE)8.8CNA v3.11.2%2026-05-06Fix
CVE-2026-7573Velocidex Velociraptor has an authorization bypass7.7NVD v3.10.3%2026-05-06Fix
CVE-2026-7572Velociraptor EVTX Parser Process crash via Crafted .evtx file5.5NVD v3.10.1%2026-05-06Fix
CVE-2026-7457LatePoint WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2026-05-06Fix
CVE-2026-7332LatePoint WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-05-06Fix
CVE-2026-6863Rapid7 Velociraptor HTTP Filestore Endpoints Misapply Permissions across Organizations6.8CNA v3.10.4%2026-05-06Fix
CVE-2026-6860Vert.x has a DoS via unbounded server-side SNI SslContext cache growth6.9CNA v4.00.3%2026-05-06Fix
CVE-2026-6788Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent8.5CNA v4.00.2%2026-05-06Fix
CVE-2026-6787WatchGuard Agent hard-coded cryptographic key8.5CNA v4.00.2%2026-05-06Fix
CVE-2026-6691MongoDB C Driver Cyrus SASL Canonicalization buffer overflow8.6CNA v4.00.2%2026-05-06Fix
CVE-2026-6672Affiliate Program Suite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-06Fix
CVE-2026-6420Red Hat Enterprise Linux 10 keylime: Keylime: Security bypass due to hard-coded tpm quote nonce6.3CNA v3.10.2%2026-05-06Fix
CVE-2026-6344Fluent Forms WordPress plugin arbitrary file read4.9CNA v3.10.8%2026-05-06Fix
CVE-2026-6210Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash8.7CNA v4.00.5%2026-05-06Fix
CVE-2026-5753All-in-One WP Migration Unlimited Extension WordPress plugin missing authorization6.5CNA v3.10.4%2026-05-06Fix
CVE-2026-5081Apache::Session::Generate::ModUniqueId versions from for Perl session ids are insecure9.1CISA ADP v3.10.5%2026-05-06
CVE-2026-3291Samsung Print Service Plugin potential information disclosure6.9CNA v4.00.1%2026-05-06Fix
CVE-2026-3208Mercado Pago payments for WooCommerce WordPress plugin unauthorized access5.3CNA v3.10.4%2026-05-06Fix
CVE-2026-2306Ninja Tables WordPress plugin missing authorization authenticated arbitrary Table creation4.3CNA v3.10.2%2026-05-06Fix
CVE-2026-1719Gravity Bookings WordPress plugin unauthenticated SQL injection via category_id parameter7.5CNA v3.10.3%2026-05-06Fix
CVE-2026-0300Palo Alto Networks PAN-OS out-of-bounds write9.3CNA v4.031.7%2026-05-06KEVExploit codeFix
CVE-2026-44331ProFTPD SQL injection8.1CNA v3.10.5%2026-05-05Fix
CVE-2026-44029NixOS Nix absolute path traversal5.3CNA v3.10.8%2026-05-05Fix
CVE-2026-44028NixOS Nix uncontrolled recursion7.5CNA v3.10.2%2026-05-05Fix
CVE-2026-43870Apache Thrift: Node.js web_server.js multi-vulnerability7.3CISA ADP v3.10.4%2026-05-05Fix
CVE-2026-43869Apache Thrift: TSSLTransportFactory.java hostname verification7.3CISA ADP v3.10.8%2026-05-05Fix
CVE-2026-43868Apache Thrift: Rust implementation vulnerable to pattern5.3CISA ADP v3.11.2%2026-05-05Fix
CVE-2026-43574OpenClaw improper authorization via Empty Approver Lists6.0CNA v4.00.4%2026-05-05Fix
CVE-2026-43573OpenClaw SSRF Policy Bypass in Existing-Session Browser Interaction Routes4.9CNA v4.00.4%2026-05-05Fix
CVE-2026-43572OpenClaw Missing Sender Authorization in Microsoft Teams SSO Invoke handler6.3CNA v4.00.4%2026-05-05Fix
CVE-2026-43571OpenClaw Untrusted Workspace Plugin Shadow Resolution in Channel Setup7.7CNA v4.00.7%2026-05-05Fix
CVE-2026-43570OpenClaw Symlink Traversal in Remote Marketplace Repository Path Handling6.5v3.10.5%2026-05-05Fix
CVE-2026-43569OpenClaw Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth7.7CNA v4.00.7%2026-05-05Fix
CVE-2026-43568OpenClaw privilege escalation via Memory Dreaming Configuration in /dreaming endpoint7.1CNA v4.00.4%2026-05-05Fix
CVE-2026-43567OpenClaw path traversal in screen_record outPath parameter7.1CNA v4.00.4%2026-05-05Fix
CVE-2026-43566OpenClaw privilege escalation via Untrusted Webhook Wake Events9.8v3.10.7%2026-05-05Fix
CVE-2026-43535OpenClaw Authorization Context Reuse in Collect-Mode Queue Batches8.1v3.10.4%2026-05-05Fix
CVE-2026-43534OpenClaw Unsanitized External Input in Agent Hook Events9.8v3.10.3%2026-05-05Fix
CVE-2026-43533OpenClaw arbitrary Local File Read via QQBot Media Tags8.9CNA v4.00.5%2026-05-05Fix
CVE-2026-43532OpenClaw Sandbox Media Normalization Bypass via Discord Event Cover Image4.9CNA v4.00.5%2026-05-05Fix
CVE-2026-43531OpenClaw Environment variable injection via Workspace .env file8.8v3.10.4%2026-05-05Fix
CVE-2026-43530OpenClaw Weakened Exec Approval Binding via busybox and toybox Applet Execution8.7CNA v4.00.6%2026-05-05Fix
CVE-2026-43529OpenClaw time-of-check-time-of-use (TOCTOU) race condition in exec Script Preflight Validator2.0CNA v4.00.1%2026-05-05Fix
CVE-2026-43528OpenClaw Redaction Bypass via sourceConfig and runtimeConfig Aliases7.1CNA v4.00.6%2026-05-05Fix
CVE-2026-43527OpenClaw server-side request forgery via Private Network Navigation7.7v3.10.5%2026-05-05Fix
CVE-2026-43526OpenClaw server-side request forgery via QQBot Reply Media URL Handling9.3v3.10.4%2026-05-05Fix
CVE-2026-43073Linux kernel x86-64 user memory copy routine vulnerability5.5NVD v3.10.2%2026-05-05Fix
CVE-2026-43072Linux kernel vc4 DRM driver vulnerability5.5v3.10.1%2026-05-05Fix
CVE-2026-43071Linux kernel dcache out-of-bounds read9.1CNA v3.10.5%2026-05-05Fix
CVE-2026-43070Linux kernel BPF verifier value tracking out-of-bounds read7.8CNA v3.10.2%2026-05-05Fix
CVE-2026-43069Linux kernel hci_ll Bluetooth driver memory leak5.5v3.10.1%2026-05-05Fix
CVE-2026-43068Linux kernel ext4 memory leak5.5v3.10.1%2026-05-05Fix
CVE-2026-43067Linux kernel ext4 indirect block allocation vulnerability9.8CNA v3.10.7%2026-05-05Fix
CVE-2026-43066Linux kernel ext4 fast commit replay memory leak5.5v3.10.1%2026-05-05Fix
CVE-2026-43065Linux kernel ext4 discard work queue vulnerability5.5v3.10.1%2026-05-05Fix
CVE-2026-43064Linux kernel idxd workqueue release vulnerability5.5v3.10.1%2026-05-05Fix
CVE-2026-43063Linux kernel XFS attribute intent recovery vulnerability7.8CNA v3.10.2%2026-05-05Fix
CVE-2026-43062Linux kernel L2CAP ECRED reconfiguration type confusion7.1CNA v3.10.3%2026-05-05Fix
CVE-2026-43061Linux kernel 8250 serial driver DMA deadlock5.5v3.10.1%2026-05-05Fix
