CVE-2026 list

CVE-2026 records published in May 2026

Page seven of seven: records 6,001 to 6,293 of the 6,293 published in May 2026, newest first. The first page carries the figures for May 2026.

CVE-2026 records published in May 2026, newest first: records 6,001 to 6,293 of 6,293
CVE Summary CVSS EPSS Published Signals
CVE-2026-7491Zyosoft｜School App insecure direct object reference8.6CNA v4.00.4%2026-05-02Fix
CVE-2026-7490Sunnet｜CTMS and CPAS arbitrary file upload7.2v3.10.8%2026-05-02Fix
CVE-2026-7489Sunnet｜CTMS SQL injection8.7CNA v4.00.6%2026-05-02Fix
CVE-2026-7458User Verification by PickPlugins WordPress plugin unauthenticated authentication bypass9.8CNA v3.10.8%2026-05-02Fix
CVE-2026-7209Simple Link Directory WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-05-02Fix
CVE-2026-7049PixelYourSite Pro WordPress plugin unauthenticated blind server-side request forgery7.2CNA v3.10.5%2026-05-02Fix
CVE-2026-6963WP Mail Gateway WordPress plugin missing authorization authenticated SMTP Configuration modification8.8CNA v3.10.6%2026-05-02Fix
CVE-2026-6916Jeg Kit for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-05-02Fix
CVE-2026-6817Quiz Maker by AYS WordPress plugin unauthenticated stored cross-site scripting via rate_reason5.8CNA v3.10.4%2026-05-02Fix
CVE-2026-6812Ona WordPress theme blind server-side request forgery4.4CNA v3.10.3%2026-05-02Fix
CVE-2026-6525Null pointer dereference in Wireshark5.5CNA v3.10.1%2026-05-02Fix
CVE-2026-6457Geo Mashup WordPress plugin SQL injection6.5CNA v3.10.5%2026-05-02Fix
CVE-2026-6449Booking for Appointments and Events Calendar WordPress plugin improper authorization5.3CNA v3.10.4%2026-05-02Fix
CVE-2026-6447tychesoftwares Call for Price for WooCommerce label settings stored cross-site scripting4.4CNA v3.10.3%2026-05-02Fix
CVE-2026-6446My Social Feeds WordPress plugin information disclosure5.4CNA v3.10.3%2026-05-02Fix
CVE-2026-6378Maxi Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-05-02Fix
CVE-2026-6320Salon Booking System Free Version WordPress plugin unauthenticated arbitrary file read7.5CNA v3.10.5%2026-05-02Fix
CVE-2026-6229Royal Addons for Elementor WordPress plugin server-side request forgery7.2CNA v3.10.5%2026-05-02Fix
CVE-2026-5324Brizy Page Builder WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-05-02Fix
CVE-2026-5113Gravity Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-05-02Fix
CVE-2026-5112Gravity Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-05-02Fix
CVE-2026-5111Gravity Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-05-02Fix
CVE-2026-5110Gravity Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-05-02Fix
CVE-2026-5109Gravity Forms WordPress plugin unauthenticated stored cross-site scripting via Product option7.2CNA v3.10.3%2026-05-02Fix
CVE-2026-5077Total WordPress theme stored cross-site scripting5.4CNA v3.10.2%2026-05-02Fix
CVE-2026-4882User Registration Advanced Fields WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2026-05-02Exploit codeFix
CVE-2026-4790Premium Addons for Elementor WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2026-05-02Fix
CVE-2026-4658Gutenberg Essential Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-05-02Fix
CVE-2026-4650FundPress WordPress plugin authorization bypass5.3CNA v3.10.5%2026-05-02Fix
CVE-2026-4100Paid Memberships Pro WordPress plugin unauthorized access7.1CNA v3.10.4%2026-05-02Fix
CVE-2026-4062Geo Mashup WordPress plugin unauthenticated time-based SQL injection via object_ids parameter7.5CNA v3.10.5%2026-05-02Fix
CVE-2026-4061Geo Mashup WordPress plugin unauthenticated time-based SQL injection via map_post_type parameter7.5CNA v3.10.5%2026-05-02Fix
CVE-2026-4060Geo Mashup WordPress plugin unauthenticated time-based SQL injection via sort parameter7.5CNA v3.11.6%2026-05-02NucleiFix
CVE-2026-4024Royal Addons for Elementor WordPress plugin unauthorized access5.3CNA v3.10.5%2026-05-02Fix
