CVE-2026 list

CVE-2026 records published in July 2026

Page five of 10: records 4,001 to 5,000 of the 9,534 published in July 2026, newest first. The first page carries the figures for July 2026.

CVE-2026 records published in July 2026, newest first: records 4,001 to 5,000 of 9,534
CVE Summary CVSS EPSS Published Signals
CVE-2026-47031Oracle E-Business Suite Bills of Material Bill Issues component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-47030Oracle Java SE improper access control3.1CNA v3.10.2%2026-07-21Fix
CVE-2026-47028Oracle Document Management and Collaboration Attachments component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-47027Oracle Java SE improper access control5.3CNA v3.10.4%2026-07-21Fix
CVE-2026-47026Oracle PeopleSoft Enterprise PeopleTools OpenSearch Dashboards component unauthorized data access7.4CNA v3.10.4%2026-07-21Fix
CVE-2026-47024Oracle PeopleSoft Enterprise PeopleTools Panel Processor component unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-47023Oracle MySQL Server, MySQL Cluster Server Replication component denial of service4.9CNA v3.10.5%2026-07-21Fix
CVE-2026-47022Oracle GoldenGate Stream Analytics Security component denial of service3.3CNA v3.10.1%2026-07-21Fix
CVE-2026-47021Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service5.3CNA v3.10.4%2026-07-21Fix
CVE-2026-47019Oracle E-Business Suite Product Hub Item Catalog component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-47018Oracle Siebel CRM Cloud Applications Siebel Cloud Manager component denial of service7.5CNA v3.10.5%2026-07-21Fix
CVE-2026-47017Oracle PeopleSoft Enterprise PeopleTools Process Scheduler component unauthorized data access8.7CNA v3.10.3%2026-07-21Fix
CVE-2026-47016Oracle Siebel CRM Integration Event Publish and Subscribe component information disclosure1.9CNA v3.10.2%2026-07-21Fix
CVE-2026-47015Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification7.1CNA v3.10.2%2026-07-21Fix
CVE-2026-47014Oracle E-Business Suite Product Workbench Security component unauthorized data access8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-47013Oracle Java SE resource exhaustion5.3CNA v3.10.4%2026-07-21Fix
CVE-2026-47012Oracle MySQL Server, MySQL Cluster Server Optimizer component denial of service4.4CNA v3.10.4%2026-07-21Fix
CVE-2026-47011Oracle Siebel CRM Deployment application interface component information disclosure2.6CNA v3.10.2%2026-07-21Fix
CVE-2026-47010Oracle Java SE improper access control3.7CNA v3.10.3%2026-07-21Fix
CVE-2026-47009Oracle Supply Chain Agile PLM Folders, files & Attachments component unauthorized data access6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-47008Oracle MySQL Server, MySQL Cluster InnoDB component denial of service4.9CNA v3.10.5%2026-07-21Fix
CVE-2026-47007Oracle Communications Pricing Design Center On-premise Deployment component unauthorized data access7.3CNA v3.10.2%2026-07-21Fix
CVE-2026-47006Oracle Enterprise Manager Base Platform Self Update Framework component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-47005Oracle Enterprise Manager Base Platform Self Update Framework component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-47004Oracle Enterprise Manager Base Platform Self Update Framework component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-47003Oracle Enterprise Manager Base Platform UI Framework component unauthorized data access5.9CNA v3.10.3%2026-07-21Fix
CVE-2026-47002Oracle Enterprise Manager Base Platform UI Framework component unauthorized data modification6.1CNA v3.10.2%2026-07-21Fix
CVE-2026-47001Oracle Enterprise Manager Base Platform unauthorized data modification5.4CNA v3.10.2%2026-07-21Fix
CVE-2026-47000Oracle Enterprise Manager Base Platform Security Framework component unauthorized data modification3.5CNA v3.10.1%2026-07-21Fix
CVE-2026-46999Oracle Enterprise Manager Base Platform Discovery Framework component unauthorized data modification7.0CNA v3.10.3%2026-07-21Fix
CVE-2026-46998Oracle Enterprise Manager Base Platform Metadata plugin component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-46997Oracle Enterprise Manager Base Platform Metadata plugin component unauthorized data modification6.5CNA v3.10.3%2026-07-21Fix
CVE-2026-46996Oracle Enterprise Manager Base Platform Metadata plugin component unauthorized data modification7.1CNA v3.10.3%2026-07-21Fix
CVE-2026-46995Oracle Enterprise Manager Base Platform Metadata plugin component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-46994Oracle Enterprise Manager Base Platform Agent Next Gen component takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-46993Oracle Enterprise Manager Base Platform Agent Next Gen component unauthorized data access8.2CNA v3.10.3%2026-07-21Fix