CVE-2026-43060Linux kernel netfilter nft_ct expression vulnerability7.8CNA v3.10.2%2026-05-05Fix
CVE-2026-43059Linux kernel Bluetooth MGMT command handling use-after-free7.8NVD v3.10.2%2026-05-05Fix
CVE-2026-43002OpenStack Horizon has incorrect behavior order5.3CNA v3.10.6%2026-05-05Fix
CVE-2026-42997OpenStack Ironic has an incorrect resource transfer between spheres7.7CNA v3.10.5%2026-05-05Fix
CVE-2026-42439OpenClaw SSRF Policy Bypass in Browser Tabs Action Routes4.9CNA v4.00.4%2026-05-05Fix
CVE-2026-42438OpenClaw Sender Policy Bypass in Host Media Attachment Reads4.9CNA v4.00.4%2026-05-05Fix
CVE-2026-42437OpenClaw denial of service via Oversized WebSocket Frames in Voice-call Realtime Path8.2CNA v4.00.8%2026-05-05Fix
CVE-2026-42436OpenClaw Internal Page Content Exposure via Browser Snapshot and Screenshot Routes4.9CNA v4.00.5%2026-05-05Fix
CVE-2026-42435OpenClaw Shell-Wrapper Detection Bypass via Environment Variable Assignment injection8.7CNA v4.00.7%2026-05-05Fix
CVE-2026-42434OpenClaw sandbox escape via host Parameter Override in Exec Routing8.7CNA v4.00.6%2026-05-05Fix
CVE-2026-42433OpenClaw Unauthorized Matrix Profile Config Persistence Access via operator.write message tools7.1CNA v4.00.4%2026-05-05Fix
CVE-2026-41950Dify authorization bypass via File UUID6.0CNA v4.00.5%2026-05-05Fix
CVE-2026-40934jupyter-server authentication cookies remain valid after password reset due to static cookie secret7.6CNA v4.00.4%2026-05-05Fix
CVE-2026-40797WebinarIgnition WordPress plugin SQL injection9.3CNA v3.10.4%2026-05-05Fix
CVE-2026-40331MasaCMS masa CMS unauthenticated SQL injection via altTable parameter in JSON API9.3CNA v4.00.5%2026-05-05
CVE-2026-40330MasaCMS masa CMS SQL injection via sortDirection parameter in beanFeed9.3CNA v4.00.7%2026-05-05
CVE-2026-40329MasaCMS SQL injection vulnerability via sortBy in beanFeed9.3CNA v4.00.5%2026-05-05Fix
CVE-2026-40280Gotenberg SSRF via case-insensitive URL scheme bypass in webhook and downloadFrom deny-lists7.8CNA v4.02.1%2026-05-05NucleiFix
CVE-2026-40110jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat7.6CNA v4.00.5%2026-05-05Fix
CVE-2026-40075OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet8.2CNA v4.00.7%2026-05-05Fix
CVE-2026-40068anthropics claude-code claude Code arbitrary code execution7.7CNA v4.00.6%2026-05-05Fix
CVE-2026-39852Quarkus authorization bypass via semicolon path normalization inconsistency8.8CNA v4.00.6%2026-05-05Fix
CVE-2026-39849Pi-hole FTL remote code execution via newline injection in dns.interface configuration8.7CNA v4.01.0%2026-05-05Fix
CVE-2026-39402lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion4.3CNA v4.00.1%2026-05-05Fix
CVE-2026-39383Gotenberg unauthenticated blind SSRF via unfiltered webhook URL6.9CNA v4.00.3%2026-05-05Fix
CVE-2026-39103gpac buffer overflow5.5CISA ADP v3.10.2%2026-05-05
CVE-2026-38947FluentCMS TextHTML plugin cross-site scripting6.1CISA ADP v3.10.3%2026-05-05
CVE-2026-38432frappe erpnext cross-site scripting6.1CISA ADP v3.10.3%2026-05-05
CVE-2026-38431frappe erpnext code injection9.8CISA ADP v3.10.6%2026-05-05
CVE-2026-38429OpenCms admin import DB feature XML external entity injection9.8CISA ADP v3.10.5%2026-05-05
CVE-2026-38428kestra SQL injection9.8CISA ADP v3.10.5%2026-05-05
CVE-2026-36356MeiG Smart FORGE_SLT711 GoAhead web server SetRemoteAccessCfg endpoint OS command injection9.1CISA ADP v3.13.6%2026-05-05Emerging ThreatsExploit code
CVE-2026-36355Realtek rtl819x Jungle SDK rtl8192cd Wi-Fi driver improper access control7.7CISA ADP v3.10.6%2026-05-05Exploit code
CVE-2026-35579CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports8.2CNA v4.00.8%2026-05-05Fix
CVE-2026-35527Incus blind SSRF via image import preflight HEAD request5.3CNA v4.00.3%2026-05-05Fix
CVE-2026-35453PhpSpreadsheet XSS via number format text substitution in HTML Writer4.8CNA v4.00.2%2026-05-05Fix
CVE-2026-35397jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix7.6CNA v4.00.7%2026-05-05Fix
CVE-2026-35228Oracle MCP Server Helper Tool product of Oracle Open Source Projects SQL injection8.7CNA v3.10.4%2026-05-05Fix
CVE-2026-35192Django session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST2.3CNA v4.00.7%2026-05-05Fix
CVE-2026-34956Red Hat Fast Datapath for RHEL 7 openvswitch: Open vswitch: Denial of service5.9CNA v3.10.6%2026-05-05Fix
CVE-2026-34596Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation5.4CNA v4.00.1%2026-05-05Fix
CVE-2026-34527Sandboxie-Plus EditPassword hash generation vulnerability2.0CNA v4.00.1%2026-05-05Fix
CVE-2026-34464Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field8.8CNA v4.00.2%2026-05-05Fix
CVE-2026-34462Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy7.3CNA v4.00.2%2026-05-05Fix
CVE-2026-34461Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation7.3CNA v4.00.2%2026-05-05Fix
CVE-2026-34459Sandboxie-Plus sandbox escape8.8CNA v4.00.2%2026-05-05Fix
CVE-2026-34458Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly9.3CNA v4.00.3%2026-05-05Fix
CVE-2026-34408Gambio password reset function vulnerability9.1CISA ADP v3.10.4%2026-05-05
CVE-2026-34084PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load9.2CNA v4.00.8%2026-05-05Fix
CVE-2026-34002Xorg: Xwayland: X.Org X server: Information disclosure or denial of service9.1NVD v3.10.5%2026-05-05Fix
CVE-2026-34000Xwayland: Xorg: X.Org X server: Information disclosure and denial of service9.1NVD v3.10.5%2026-05-05Fix
CVE-2026-33975twentyhq twenty twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization8.3CNA v4.00.4%2026-05-05
CVE-2026-33489CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison8.2CNA v4.00.4%2026-05-05Fix
CVE-2026-33420Vaultwarden missing authorization check allows Manager-role users to enumerate all collections5.3CNA v4.00.3%2026-05-05Fix
CVE-2026-33324SQLBot prompt injection allows arbitrary SQL execution and remote code execution9.4CNA v4.00.8%2026-05-05Fix
CVE-2026-33190CoreDNS TSIG authentication bypass on encrypted DNS transports8.7CNA v4.00.5%2026-05-05Fix