CVE-2026-3504Dokan Multivendor Marketplace store reviews REST API information disclosure5.3CNA v3.10.4%2026-05-02Fix
CVE-2026-2554WCFM WordPress plugin insecure direct object reference8.1CNA v3.10.5%2026-05-02Fix
CVE-2026-2052Widget Options WordPress plugin authenticated (Contributor+) remote code execution via Display logic8.8CNA v3.10.8%2026-05-02Fix
CVE-2026-0703NextMove Lite - Thank You Page for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-05-02Fix
CVE-2026-43507Prosody resource exhaustion7.5v3.10.3%2026-05-01Fix
CVE-2026-43506Prosody unauthenticated connection handling memory leak7.5v3.10.3%2026-05-01Fix
CVE-2026-43505Prosody unprotected alternate channel6.5CNA v3.10.3%2026-05-01Fix
CVE-2026-43504Prosody incorrect authorization6.5CNA v3.10.3%2026-05-01Fix
CVE-2026-43057Linux kernel IPv6 GSO checksum fallback vulnerability7.5CNA v3.10.8%2026-05-01Fix
CVE-2026-43056Linux kernel mana auxiliary device driver use-after-free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-43055Linux kernel SCSI target file backend AIO handling vulnerability7.5CNA v3.10.6%2026-05-01Fix
CVE-2026-43054Linux kernel SCSI target tcm_loop reset handler vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-43053Linux kernel XFS extended attribute dabtree inactivation race condition4.7NVD v3.10.1%2026-05-01Fix
CVE-2026-43052Linux kernel mac80211 TDLS link handling vulnerability7.1NVD v3.10.2%2026-05-01Fix
CVE-2026-43051Linux kernel Wacom Bluetooth driver out-of-bounds read8.1CNA v3.10.3%2026-05-01Fix
CVE-2026-43050Linux kernel lec use-after-free7.0v3.10.1%2026-05-01Fix
CVE-2026-43049Linux kernel Logitech HID++ force feedback use-after-free7.8NVD v3.10.2%2026-05-01Fix
CVE-2026-43048Linux kernel HID report parsing out-of-bounds read8.8CNA v3.10.4%2026-05-01Fix
CVE-2026-43047Linux kernel HID multitouch driver out-of-bounds write7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-43046Linux kernel Btrfs relocation recovery reachable assertion5.5v3.10.1%2026-05-01Fix
CVE-2026-43045Linux kernel mshv region pinning memory corruption5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-43044Linux kernel CAAM HMAC key handling vulnerability7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-43043Linux kernel AF_ALG scatter-gather list handling null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-43042Linux kernel MPLS platform label table out-of-bounds read7.1CNA v3.10.1%2026-05-01Fix
CVE-2026-43041Linux kernel QRTR transmit flow control memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-43040Linux kernel ndisc information disclosure7.1NVD v3.10.2%2026-05-01Fix
CVE-2026-43039Linux kernel ICSSG PRUETH zero-copy RX dispatch vulnerability9.8CNA v3.10.6%2026-05-01Fix
CVE-2026-43038Linux kernel ICMPv6 unreachable generation type confusion9.8CNA v3.10.3%2026-05-01Fix
CVE-2026-43037Linux kernel ip6_tunnel out-of-bounds write9.8CNA v3.10.6%2026-05-01Fix
CVE-2026-43036Linux kernel TCPv4 GSO frag_off check vulnerability5.5NVD v3.10.1%2026-05-01Fix
CVE-2026-43035Linux kernel traffic control chain netlink message vulnerability5.5NVD v3.10.1%2026-05-01Fix
CVE-2026-43034Linux kernel bnxt_en backing store type indexing vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-43033Linux kernel authenc-ESN decryption buffer layout vulnerability7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-43032Linux kernel pn532 UART receive buffer vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-43031Linux kernel Xilinx axienet BQL byte accounting vulnerability7.5CNA v3.10.6%2026-05-01Fix
CVE-2026-43030In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In case rold->reg->range == BEYOND_PKT_END && rcur->reg->range == N regsafe() may return true which may lead to current state with valid packet range not being explored. Fix the bug.7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-43029Linux kernel MPTCP receive path denial of service7.5CNA v3.10.5%2026-05-01Fix