CVE-2026-32936CoreDNS DoH GET path missing size validation causes CPU and memory amplification8.7CNA v4.00.6%2026-05-05Fix
CVE-2026-32934CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service8.7CNA v4.00.6%2026-05-05Fix
CVE-2026-32699FacturaScripts unauthorized modification of immutable nick field via EditUser controller5.3CNA v4.00.4%2026-05-05Exploit code
CVE-2026-32689Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix8.7CNA v4.00.5%2026-05-05Fix
CVE-2026-32603Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process8.2CNA v4.00.2%2026-05-05Fix
CVE-2026-31893Tunnelblick arbitrary file read via symlink following in tunnelblickd6.8CNA v4.00.2%2026-05-05Fix
CVE-2026-31835Vaultwarden WebAuthn credential metadata tampered before signature verification5.3CNA v4.00.2%2026-05-05Fix
CVE-2026-31196Altice Labs GR140DG Fibre Router traceroute diagnostic handler OS command injection8.8CISA ADP v3.12.3%2026-05-05
CVE-2026-31195Altice Labs GR140DG Fibre Router ping diagnostic handler OS command injection8.8CISA ADP v3.12.3%2026-05-05
CVE-2026-30923owasp-modsecurity ModSecurity libModSecurity3 denial of service8.2CNA v4.00.5%2026-05-05Fix
CVE-2026-30246Github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters6.5CNA v3.10.4%2026-05-05Fix
CVE-2026-29168Apache HTTP Server: Mod_md unrestricted OCSP response7.3CISA ADP v3.11.1%2026-05-05Fix
CVE-2026-28780Apache HTTP Server: Buffer overflow in mod_proxy_ajp via ajp_msg_check_header9.8CISA ADP v3.11.6%2026-05-05Fix
CVE-2026-28510elabftw allows MFA bypass during login5.9CNA v3.10.4%2026-05-05Fix
CVE-2026-27960OpenCTI privilege escalation and unauthenticated access via default admin account9.8CNA v3.11.8%2026-05-05NucleiMetasploitEmerging ThreatsKCVFix
CVE-2026-27694traccar allows stored HTML injection in notification emails5.4CNA v3.10.2%2026-05-05Fix
CVE-2026-27693traccar allows XML injection in KML and GPX exports5.4CNA v3.10.3%2026-05-05Fix
CVE-2026-27644traccar allows CSV formula injection via exported position data6.5CNA v3.10.4%2026-05-05Fix
CVE-2026-25589RedisBloom RESTORE invalid memory access may allow remote code execution7.7CNA v4.00.8%2026-05-05Exploit codeFix
CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code execution7.7CNA v4.00.8%2026-05-05Fix
CVE-2026-25243redis redis-server RESTORE invalid memory access may allow remote code execution7.7CNA v4.03.7%2026-05-05Reported exploitedExploit codeFix
CVE-2026-23631redis redis-server Lua use-after-free may allow remote code execution6.1CNA v4.02.8%2026-05-05Exploit codeFix
CVE-2026-23479redis redis-server use-after-free in unblock client flow may allow remote code execution7.7CNA v4.01.5%2026-05-05Exploit codeFix
CVE-2026-7865Crestron Electronics Touchpanels (x60/x70) hidden console command7.4CNA v4.01.0%2026-05-05Fix
CVE-2026-7857D-Link DI-8100 CGI user_group.asp sprintf buffer overflow8.6CNA v4.01.2%2026-05-05Emerging Threats
CVE-2026-7856D-Link DI-8100 Web Management url_member.asp buffer overflow8.6CNA v4.01.2%2026-05-05Emerging Threats
CVE-2026-7855D-Link DI-8100 HTTP request tggl.asp tggl_asp buffer overflow7.2v3.11.2%2026-05-05
CVE-2026-7854D-Link DI-8100 POST parameter url_rule.asp url_rule_asp buffer overflow9.3CNA v4.01.9%2026-05-05Emerging Threats
CVE-2026-7853D-Link DI-8100 HTTP auto_reboot.asp sprintf buffer overflow9.3CNA v4.01.9%2026-05-05Emerging Threats
CVE-2026-7851D-Link DI-8100 yyxz.asp sprintf stack-based overflow8.6CNA v4.01.2%2026-05-05Emerging Threats
CVE-2026-7847chatchat-space Langchain-Chatchat Uploaded file openai_routes.py _get_file_id random values2.1CNA v4.00.3%2026-05-05
CVE-2026-7846chatchat-space Langchain-Chatchat OpenAI-Compatible file upload API openai_routes.py files toctou2.1CNA v4.00.2%2026-05-05
CVE-2026-7845chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash2.1CNA v4.00.2%2026-05-05
CVE-2026-7844chatchat-space Langchain-Chatchat file service API missing authentication5.3CNA v4.00.5%2026-05-05
CVE-2026-7834EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow9.3CNA v4.01.0%2026-05-05
CVE-2026-7833EFM ipTIME C200 ApplyRestore endpoint iux_set.cgi sub_408F90 command injection8.6CNA v4.04.4%2026-05-05
CVE-2026-7832IObit Advanced SystemCare Service ASC.exe symlink7.3CNA v4.00.2%2026-05-05
CVE-2026-7824PaperCut Hive (Ricoh): Plain text password in logs5.9CNA v4.00.4%2026-05-05Fix
CVE-2026-7823Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection9.3CNA v4.03.3%2026-05-05
CVE-2026-7822itsourcecode Courier Management System print_pdets.php SQL injection5.3CNA v4.00.3%2026-05-05
CVE-2026-781254yyyu code-mcp MCP tool server.py git_operation command injection6.9CNA v4.02.1%2026-05-05
CVE-2026-781154yyyu code-mcp MCP file server.py is_safe_path path traversal6.9CNA v4.00.6%2026-05-05
CVE-2026-7810UsamaK98 python-notebook-mcp server.py add_cell path traversal6.9CNA v4.00.6%2026-05-05
CVE-2026-7788Axle-Bucamp MCP-Docusaurus document.py get_content path traversal6.9CNA v4.00.6%2026-05-05
CVE-2026-7785A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection6.9CNA v4.02.1%2026-05-05
CVE-2026-7784RTGS2017 NagaAgent Skills endpoint extensions.py path traversal6.9CNA v4.00.6%2026-05-05
CVE-2026-7783CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery SQL injection5.3CNA v4.00.3%2026-05-05
CVE-2026-7778runZero Platform dashboard configuration exposure5.0CNA v3.10.3%2026-05-05Fix
CVE-2026-7412Eclipse BaSyx Java Server SDK vulnerable to server-side request forgery8.6CNA v3.10.5%2026-05-05Fix
CVE-2026-7411Eclipse BaSyx Java Server SDK vulnerable to path traversal10.0CNA v3.11.5%2026-05-05Fix
CVE-2026-6918Eclipse OpenJ9 out-of-bounds read8.7CNA v4.01.2%2026-05-05Fix
CVE-2026-6907Django Uses Cache Containing Sensitive Information2.3CNA v4.00.4%2026-05-05Fix
CVE-2026-6704Blog Settings WordPress plugin reflected cross-site scripting via page parameter6.1CNA v3.10.4%2026-05-05
CVE-2026-6702Publish 2 Ping.fm WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2026-05-05
CVE-2026-6701addfreespace WordPress plugin cross-site request forgery to stored cross-site scripting4.3CNA v3.10.2%2026-05-05