CVE-2026-43028Linux kernel x_tables name validation vulnerability7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-43027Linux kernel nf_conntrack helper expectation cleanup use-after-free7.8NVD v3.10.1%2026-05-01Fix
CVE-2026-43026Linux kernel ctnetlink expectation NAT field initialization vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-43025Linux kernel ctnetlink expectation helper validation out-of-bounds read7.3CNA v3.10.2%2026-05-01Fix
CVE-2026-43024Linux kernel nf_tables immediate verdict handling vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-43023Linux kernel Bluetooth SCO socket connect race condition7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-43022Linux kernel Bluetooth HCI command sync queue vulnerability5.5NVD v3.10.1%2026-05-01Fix
CVE-2026-43021Linux kernel Bluetooth HCI command sync queue memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-43020Linux kernel Bluetooth LTK loading out-of-bounds write7.8v3.10.1%2026-05-01Fix
CVE-2026-43019Linux kernel Bluetooth CIG parameter sync use-after-free7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-43018Linux kernel Bluetooth connection parameter request handler use-after-free8.8CNA v3.10.4%2026-05-01Fix
CVE-2026-43017Linux kernel Bluetooth mesh send command vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-43016Linux kernel sockmap data-ready callback use-after-free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-43015Linux kernel macb PCI glue driver use-after-free7.8v3.10.1%2026-05-01Fix
CVE-2026-43014Linux kernel macb Ethernet driver vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-43013Linux kernel mlx5 LAG debugfs null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-43012Linux kernel mlx5 switchdev mode rollback vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-43011Linux kernel x25 protocol receive path double free9.8CNA v3.10.6%2026-05-01Fix
CVE-2026-43010Linux kernel BPF kprobe_multi attachment vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-43009Linux kernel BPF verifier precision tracking vulnerability7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-43008Linux kernel qixis-fpga GPIO driver null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-43007Linux kernel qaic accelerator driver double free7.8v3.10.1%2026-05-01Fix
CVE-2026-43006Linux kernel io_uring fixed buffer import out-of-bounds read7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-43005Linux kernel tps53679 hwmon driver out-of-bounds read7.1v3.10.1%2026-05-01Fix
CVE-2026-43004Linux kernel STM32 OSPI driver resource leak5.5v3.10.1%2026-05-01Fix
CVE-2026-43003OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere7.5v3.11.0%2026-05-01Fix
CVE-2026-43001OpenStack Keystone has an incorrect authorization issue8.0v3.10.5%2026-05-01Fix
CVE-2026-42996JS8Call stack-based buffer overflow10.0CNA v4.00.6%2026-05-01Fix
CVE-2026-42994Bitwarden CLI OS command injection9.8v3.10.5%2026-05-01Fix
CVE-2026-42788HTTP/2 frame size limit checked after body is buffered in bandit6.9CNA v4.00.5%2026-05-01Fix
CVE-2026-42786WebSocket fragmented message reassembly unbounded in bandit8.7CNA v4.00.6%2026-05-01Fix
CVE-2026-42779Apache Mina vulnerable to deserialization of untrusted data ( Incomplete Fix)9.8CNA v3.10.8%2026-05-01Exploit codeFix
CVE-2026-42778Apache Mina: Deserialization of untrusted data (take 2)9.8CNA v3.10.8%2026-05-01Exploit codeFix
CVE-2026-42485agl-service-can-low-level uds-c library stack-based buffer overflow7.5CISA ADP v3.10.5%2026-05-01
CVE-2026-42484hashcat hex_to_binary in the PKZIP hash parser heap-based buffer overflow9.8v3.10.4%2026-05-01
CVE-2026-42483hashcat Kerberos hash parser heap-based buffer overflow9.8v3.10.3%2026-05-01
CVE-2026-42482hashcat stack-based buffer overflow9.8v3.10.4%2026-05-01