CVE-2026-6700DX Sources WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-05-05
CVE-2026-6696Zingaya Click-to-Call WordPress plugin reflected cross-site scripting via email parameter6.1CNA v3.10.4%2026-05-05
CVE-2026-6418PaperCut NG/MF: Path traversal in Shared Account Synchronization4.6CNA v4.00.6%2026-05-05Fix
CVE-2026-6322fast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5CNA v3.10.7%2026-05-05Fix
CVE-2026-6262Betheme WordPress theme authenticated (Contributor+) arbitrary file deletion via mfn-icon-upload6.5CNA v3.10.4%2026-05-05Fix
CVE-2026-6261Betheme WordPress theme arbitrary file upload to remote code execution8.8CNA v3.10.8%2026-05-05Fix
CVE-2026-6255Simple Owl Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-05
CVE-2026-6180PaperCut MF: Card truncation on HP readers4.1CNA v4.00.4%2026-05-05Fix
CVE-2026-5957EmailKit WordPress plugin arbitrary file read6.5CNA v3.10.7%2026-05-05Fix
CVE-2026-5766Django potential denial of service vulnerability in ASGI requests via file upload limit bypass6.3CNA v4.00.5%2026-05-05Fix
CVE-2026-5722MoreConvert Pro WordPress plugin authentication bypass via Waitlist Guest verification Token Reuse9.8CNA v3.10.8%2026-05-05Fix
CVE-2026-5505WP-Clippy WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-05
CVE-2026-5294GeekyBot WordPress plugin missing authorization unauthenticated arbitrary plugin installation9.8CNA v3.10.8%2026-05-05Fix
CVE-2026-5247Schedule Post Changes With PublishPress Future WordPress plugin stored cross-site scripting5.5CNA v3.10.4%2026-05-05Fix
CVE-2026-5192Forminator Forms WordPress plugin path traversal7.5CNA v3.10.6%2026-05-05Fix
CVE-2026-5159Royal Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-05-05Fix
CVE-2026-5100AWP Classifieds WordPress plugin unauthenticated SQL injection via regions7.5CNA v3.10.7%2026-05-05Fix
CVE-2026-4803Royal Addons for Elementor WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-05-05Fix
CVE-2026-4730Common Ninja Charts Ninja chartid shortcode attribute stored cross-site scripting6.4CNA v3.10.3%2026-05-05
CVE-2026-4665WP Carousel Free WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-05Fix
CVE-2026-4409Subscribe To Comments Reloaded WordPress plugin unauthorized access6.5CNA v3.10.4%2026-05-05
CVE-2026-4362ElementsKit Elementor Addons WordPress plugin unauthorized access6.5CNA v3.10.6%2026-05-05Fix
CVE-2026-4304WeePie Cookie Allow WordPress plugin unauthenticated SQL injection via consent parameter7.5CNA v3.10.5%2026-05-05Fix
CVE-2026-3601User Registration and Membership WordPress plugin unauthorized access4.3CNA v3.10.4%2026-05-05Fix
CVE-2026-3456GeekyBot WordPress plugin SQL injection7.5CNA v3.10.5%2026-05-05Fix
CVE-2026-3454GenerateBlocks WordPress plugin insecure direct object reference6.5CNA v3.10.5%2026-05-05Fix
CVE-2026-3359Form Maker by 10Web WordPress plugin SQL injection7.5CNA v3.10.5%2026-05-05Exploit codeFix
CVE-2026-2948Gutenverse Ultimate WordPress FSE Blocks Addons and Ecosystem plugin server-side request forgery6.4CNA v3.10.3%2026-05-05Fix
CVE-2026-2868Gutenverse Ultimate WordPress FSE Blocks Addons and Ecosystem plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-05Fix
CVE-2026-2729Forminator WordPress plugin authorization bypass5.3CNA v3.10.4%2026-05-05Fix
CVE-2026-1921Loco Translate WordPress plugin path traversal to limited file read4.9CNA v3.10.6%2026-05-05Fix
CVE-2026-43964Postfix off-by-one error7.5v3.10.5%2026-05-04Fix
CVE-2026-43864mutt null pointer dereference2.5CNA v3.10.1%2026-05-04Fix
CVE-2026-43863mutt GPGME data stream handling infinite loop3.7CNA v3.10.3%2026-05-04Fix
CVE-2026-43862mutt type confusion3.7CNA v3.10.3%2026-05-04Fix
CVE-2026-43861mutt URL percent-decoding vulnerability3.7CNA v3.10.3%2026-05-04Fix
CVE-2026-43860mutt off-by-one error3.7CNA v3.10.3%2026-05-04Fix
CVE-2026-43859mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.3.7CNA v3.10.3%2026-05-04Fix
CVE-2026-43616Detect-it-easy path traversal arbitrary file write7.8v3.10.2%2026-05-04Fix
CVE-2026-42812Apache Polaris: No protection on `write.metadata.path`9.4CNA v4.00.6%2026-05-04Fix
CVE-2026-42811Apache Polaris has an improper input validation issue9.4CNA v4.00.7%2026-05-04Fix
CVE-2026-42810Apache Polaris has an improper input validation issue9.4CNA v4.00.7%2026-05-04Fix
CVE-2026-42809Apache Polaris: Staged table creation could vend storage credentials for unvalidated locations9.4CNA v4.00.6%2026-05-04Fix
CVE-2026-42796Arelle Unauthenticated RCE via /rest/configure9.2CNA v4.03.9%2026-05-04NucleiFix
CVE-2026-42440Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader7.5CISA ADP v3.11.1%2026-05-04Fix
CVE-2026-42376D-Link Dir-456u A1 Hard-coded Telnet backdoor Credentials9.8CNA v3.10.8%2026-05-04
CVE-2026-42375D-Link DIR-600L A1 Hard-coded Telnet backdoor Credentials8.8NVD v3.11.0%2026-05-04
CVE-2026-42374D-Link DIR-600L B1 Hard-coded Telnet backdoor Credentials8.8NVD v3.11.0%2026-05-04
CVE-2026-42373D-Link DIR-605L B2 Hard-coded Telnet backdoor Credentials8.8NVD v3.11.0%2026-05-04
CVE-2026-42372D-Link DIR-605L A1 Hard-coded Telnet backdoor Credentials8.8CNA v3.10.5%2026-05-04
CVE-2026-42370GeoVision GV-VMS V20 WebCam server login stack overflow9.0CNA v3.11.0%2026-05-04Fix
CVE-2026-42369GeoVision GV-VMS V20 WebCam server stack overflow10.0CNA v3.10.9%2026-05-04Fix
CVE-2026-42368GeoVision LPC2011/LPC2211 web interface privilege escalation9.9CNA v3.10.6%2026-05-04Fix
CVE-2026-42367GeoVision LPC2011/LPC2211 Web interface / ssi.cgi privilege escalation vulnerability6.5CNA v3.10.5%2026-05-04Fix
CVE-2026-42366GeoVision LPC2011/LPC2211 Web interface / ssi.cgi reflected cross-site scripting (XSS)7.4CNA v3.10.3%2026-05-04Fix
CVE-2026-42365GeoVision LPC2011/LPC2211 Web interface guessable session cookie vulnerability8.6CNA v3.10.6%2026-05-04Fix
CVE-2026-42364GeoVision LPC2011/LPC2211 Web interface / DdnsSetting.cgi OS command injection9.9CNA v3.13.3%2026-05-04Fix
CVE-2026-42238Unauthenticated remote code execution via Backup Restore in nginx-ui9.0CNA v4.00.8%2026-05-04Fix
CVE-2026-42237n8n has SQL injection in Snowflake and MySQL Nodes5.3CNA v4.00.4%2026-05-04Fix
CVE-2026-42236n8n vulnerable to unauthenticated denial of service via MCP Client Registration8.7CNA v4.00.7%2026-05-04Fix
CVE-2026-42235n8n Vulnerable to XSS via MCP OAuth client8.8CNA v4.00.5%2026-05-04Fix
CVE-2026-42234n8n has a Python Task Runner sandbox escape7.1CNA v4.00.7%2026-05-04Fix
CVE-2026-42233n8n has SQL injection in Oracle Database Node via Limit field5.3CNA v4.00.5%2026-05-04Fix
CVE-2026-42232n8n has XML Node prototype pollution that to RCE9.4CNA v4.00.5%2026-05-04Fix
CVE-2026-42231n8n has prototype pollution in XML Webhook Body parser that leads to RCE9.4CNA v4.00.8%2026-05-04Exploit codeFix
CVE-2026-42230n8n has open redirect in MCP OAuth Consent Flow5.1CNA v4.00.3%2026-05-04Fix
CVE-2026-42229n8n has SQL injection in SeaTable Node5.3CNA v4.00.6%2026-05-04Fix
CVE-2026-42228n8n vulnerable to Hijacking of Unauthenticated Chat Execution6.3CNA v4.00.5%2026-05-04Fix
CVE-2026-42227n8n has Public API Variables IDOR that allows Cross-Project secret disclosure6.0CNA v4.00.3%2026-05-04Fix
CVE-2026-42226N8n's Credential authorization bypass in dynamic-node-parameters allows Foreign API Key Replay7.1CNA v4.00.4%2026-05-04Fix
CVE-2026-42223Nginx-UI Settings API exposes Protected Secrets6.5CNA v3.10.4%2026-05-04Fix
CVE-2026-422220xJacky nginx-ui installation bootstrap endpoint missing authentication8.1CNA v3.10.5%2026-05-04
CVE-2026-42221Nginx-UI: Unauthenticated First-Run Installer allows Remote Initial Admin Claim8.1CNA v3.11.6%2026-05-04NucleiFix
CVE-2026-422200xJacky nginx-ui settings API node secret exposure information disclosure6.5CNA v3.10.4%2026-05-04Fix
CVE-2026-42154Prometheus: Remote read endpoint allows denial of service via crafted snappy payload7.5CNA v3.10.9%2026-05-04Exploit codeFix
CVE-2026-42151Prometheus Azure AD remote write OAuth client secret exposed via config API7.5CNA v3.10.4%2026-05-04Fix
CVE-2026-42146CImg Library: Uncontrolled memory allocation via nb_colors field in _load_bmp5.5CNA v3.10.2%2026-05-04Fix
CVE-2026-42144CImg Library: Integer overflow in PNM size check bypasses memory guard (_load_pnm)6.1CNA v3.10.2%2026-05-04Fix
CVE-2026-42140xwiki-contrib macro-plantuml server-side request forgery in PlantUML Macro4.4CNA v3.10.2%2026-05-04Fix
CVE-2026-42138Dify vulnerable to stored XSS via SVG-file upload6.9CNA v4.00.3%2026-05-04Fix
CVE-2026-42092Global Settings Publication exposes Sensitive Configuration to any Authenticated User in Titra6.5CNA v3.10.4%2026-05-04
CVE-2026-42091Goshs has Cross-Origin arbitrary file write via missing CSRF on PUT and Wildcard CORS6.5CNA v3.10.2%2026-05-04Fix
CVE-2026-42090Notesnook: RCE via stored XSS in note export rendering9.6CNA v3.10.8%2026-05-04Fix
CVE-2026-42088OpenC3 COSMOS: Administrative Actions via the Script Runner tool9.6CNA v3.10.5%2026-05-04Fix
CVE-2026-42087OpenC3 COSMOS: SQL injection in QuestDB Time-Series Data Base9.6CNA v3.10.4%2026-05-04Fix
CVE-2026-42086OpenC3 COSMOS: Self-XSS in the Command Sender4.6CNA v3.10.3%2026-05-04Fix
CVE-2026-42085OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames4.3CNA v3.10.4%2026-05-04Fix
CVE-2026-42084OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence8.1CNA v3.10.4%2026-05-04Fix
CVE-2026-42080PPTAgent: Arbitrary file write via `save_generated_slides`4.6CNA v3.10.3%2026-05-04Fix
CVE-2026-42079PPTAgent: Arbitrary code execution via Python eval of LLM-Generated Code with Builtins in Scope8.6CNA v3.10.2%2026-05-04Fix
CVE-2026-42078PPTAgent: Arbitrary file write + Directory Creation via markdown_table_to_image4.6CNA v3.10.3%2026-05-04Fix
CVE-2026-42077Evolver: Prototype pollution via `Object.assign` in mailbox store operations5.2CNA v3.10.3%2026-05-04Fix
CVE-2026-42076Evolver: Command injection via `execSync` in `_extractLLM` function allows remote code execution9.8CNA v3.12.6%2026-05-04Fix
CVE-2026-42075Evolver: Path traversal via `--out` flag in `fetch` command allows arbitrary file write8.1CNA v3.10.9%2026-05-04Fix
CVE-2026-42052beets is Vulnerable to XSS6.0CNA v4.00.5%2026-05-04Fix
CVE-2026-42027Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader9.8CISA ADP v3.11.3%2026-05-04Fix
CVE-2026-41927WDR201A WiFi Extender stack-based buffer overflow via firewall.cgi8.3CNA v4.00.6%2026-05-04
CVE-2026-41926WDR201A WiFi Extender OS command injection via firewall.cgi9.3CNA v4.01.9%2026-05-04
CVE-2026-41925WDR201A WiFi Extender OS command injection via adm.cgi (reboot_time)9.3CNA v4.04.1%2026-05-04
CVE-2026-41924WDR201A WiFi Extender OS command injection via makeRequest.cgi9.3CNA v4.03.3%2026-05-04
CVE-2026-41923WDR201A WiFi Extender OS command injection via internet.cgi9.3CNA v4.03.2%2026-05-04
CVE-2026-41922WDR201A WiFi Extender OS command injection via wireless.cgi9.3CNA v4.06.7%2026-05-04
CVE-2026-41686Claude SDK for TypeScript has insecure default File Permissions in Local Filesystem Memory tool4.8CNA v4.00.1%2026-05-04Fix
CVE-2026-41572enchant97 note-mark note Mark: Unauthenticated read of notes and assets in soft-deleted public books5.3CNA v3.10.3%2026-05-04Fix
CVE-2026-41571enchant97 note-mark note Mark: OIDC-registered users authenticated by submitting password null9.4CNA v3.10.5%2026-05-04Fix
CVE-2026-41471Scott Paterson easy-paypal-events-tickets easy PayPal Events and Tickets information disclosure8.2CNA v4.00.6%2026-05-04Fix
CVE-2026-40682Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor9.1CISA ADP v3.10.8%2026-05-04Fix
CVE-2026-40563Apache Atlas: Script injection allows access to unintended data8.1CISA ADP v3.10.6%2026-05-04Fix
CVE-2026-38751OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality7.2CISA ADP v3.10.5%2026-05-04Exploit code
CVE-2026-38669wCMS blog creation vulnerability6.1CISA ADP v3.10.3%2026-05-04
CVE-2026-37461GoBGP has an out-of-bounds read in the ParseIP6Extended function7.5CISA ADP v3.10.6%2026-05-04Fix
CVE-2026-37459FRRouting An integer underflow7.5CISA ADP v3.10.7%2026-05-04Fix