CVE-2026-42481Open Cascade Technology out-of-bounds read5.5CISA ADP v3.10.1%2026-05-01
CVE-2026-42480Open Cascade Technology VrmlData_Scene::ReadLine in the VRML parser out-of-bounds read5.5CISA ADP v3.10.1%2026-05-01
CVE-2026-42479Open Cascade Technology out-of-bounds read5.5v3.10.1%2026-05-01
CVE-2026-42478Open Cascade Technology out-of-bounds read7.5v3.10.2%2026-05-01
CVE-2026-42477Open Cascade Technology RWObj_Reader::read in the OBJ file parser out-of-bounds read7.1v3.10.1%2026-05-01
CVE-2026-42476Open Cascade Technology STL ASCII file parser out-of-bounds read7.1v3.10.1%2026-05-01
CVE-2026-42475Openmix Mix PHP MixPHP Framework has an SQL injection6.5CISA ADP v3.10.3%2026-05-01
CVE-2026-42474MixPHP Framework has an SQL injection vulnerability via crafted `data` array6.5CISA ADP v3.10.3%2026-05-01
CVE-2026-42473MixPHP Framework deserialization of untrusted data9.8CISA ADP v3.10.7%2026-05-01
CVE-2026-42472MixPHP Framework deserialization of untrusted data9.8CISA ADP v3.10.7%2026-05-01
CVE-2026-42471MixPHP Framework deserialization of untrusted data8.1CISA ADP v3.11.9%2026-05-01Exploit code
CVE-2026-42469Openvehicles Open Vehicle Monitoring System buffer overflow8.6CISA ADP v3.10.6%2026-05-01
CVE-2026-42468Openvehicles Open Vehicle Monitoring System buffer overflow8.8CISA ADP v3.10.7%2026-05-01
CVE-2026-42467Open-SAE-J1939 DM16 diagnostic message handler denial of service7.5CISA ADP v3.10.5%2026-05-01
CVE-2026-42404Apache Neethi: Unrestricted HTTP Redirect Following in Policy References6.5CNA v3.10.6%2026-05-01Fix
CVE-2026-42403Apache Neethi: Circular Policy Reference infinite loop7.5CNA v3.10.8%2026-05-01Fix
CVE-2026-42402Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS7.5CNA v3.10.7%2026-05-01Fix
CVE-2026-40201@diplodoc/search-extension allows stored XSS via Markdown file title5.4CNA v3.10.3%2026-05-01Fix
CVE-2026-39807Client-supplied URI scheme trusted without transport verification in bandit6.3CNA v4.00.5%2026-05-01Fix
CVE-2026-39805CL.CL HTTP request smuggling via duplicate Content-Length in bandit6.3CNA v4.00.5%2026-05-01Fix
CVE-2026-39804WebSocket permessage-deflate inflate has no output-size cap in bandit8.2CNA v4.00.7%2026-05-01Fix
CVE-2026-37554Vanetza GeoNetworking packet processing denial of service7.5CNA v3.10.6%2026-05-01
CVE-2026-37552Openmix Mix PHP MixPHP Framework deserialization of untrusted data8.4CNA v3.10.5%2026-05-01
CVE-2026-37541Openvehicles Open Vehicle Monitoring System buffer overflow10.0CNA v3.11.1%2026-05-01
CVE-2026-37540Linaro Openamp integer overflow9.8v3.10.3%2026-05-01
CVE-2026-37539cannelloni CAN frame parser stack-based buffer overflow9.8CNA v3.10.9%2026-05-01
CVE-2026-37538socketcand buffer overflow7.5CISA ADP v3.10.5%2026-05-01
CVE-2026-37537Open-SAE-J1939 Transport Protocol Data Transfer handling out-of-bounds write8.1CNA v3.10.4%2026-05-01
CVE-2026-37536uds-c send_diagnostic_request function stack-based buffer overflow8.8CNA v3.10.4%2026-05-01
CVE-2026-37535isotp-c ISO-TP Single Frame receive handler out-of-bounds read7.1CNA v3.10.3%2026-05-01
CVE-2026-37534Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe integer underflow9.8CISA ADP v3.10.6%2026-05-01
CVE-2026-37532Linux Foundation Automotive Grade Linux buffer over-read7.1CNA v3.10.3%2026-05-01
CVE-2026-37531Linux Foundation Automotive Grade Linux path traversal9.8CNA v3.10.9%2026-05-01
CVE-2026-37530Linux Foundation Automotive Grade Linux stack-based buffer overflow7.5CISA ADP v3.10.5%2026-05-01
CVE-2026-37526Linux Foundation Automotive Grade Linux improper access control7.8CNA v3.10.2%2026-05-01
CVE-2026-37525Linux Foundation Automotive Grade Linux improper privilege management7.8CNA v3.10.2%2026-05-01
CVE-2026-37505v2board SQL injection4.9v3.10.2%2026-05-01
CVE-2026-37504v2board sensitive query strings7.5v3.10.3%2026-05-01
CVE-2026-37503v2board cross-site scripting4.8v3.10.2%2026-05-01