CVE-2026-37458FRRouting denial of service6.5CISA ADP v3.10.4%2026-05-04Fix
CVE-2026-36365Lymphatus caesium-image-compressor PostCompressionActions command injection7.8CISA ADP v3.10.2%2026-05-04
CVE-2026-34059Apache HTTP Server: Mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data7.5CISA ADP v3.11.0%2026-05-04Fix
CVE-2026-34032Apache HTTP Server: Mod_proxy_ajp: Heap buffer over-read due to Missing Null-Termination Check5.3CISA ADP v3.10.9%2026-05-04Fix
CVE-2026-33857Apache HTTP Server: Off-by-one OOB reads in AJP getter functions5.3CISA ADP v3.10.9%2026-05-04Fix
CVE-2026-33846Red Hat Enterprise Linux 10 gnutls: Gnutls: Denial of service7.5CNA v3.11.1%2026-05-04Fix
CVE-2026-33523Apache HTTP Server: Multiple modules: HTTP response splitting forwarding malicious status line6.5CISA ADP v3.10.4%2026-05-04Fix
CVE-2026-33007Apache HTTP Server: Mod_authn_socache crash5.3CISA ADP v3.11.2%2026-05-04Fix
CVE-2026-33006Apache HTTP Server: Mod_auth_digest timing attack4.8CISA ADP v3.10.6%2026-05-04Exploit codeFix
CVE-2026-32834Scott Paterson easy-paypal-events-tickets Easy PayPal Events and Tickets authentication bypass8.7CNA v4.00.8%2026-05-04Fix
CVE-2026-31205Pluck CMS cross-site scripting5.7CNA v3.10.5%2026-05-04
CVE-2026-29514NetBox RCE via RenderTemplateMixin8.7CNA v4.01.1%2026-05-04Fix
CVE-2026-29200WebPros Comet Backup insecure direct object reference9.9CNA v4.00.5%2026-05-04Fix
CVE-2026-29199phpBB has Password Reset Link Poisoning via host header injection8.1CISA ADP v3.10.4%2026-05-04Fix
CVE-2026-29169Apache HTTP Server: Mod_dav_lock indirect lock crash7.5CISA ADP v3.11.6%2026-05-04Fix
CVE-2026-29004vda-linux busybox_mirror BusyBox DHCPv6 client heap buffer overflow via DNS_SERVERS7.2CNA v4.00.6%2026-05-04Fix
CVE-2026-26956VM2 has a WASM sandbox escape9.8CNA v3.10.9%2026-05-04Fix
CVE-2026-26332VM2 has a sandbox escape issue via SuppressedError9.8CNA v3.10.7%2026-05-04Fix
CVE-2026-25863Conditional Fields for Contact Form 7 DoS via uncontrolled resource consumption8.7CNA v4.00.6%2026-05-04Fix
CVE-2026-25293Qualcomm Snapdragon incorrect authorization in PLC FW9.6CNA v3.10.2%2026-05-04Fix
CVE-2026-25266Qualcomm Snapdragon exposed dangerous function in windows host5.5CNA v3.10.1%2026-05-04Fix
CVE-2026-24781VM2 has Sandbox Breakout through Inspect function9.8CNA v3.11.2%2026-05-04Fix
CVE-2026-24120VM2 has Sandbox Breakout through Promise Species9.8CNA v3.10.9%2026-05-04Fix
CVE-2026-24118VM2 Sandbox Breakout through __lookupGetter__9.8CNA v3.10.9%2026-05-04Fix
CVE-2026-24082Qualcomm Snapdragon use-after-free in Automotive GPU7.8CNA v3.10.1%2026-05-04Fix
CVE-2026-24072Apache HTTP Server: Mod_rewrite elevation of privileges via ap_expr8.8CISA ADP v3.10.7%2026-05-04Exploit codeFix
CVE-2026-23918Apache HTTP Server: Http2: Double free and possible RCE on early reset8.8CISA ADP v3.149.7%2026-05-04Exploit codeFix
CVE-2026-20451MediaTek chipset slbc out-of-bounds write6.7CISA ADP v3.10.2%2026-05-04Fix
CVE-2026-20450MediaTek chipset Modem crash6.5CISA ADP v3.10.3%2026-05-04Fix
CVE-2026-20449MediaTek chipset Modem crash6.5CISA ADP v3.10.2%2026-05-04Fix
CVE-2026-20448MediaTek chipset geniezone privilege escalation6.7CISA ADP v3.10.1%2026-05-04Fix
CVE-2026-20447MediaTek chipset geniezone privilege escalation6.7CISA ADP v3.10.1%2026-05-04Fix
CVE-2026-7791Local privilege escalation via TOCTOU race condition in Amazon WorkSpaces Skylight agent8.5CNA v4.00.1%2026-05-04Exploit codeFix
CVE-2026-7782CodeCanyon Perfex CRM Tenant Clients.php project authorization5.3CNA v4.00.4%2026-05-04
CVE-2026-7781Open5GS UDM AMF registration-update endpoint denial of service5.3CNA v4.00.5%2026-05-04
CVE-2026-7780Open5GS smf-registrations endpoint udm-sm.c udm_state_operational denial of service5.3CNA v4.00.5%2026-05-04
CVE-2026-7779Open5GS UDM authentication-subscription endpoint denial of service5.3CNA v4.00.6%2026-05-04
CVE-2026-7776Boundary Workers vulnerable to denial of service during TLS Handshake7.5CNA v3.10.3%2026-05-04Fix
CVE-2026-7768@fastify/accepts-serializer vulnerable to denial of service via Unbounded Accept Header Cache Growth7.5CNA v3.10.5%2026-05-04Fix
CVE-2026-7750Totolink N300RH POST request cstecgi.cgi setMacFilterRules buffer overflow8.7CNA v4.00.8%2026-05-04
CVE-2026-7749Totolink N300RH POST request cstecgi.cgi setWanConfig buffer overflow8.7CNA v4.00.8%2026-05-04
CVE-2026-7748Totolink N300RH POST request cstecgi.cgi setUpgradeFW buffer overflow8.7CNA v4.00.8%2026-05-04
CVE-2026-7747Totolink N300RH parameter cstecgi.cgi loginauth buffer overflow9.3CNA v4.01.0%2026-05-04
CVE-2026-7746SourceCodester Web-based Pharmacy Product Management System edit-admin.php SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7745CodeAstro Online Classroom facultydetails SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7744CodeAstro Online Classroom addnewstudent SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7743CodeAstro Online Classroom studentdetails SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7742CodeAstro Online Classroom facultylogin SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7741CodeAstro Online Classroom studentlogin SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7740justdan96 tsMuxer vvc.cpp setFPS denial of service4.8CNA v4.00.2%2026-05-04
CVE-2026-7739justdan96 tsMuxer hevc.cpp setFPS denial of service4.8CNA v4.00.2%2026-05-04
CVE-2026-7738puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversal5.3CNA v4.00.4%2026-05-04
CVE-2026-7737osrg GoBGP BMP parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds7.5v3.10.9%2026-05-04Fix
CVE-2026-7736osrg GoBGP mrt.go parseRibEntry integer underflow7.5v3.10.6%2026-05-04Fix
CVE-2026-7735osrg GoBGP AIGP attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow6.9CNA v4.00.6%2026-05-04Fix
CVE-2026-7734osrg GoBGP SRv6 L3 service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of service7.5v3.10.9%2026-05-04Fix
CVE-2026-7733funadmin Frontend Chunked upload Endpoint UploadService.php chunkUpload unrestricted upload6.9CNA v4.00.5%2026-05-04Fix