CVE-2026-37457FRRouting bgp_flowspec_op_decode function off-by-one error7.5CISA ADP v3.10.7%2026-05-01Fix
CVE-2026-35233Oracle Linux out-of-bounds read4.4CNA v3.10.1%2026-05-01Fix
CVE-2026-31785Linux kernel Xe page fault handler vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31784Linux kernel Xe PXP session restart vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31783Linux kernel Amlogic SPIFC-A4 ECC engine vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31782Linux kernel perf/x86 out-of-bounds read7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31781Linux kernel DRM compat ioctl handler vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31780Linux kernel wilc1000 Wi-Fi driver out-of-bounds write7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31779Linux kernel iwlwifi network-detect match handler out-of-bounds read8.1CNA v3.10.4%2026-05-01Fix
CVE-2026-31778Linux kernel caiaq USB audio driver out-of-bounds read7.1v3.10.1%2026-05-01Fix
CVE-2026-31777Linux kernel ctxfi sound driver index mapping vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31776Linux kernel ctxfi improper array index validation7.8v3.10.1%2026-05-01Fix
CVE-2026-31775Linux kernel ctxfi crash5.5NVD v3.10.1%2026-05-01Fix
CVE-2026-31774Linux kernel io_uring/net out-of-bounds read7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-31773Linux kernel Bluetooth SMP pairing improper authentication8.8CNA v3.10.3%2026-05-01Fix
CVE-2026-31772Linux kernel Bluetooth ISO BIG sync handler out-of-bounds write7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-31771Linux kernel Bluetooth HCI event handler vulnerability8.1CNA v3.10.4%2026-05-01Fix
CVE-2026-31770Linux kernel OCC hwmon driver division by zero5.5v3.10.1%2026-05-01Fix
CVE-2026-31769Linux kernel GPIB driver use-after-free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31768Linux kernel ti-adc161s626 ADC driver vulnerability7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31767Linux kernel i915 DSC timing calculation divide by zero5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31766Linux kernel AMDGPU user queue doorbell vulnerability7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-31765Linux kernel AMDGPU trap area reservation null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31764Linux kernel st_lsm6dsx IMU driver vulnerability7.8v3.10.1%2026-05-01Fix
CVE-2026-31763Linux kernel mpu3050 gyroscope driver vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31762Linux kernel mpu3050 gyroscope driver memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-31761Linux kernel mpu3050 gyroscope driver race condition7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-31760Linux kernel lpvo_usb GPIB driver memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-31759Linux kernel ULPI driver double free7.8v3.10.1%2026-05-01Fix
CVE-2026-31758Linux kernel usbtmc driver use-after-free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31757Linux kernel usbio driver memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-31756Linux kernel dwc2 USB gadget driver deadlock5.5v3.10.1%2026-05-01Fix
CVE-2026-31755Linux kernel cdns3 USB gadget endpoint queue null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31754Linux kernel cdns3 USB gadget driver vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31753Linux kernel auxdisplay line display driver null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31752In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths br_nd_send() walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLADDR opt5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31751Linux kernel dt2815 comedi driver race condition4.7v3.10.1%2026-05-01Fix
CVE-2026-31750Linux kernel comedi channel list handling memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-31749Linux kernel ni_atmio16d comedi driver null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31748Linux kernel me_daq firmware loader out-of-bounds write7.8v3.10.1%2026-05-01Fix
CVE-2026-31747Linux kernel me4000 firmware loader out-of-bounds write7.8v3.10.1%2026-05-01Fix
CVE-2026-31746Linux kernel s390 zcrypt CCA card driver memory leak5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31745Linux kernel GPIO reset controller double free7.8v3.10.1%2026-05-01Fix
CVE-2026-31744Linux kernel energy model perf domain lookup null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31743Linux kernel ZynqMP NVMEM driver out-of-bounds write7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31742Linux kernel virtual terminal unicode buffer out-of-bounds read7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31741In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counter is incremented / decremented each time the sysfs enable file is written to. If user writes 0 to the sysfs enable file multiple times, runt5.5v3.10.1%2026-05-01Fix
CVE-2026-31740In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member The counter driver can use HW channels 1 and 2, while the PWM driver can use HW channels 0, 1, 2, 3, 4, 6, 7. The dev member is assigned both by the counter dri5.5v3.10.1%2026-05-01Fix
CVE-2026-31739Linux kernel Tegra crypto driver reachable assertion8.8CNA v3.10.6%2026-05-01Fix
CVE-2026-31738In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlan_na_create vxlan_na_create() walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source5.5v3.10.1%2026-05-01Fix
CVE-2026-31737Linux kernel FTGMAC100 Ethernet driver vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31736Linux kernel mtk_ppe null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31735In the Linux kernel, the following vulnerability has been resolved: iommupt: Fix short gather if the unmap goes into a large mapping unmap has the odd behavior that it can unmap more than requested if the ending point lands within the middle of a large or contiguous IOPTE. In this case the gather8.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31734Linux kernel sched_ext scheduler class vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31733Linux kernel sched_ext scheduler class vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31732Linux kernel GPIO chip registration memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-31731Linux kernel thermal zone management use-after-free7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-31730Linux kernel fastrpc driver double free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31729Linux kernel UCSI USB Type-C driver vulnerability7.8v3.10.1%2026-05-01Fix
CVE-2026-31728Linux kernel USB Ethernet gadget driver race condition4.7v3.10.1%2026-05-01Fix
CVE-2026-31727Linux kernel USB Ethernet gadget driver null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31726Linux kernel UVC USB gadget driver null pointer dereference5.5v3.10.1%2026-05-01Fix
CVE-2026-31725Linux kernel ECM USB gadget driver vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31724Linux kernel EEM USB gadget driver vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31723Linux kernel Ethernet subset USB gadget driver vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31722Linux kernel RNDIS USB gadget driver vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31721Linux kernel USB HID gadget driver vulnerability5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31720Linux kernel UAC1 legacy audio gadget driver out-of-bounds write7.8v3.10.1%2026-05-01Fix
CVE-2026-31719Linux kernel krb5enc decryption vulnerability7.5CNA v3.10.3%2026-05-01Fix
CVE-2026-31718Linux kernel ksmbd durable handle lock cleanup use-after-free9.8CNA v3.10.7%2026-05-01Fix
CVE-2026-31717Linux kernel ksmbd durable handle reconnect vulnerability8.8CNA v3.10.6%2026-05-01Exploit codeFix