CVE-2026-7732code-projects BloodBank Managing System request_blood.php unrestricted upload5.3CNA v4.00.3%2026-05-04
CVE-2026-7731code-projects BloodBank Managing System get_state.php SQL injection5.3CNA v4.00.3%2026-05-04Exploit code
CVE-2026-7730privsim mcp-test-runner MCP index.ts child_process.spawn os command injection5.3CNA v4.01.8%2026-05-04
CVE-2026-7729pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery5.3CNA v4.00.4%2026-05-04
CVE-2026-7728ryanjoachim mcp-rtfm MCP update_doc path traversal5.3CNA v4.00.4%2026-05-04
CVE-2026-7727Shandong Hoteam Software PDM Product Data Management System SQL injection6.9CNA v4.00.4%2026-05-04Fix
CVE-2026-7725PrefectHQ prefect GitRepository Pull storage.py argument injection5.3CNA v4.00.4%2026-05-04Fix
CVE-2026-7724PrefectHQ prefect Webhook/Notification validate_restricted_url toctou2.3CNA v4.00.3%2026-05-04Fix
CVE-2026-7723PrefectHQ prefect WebSocket endpoint in missing authentication6.9CNA v4.00.7%2026-05-04Fix
CVE-2026-7722PrefectHQ prefect Health Check API health endswith improper authentication6.9CNA v4.00.8%2026-05-04Fix
CVE-2026-7721Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection5.3CNA v4.01.8%2026-05-04
CVE-2026-7720Totolink WA300 POST request cstecgi.cgi setLanguageCfg command injection5.3CNA v4.01.8%2026-05-04
CVE-2026-7719Totolink WA300 POST request cstecgi.cgi loginauth buffer overflow9.3CNA v4.01.0%2026-05-04
CVE-2026-7718Totolink WA300 POST request cstecgi.cgi setWebWlanIdx command injection5.3CNA v4.01.8%2026-05-04
CVE-2026-7717Totolink WA300 POST request cstecgi.cgi UploadCustomModule buffer overflow8.7CNA v4.00.8%2026-05-04
CVE-2026-7716code-projects Gym Management System In PHP/Windows NT index.php SQL injection5.3CNA v4.00.3%2026-05-04
CVE-2026-7715ravenwits mcp-server-arangodb MCP tools.ts arango_backup path traversal5.3CNA v4.00.4%2026-05-04
CVE-2026-7714crocodilestick Calibre-Web-Automated Admin endpoint cwa_functions.py missing authentication6.9CNA v4.00.8%2026-05-04
CVE-2026-7713crocodilestick Calibre-Web-Automated Kobo auth-token route improper authorization5.3CNA v4.00.5%2026-05-04Fix
CVE-2026-7712MindsDB Pickle pickle.loads deserialization5.3CNA v4.00.4%2026-05-04
CVE-2026-7711MindsDB Engine proc_wrapper.py exec unrestricted upload6.9CNA v4.00.5%2026-05-04
CVE-2026-7710YunaiV yudao-cloud Ruoyi-Vue-Pro JWT authentication filter improper authentication6.9CNA v4.00.7%2026-05-04
CVE-2026-7482Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader8.8CNA v4.00.7%2026-05-04Reported exploitedExploit codeFix
CVE-2026-7372GeoVision GV-VMS V20 WebCam server login stack overflow9.0CNA v3.10.8%2026-05-04Fix
CVE-2026-7371GeoVision LPC2011/LPC2211 Web interface / ssi.cgi reflected cross-site scripting (XSS)7.4CNA v3.10.3%2026-05-04Fix
CVE-2026-7161GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability9.3CNA v3.10.4%2026-05-04Fix
CVE-2026-6501jOpenDocument has an improper restriction of XML external entity reference5.3CNA v4.00.4%2026-05-04
CVE-2026-6500ILM Informatique OpenConcerto plaintext password storage4.8CNA v4.00.1%2026-05-04
CVE-2026-6499ILM Informatique OpenConcerto incorrect permission assignment2.4CNA v4.00.1%2026-05-04
CVE-2026-6321fast-uri vulnerable to path traversal via percent-encoded dot segments7.5CNA v3.10.8%2026-05-04Fix
CVE-2026-6266Red Hat Ansible Automation Platform gateway identity provider linking authentication bypass8.3CNA v3.10.6%2026-05-04Fix
CVE-2026-5335Magic Export and Import WordPress plugin unauthenticated PII disclosure5.3CISA ADP v3.10.3%2026-05-04Fix
CVE-2026-3120RCE in Profelis Informatics' SambaBox7.2CNA v3.11.7%2026-05-04Fix
CVE-2026-0073Google Android auth.cpp remote code execution8.8CISA ADP v3.10.5%2026-05-04Exploit codeFix
CVE-2026-40561Starlet versions for Perl allows HTTP request smuggling via Improper Header Precedence5.3CISA ADP v3.10.4%2026-05-03Fix
CVE-2026-7709janeczku Calibre-Web endpoint kobo_auth.py generate_auth_token improper authorization5.3CNA v4.00.4%2026-05-03
CVE-2026-7708Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service5.3CNA v4.00.5%2026-05-03
CVE-2026-7707Open5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of service5.3CNA v4.00.5%2026-05-03
CVE-2026-7706Open5GS AMF gmm-handler.c gmm_handle_service_request denial of service5.3CNA v4.00.5%2026-05-03
CVE-2026-7705JD Cloud JDCOS service jdcap set_iptv_info command injection5.3CNA v4.02.4%2026-05-03
CVE-2026-7704AV Stumpfl Pixera Two Media Server Service Port 1338 path traversal5.3CNA v4.00.4%2026-05-03Fix
CVE-2026-7703AV Stumpfl Pixera Two Media Server Websocket API code injection6.9CNA v4.00.5%2026-05-03Fix
CVE-2026-7702toeverything AFFiNE Public Markdown Preview endpoint :docId allowDocPreview authorization6.9CNA v4.00.5%2026-05-03
CVE-2026-7701Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference5.3CNA v4.00.5%2026-05-03
CVE-2026-7700langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection5.3CNA v4.00.3%2026-05-03Fix
CVE-2026-7699Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection SQL injection5.3CNA v4.00.3%2026-05-03
CVE-2026-7698Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection6.9CNA v4.03.2%2026-05-03
CVE-2026-7697AMTT Hotel Broadband Operation System cardhand_submit.php SQL injection5.1CNA v4.00.3%2026-05-03
CVE-2026-7696A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This impacts an unknown function of the file /SubstationWEBV2/main/uploadH5Files. The manipulation of the argument File results in unrestricted upload. The attack may be launched remot5.3CNA v4.00.4%2026-05-03
CVE-2026-7695Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform SQL injection6.9CNA v4.00.4%2026-05-03
CVE-2026-7694Acrel ECEMS Enterprise Microgrid Energy Efficiency Management System SQL injection6.9CNA v4.00.4%2026-05-03
CVE-2026-7692Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection5.3CNA v4.04.4%2026-05-03
CVE-2026-7691Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection5.3CNA v4.04.4%2026-05-03