CVE-2026-31716Linux kernel NTFS3 journal replay out-of-bounds write7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31715Linux kernel f2fs write completion use-after-free7.8v3.10.1%2026-05-01Fix
CVE-2026-31714Linux kernel f2fs rename filename handling memory leak5.5v3.10.1%2026-05-01Fix
CVE-2026-31713Linux kernel FUSE synchronous mount init denial of service5.5v3.10.1%2026-05-01Fix
CVE-2026-31712Linux kernel ksmbd DACL permission check out-of-bounds write8.3CNA v3.10.3%2026-05-01Fix
CVE-2026-31711Linux kernel ksmbd connection tracking memory leak7.5CNA v3.10.6%2026-05-01Fix
CVE-2026-31710Linux kernel SMB1 UNIX mount flag handling vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31709Linux kernel cifsacl DACL validation vulnerability8.8CNA v3.10.3%2026-05-01Fix
CVE-2026-31708Linux kernel SMB2 QUERY_INFO response handling out-of-bounds read8.1CNA v3.10.4%2026-05-01Fix
CVE-2026-31707Linux kernel ksmbd IPC message validation out-of-bounds write7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-31706Linux kernel ksmbd DACL inheritance vulnerability8.8CNA v3.10.6%2026-05-01Fix
CVE-2026-31705Linux kernel ksmbd EA response alignment out-of-bounds write9.8CNA v3.10.4%2026-05-01Fix
CVE-2026-31704Linux kernel ksmbd DACL size calculation integer overflow5.5NVD v3.10.2%2026-05-01Fix
CVE-2026-31703Linux kernel writeback subsystem use-after-free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31702Linux kernel f2fs compressed write completion use-after-free7.8v3.10.1%2026-05-01Fix
CVE-2026-31701Linux kernel caiaq USB audio driver vulnerability5.5v3.10.1%2026-05-01Fix
CVE-2026-31700Linux kernel net/packet time-of-check time-of-use race condition7.8CNA v3.10.1%2026-05-01Fix
CVE-2026-31699Linux kernel PSP driver out-of-bounds write7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-31698Linux kernel PSP driver out-of-bounds write7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-31697Linux kernel PSP driver out-of-bounds write7.1CNA v3.10.2%2026-05-01Fix
CVE-2026-31696Linux kernel rxrpc key parsing out-of-bounds write7.8NVD v3.10.2%2026-05-01Fix
CVE-2026-31695Linux kernel virt_wifi use-after-free7.8CNA v3.10.2%2026-05-01Fix
CVE-2026-31694Linux kernel FUSE directory entry cache vulnerability7.8CNA v3.10.2%2026-05-01Exploit codeFix
CVE-2026-30363flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function.8.4CISA ADP v3.10.2%2026-05-01
CVE-2026-26461Aver PTC320UV2 web management interface command injection6.5CISA ADP v3.11.5%2026-05-01
CVE-2026-23866Facebook WhatsApp improper verification of communication source4.3CNA v3.10.5%2026-05-01Fix
CVE-2026-23863Facebook WhatsApp Desktop attachment spoofing6.5CNA v3.10.5%2026-05-01Fix
CVE-2026-22726Cloud Foundry Foundation Routing release route Services Firewall Bypass5.0CNA v3.10.2%2026-05-01Fix
CVE-2026-22167Imagination Technologies Graphics DDK cache-resident GPU buffers memory corruption7.8CISA ADP v3.10.2%2026-05-01Fix
CVE-2026-22166GPU Ddk write UAF in KEGLGetPoolBuffers, WebGL reachable8.1CISA ADP v3.10.4%2026-05-01Fix
CVE-2026-22165Imagination Technologies Graphics DDK use-after-free8.1CISA ADP v3.10.3%2026-05-01Fix
CVE-2026-21996Oracle Linux divide by zero3.3CNA v3.10.1%2026-05-01Fix
CVE-2026-7599Dayoooun hwpx-mcp MCP index.ts export_to_html path traversal5.3CNA v4.00.4%2026-05-01
CVE-2026-7598libssh2 userauth.c userauth_password integer overflow6.9CNA v4.00.8%2026-05-01Fix
CVE-2026-7597mem0ai mem0 faiss.py pickle.dump deserialization5.3CNA v4.00.4%2026-05-01Fix
CVE-2026-7596nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross-site scripting5.3CNA v4.00.5%2026-05-01
CVE-2026-7595nextlevelbuilder ui-ux-pro-max-skill Tailwind config generator code injection5.3CNA v4.00.4%2026-05-01
CVE-2026-7594Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal6.9CNA v4.00.6%2026-05-01
CVE-2026-7593Sunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection6.9CNA v4.02.1%2026-05-01
CVE-2026-7592itsourcecode Courier Management System edit_staff.php SQL injection6.9CNA v4.00.4%2026-05-01
CVE-2026-7591TimBroddin astro-mcp-server MCP Tool Query Construction index.ts SQL injection5.3CNA v4.00.3%2026-05-01
CVE-2026-7590eyal-gor p_69_branch_monkey_mcp Preview endpoint advanced.py os command injection6.9CNA v4.02.1%2026-05-01
CVE-2026-7589ghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal6.9CNA v4.00.6%2026-05-01
CVE-2026-7588ggerve coding-standards-mcp server.py get_best_practices path traversal6.9CNA v4.00.6%2026-05-01
CVE-2026-7587Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service5.3CNA v4.00.5%2026-05-01
CVE-2026-7586Open5GS AMF nudm-handler.c ogs_id_get_value denial of service5.3CNA v4.00.5%2026-05-01
CVE-2026-7585Open5GS AMF nudm-handler.c amf_nudm_sdm_handle_provisioned denial of service5.3CNA v4.00.6%2026-05-01
CVE-2026-7584Arbitrary code execution via unsafe deserialization in LabOne Q8.4CNA v4.00.4%2026-05-01Fix
CVE-2026-7583Open5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of service5.3CNA v4.00.5%2026-05-01
CVE-2026-7582AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write4.8CNA v4.00.2%2026-05-01Fix
CVE-2026-7581alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy5.3CNA v4.00.2%2026-05-01Fix
CVE-2026-7580Exiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection4.8CNA v4.00.2%2026-05-01Fix
CVE-2026-7579AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials6.9CNA v4.00.5%2026-05-01
CVE-2026-7578MacCMS Pro Plugin Installation add.html install unrestricted upload5.1CNA v4.00.4%2026-05-01
CVE-2026-7567Temporary Login WordPress plugin authentication bypass to account takeover9.8CNA v3.12.9%2026-05-01Exploit codeFix
CVE-2026-7555itsourcecode Electronic Judging System login.php SQL injection6.9CNA v4.00.4%2026-05-01
CVE-2026-7554D-Link M60 httpd password recovery8.1v3.12.6%2026-05-01
CVE-2026-7553code-projects Gym Management System edit_exercises.php SQL injection5.1CNA v4.00.3%2026-05-01
CVE-2026-7550SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer SQL injection6.9CNA v4.00.4%2026-05-01
CVE-2026-7549SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer SQL injection6.9CNA v4.00.4%2026-05-01
CVE-2026-7548Totolink NR1800X cstecgi.cgi sub_41A68C command injection8.7CNA v4.02.9%2026-05-01
CVE-2026-7546Totolink NR1800X lighttpd find_host_ip stack-based overflow9.3CNA v4.01.0%2026-05-01
CVE-2026-7545SourceCodester Advanced School Management System checkEmail endpoint SQL injection6.9CNA v4.00.4%2026-05-01
CVE-2026-7538Totolink A8000RU CGI cstecgi.cgi vulnerability os command injection9.3CNA v4.03.3%2026-05-01
CVE-2026-7536Open5GS BSF pcfBindings bsf_sess_add_by_ip_address denial of service6.9CNA v4.00.6%2026-05-01
CVE-2026-7535Open5GS transfer-update denial of service5.3CNA v4.00.5%2026-05-01
CVE-2026-7519Fujian Apex LiveBOS Endpoint UploadImage.do path traversal6.9CNA v4.00.6%2026-05-01
CVE-2026-7518Open5GS AMF SBI endpoint denial of service5.3CNA v4.00.5%2026-05-01
CVE-2026-7513UTT HiPER 1200GW formRemoteControl strcpy buffer overflow8.7CNA v4.00.8%2026-05-01
CVE-2026-7512UTT HiPER 1200GW formUser strcpy buffer overflow8.7CNA v4.00.8%2026-05-01
CVE-2026-6127Elementor Website Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-05-01Fix
CVE-2026-5404Buffer copy without checking size of input (Classic buffer overflow) in Wireshark4.7CNA v3.10.1%2026-05-01Fix
CVE-2026-3772WP Editor WordPress plugin cross-site request forgery to remote code execution8.8CNA v3.10.3%2026-05-01Fix
CVE-2026-3143Total Upkeep WordPress plugin missing authorization to unauthenticated Rollback Cancellation5.3CNA v3.10.4%2026-05-01Fix
CVE-2026-3140Ultimate Dashboard WordPress plugin cross-site request forgery to Module Activation/Deactivation4.3CNA v3.10.2%2026-05-01Fix