CVE-2026-7690Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection9.8v3.16.0%2026-05-03
CVE-2026-7689Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification6.3CNA v4.00.2%2026-05-03
CVE-2026-7688Dolibarr ERP CRM Shipments API endpoint expedition.class.php _checkValForAPI SQL injection2.3CNA v4.00.3%2026-05-03
CVE-2026-7687langflow-ai Langflow code parser command injection5.3CNA v4.02.6%2026-05-03
CVE-2026-7686eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control6.9CNA v4.00.6%2026-05-03Fix
CVE-2026-7685Edimax BR-6208AC setWAN buffer overflow8.7CNA v4.00.8%2026-05-03
CVE-2026-7684Edimax BR-6428nC setWAN buffer overflow8.7CNA v4.00.8%2026-05-03
CVE-2026-7683Edimax BR-6428nC Web setWAN command injection5.3CNA v4.03.2%2026-05-03
CVE-2026-7682Edimax BR-6208AC L2TP Mode setWAN command injection5.3CNA v4.02.4%2026-05-03
CVE-2026-7681jsbroks COCO Annotator Dataset API datasets.py authorization6.9CNA v4.00.6%2026-05-03
CVE-2026-7680jsbroks COCO Annotator Data endpoint datasets.py path traversal5.3CNA v4.00.5%2026-05-03
CVE-2026-7679YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken improper authentication6.9CNA v4.00.7%2026-05-03
CVE-2026-7678YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL SQL injection5.3CNA v4.00.3%2026-05-03
CVE-2026-7677kerwincui FastBee System Notice SysNoticeController.java add cross-site scripting5.1CNA v4.00.3%2026-05-03
CVE-2026-7676kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal5.3CNA v4.00.5%2026-05-03
CVE-2026-7675Shenzhen Libituo Technology LBT-T300-HW1 apply.cgi start_lan buffer overflow8.7CNA v4.00.8%2026-05-03
CVE-2026-7674Shenzhen Libituo Technology LBT-T300-HW1 Web Management start_single_service buffer overflow8.7CNA v4.00.8%2026-05-03
CVE-2026-7673crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload5.1CNA v4.00.4%2026-05-03
CVE-2026-7672youlaitech youlai-boot Users Endpoint UserController.java getUserList SQL injection5.3CNA v4.00.3%2026-05-03
CVE-2026-7671CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication6.3CNA v4.00.6%2026-05-03Exploit code
CVE-2026-6948Rapid7 Velociraptor Unbounded Memory Allocation in VQLResponse Result-Set Writer4.9CNA v3.10.4%2026-05-03Fix
CVE-2026-5337Frontend File Manager WordPress plugin Subscriber+ arbitrary download access via IDOR6.5CISA ADP v3.10.3%2026-05-03
CVE-2026-5063NEX-Forms WordPress plugin unauthenticated stored cross-site scripting via POST parameter Key Names7.2CNA v3.10.3%2026-05-03Fix
CVE-2026-43824argoproj argo-cd ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction7.7CNA v3.10.3%2026-05-02Fix
CVE-2026-43058Linux kernel vidtv driver null pointer dereference5.5v3.10.1%2026-05-02Fix
CVE-2026-7670Jinher OA UserSel.aspx SQL injection6.9CNA v4.00.4%2026-05-02
CVE-2026-7669sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection6.3CNA v4.00.4%2026-05-02Exploit code
CVE-2026-7668MikroTik RouterOS SCEP endpoint scep.p ASN1_STRING_data out-of-bounds6.9CNA v4.00.5%2026-05-02
CVE-2026-7653r-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injection5.3CNA v4.01.8%2026-05-02
CVE-2026-7649ARMember WordPress plugin unauthenticated SQL injection via orderby parameter7.5CNA v3.10.6%2026-05-02Fix
CVE-2026-7647Profile Builder Pro WordPress plugin unauthenticated PHP object injection8.1CNA v3.10.6%2026-05-02Fix
CVE-2026-7645ruvnet sublinear-time-solver MCP server.js export_state path traversal6.9CNA v4.00.6%2026-05-02
CVE-2026-7644ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization6.9CNA v4.00.5%2026-05-02
CVE-2026-7643ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy5.3CNA v4.00.2%2026-05-02
CVE-2026-7642pskill9 website-downloader MCP index.ts download_website os command injection5.3CNA v4.01.8%2026-05-02
CVE-2026-7641Import and export users and customers WordPress plugin privilege escalation8.8CNA v3.10.7%2026-05-02Fix
CVE-2026-7638App Builder WordPress plugin insecure direct object reference5.3CNA v3.10.5%2026-05-02Fix
CVE-2026-7633Totolink N300RH cstecgi.cgi setUploadSetting file inclusion6.9CNA v4.00.5%2026-05-02
CVE-2026-7632code-projects Online Hospital Management System viewappointment.php SQL injection6.9CNA v4.00.4%2026-05-02
CVE-2026-7631code-projects Online Hospital Management System Registration improper authorization5.3CNA v4.00.4%2026-05-02
CVE-2026-7630innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication6.9CNA v4.00.7%2026-05-02
CVE-2026-7629kleneway awesome-cursor-mpc-server code review tool command injection5.3CNA v4.01.8%2026-05-02
CVE-2026-7628crazyrabbitLTC mcp-code-review-server RepoMix repomix.ts executeRepomix command injection5.3CNA v4.01.8%2026-05-02
CVE-2026-76278nite metatrader-4-mcp sync_ea_from_file index.ts CallToolRequestSchema path traversal5.3CNA v4.00.4%2026-05-02
CVE-2026-7612itsourcecode Courier Management System edit_user.php SQL injection5.1CNA v4.00.3%2026-05-02
CVE-2026-7611TRENDnet TEW-821DAP Firmware Update cameo_dev.sh platform_do_upgrade_cameo_dev data authenticity8.1v3.10.3%2026-05-02
CVE-2026-7610TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission8.1v3.10.4%2026-05-02
CVE-2026-7609TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection8.8v3.15.7%2026-05-02
CVE-2026-7608TRENDnet TEW-821DAP tools_diagnostic os command injection8.0v3.17.0%2026-05-02
CVE-2026-7607TRENDnet TEW-821DAP Firmware Udpate auto_update_firmware buffer overflow8.7CNA v4.01.0%2026-05-02
CVE-2026-7606TRENDnet TEW-821DAP Firmware Update new_gui_update_firmware data authenticity8.1v3.10.3%2026-05-02
CVE-2026-7605JeecgBoot server-side request forgery5.3CNA v4.00.4%2026-05-02
CVE-2026-7604JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery5.3CNA v4.00.4%2026-05-02
CVE-2026-7603JeecgBoot file download endpoint server-side request forgery5.3CNA v4.00.4%2026-05-02
CVE-2026-7602JeecgBoot FillRuleUtil edit improper authorization5.3CNA v4.00.4%2026-05-02
CVE-2026-7601Open5GS AMF gmm-handler.c denial of service5.3CNA v4.00.5%2026-05-02Fix
CVE-2026-7600ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection5.3CNA v4.01.8%2026-05-02