CVE-2026-46992Oracle Enterprise Manager Base Platform Enterprise Config Management component takeover8.8CNA v3.10.4%2026-07-21Fix
CVE-2026-46991Oracle Enterprise Manager Base Platform unauthorized data modification4.4CNA v3.10.1%2026-07-21Fix
CVE-2026-46990Oracle Enterprise Manager Base Platform unauthorized data modification7.3CNA v3.10.3%2026-07-21Fix
CVE-2026-46989Oracle Enterprise Manager Base Platform UI Framework component unauthorized data access9.1CNA v3.10.3%2026-07-21Fix
CVE-2026-46988Oracle Enterprise Manager Base Platform Connector Framework component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-46987Oracle Enterprise Manager Base Platform unauthorized data access7.7CNA v3.10.4%2026-07-21Fix
CVE-2026-46986Oracle Enterprise Manager Base Platform Agent Next Gen component information disclosure5.3CNA v3.10.3%2026-07-21Fix
CVE-2026-46985Oracle Enterprise Manager Base Platform Agent Next Gen component information disclosure5.3CNA v3.10.3%2026-07-21Fix
CVE-2026-46984Oracle Enterprise Manager Base Platform Agent Next Gen component information disclosure5.3CNA v3.10.3%2026-07-21Fix
CVE-2026-46983Oracle Retail Applications Retail Integration Bus RIB Kernal component takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-46982Oracle Retail Applications Retail Integration Bus RIB Kernal component takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-46981Oracle Utilities Network Management System Mobile component unauthorized data modification7.2CNA v3.10.3%2026-07-21Fix
CVE-2026-46980Oracle Utilities Network Management System Mobile component information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-46975Oracle Database Server improper access control5.8CNA v3.10.3%2026-07-21Fix
CVE-2026-46968Oracle Java SE improper access control5.9CNA v3.10.3%2026-07-21Fix
CVE-2026-46954Oracle E-Business Suite Human Resources Data Removal tool component takeover7.2CNA v3.10.5%2026-07-21Fix
CVE-2026-46948Oracle Utilities Network Management System Security component unauthorized data modification4.6CNA v3.10.2%2026-07-21Fix
CVE-2026-46943Oracle Retail Applications Retail EFTLink Core/Plugin component unauthorized data access7.4CNA v3.10.3%2026-07-21Fix
CVE-2026-46941Oracle E-Business Suite Cost Management Cost Maintenance component takeover7.5CNA v3.10.3%2026-07-21Fix
CVE-2026-46936Oracle MySQL Server, MySQL Cluster Server DDL component denial of service4.4CNA v3.10.3%2026-07-21Fix
CVE-2026-46924Oracle Application Testing Suite takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-46923Oracle Public Sector Financials (International) Authorization component takeover8.0CNA v3.10.4%2026-07-21Fix
CVE-2026-46917Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service5.3CNA v3.10.4%2026-07-21Fix
CVE-2026-46876Oracle Application Testing Suite takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-46681@nevware21/ts-utils: Prototype pollution in objDeepCopy/objCopyProps7.2CNA v4.00.5%2026-07-21Fix
CVE-2026-46600Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5CISA ADP v3.10.6%2026-07-21Fix
CVE-2026-46556FlaskBB: SSRF in get_image_info via unrestricted avatar URL6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-46403Klever-Go KVM read-only execution can commit contract delete and upgrade side effects6.3CNA v3.10.4%2026-07-21Fix
CVE-2026-45383libde265 has a heap buffer overflow in decode_slice_unit_WPP6.9CNA v4.00.4%2026-07-21Fix
CVE-2026-45382struktur AG libde265 slice unit tile decoder out-of-bounds read6.9CNA v4.00.4%2026-07-21Fix
CVE-2026-44907Meta react-server-dom-turbopack react-server-dom: Denial of service in Server functions7.5CNA v3.10.6%2026-07-21Fix
CVE-2026-44880Low-privilege authenticated buffer overflow vulnerabilities lead to remote code execution in AOS-CX8.8CNA v3.10.8%2026-07-21Fix
CVE-2026-44879HPE EdgeConnect SD-WAN Gateway command line interface command injection7.2CNA v3.11.5%2026-07-21
CVE-2026-44878HPE EdgeConnect SD-WAN Gateway web management interface path traversal7.2CNA v3.10.6%2026-07-21
CVE-2026-43947FUXA vulnerable to unauthenticated remote code execution via Script Test Mode authorization bypass8.9CNA v4.00.9%2026-07-21Fix
CVE-2026-43946FUXA has an unauthenticated arbitrary tag value disclosure via /API/getTagValue7.7CNA v4.00.6%2026-07-21Fix
CVE-2026-43945FUXA vulnerable to Pre-auth RCE via Path Manipulation and Configuration injection8.9CNA v4.00.8%2026-07-21Fix
CVE-2026-42397Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.4%2026-07-21Fix
CVE-2026-35290Oracle Application Testing Suite takeover9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-35287Oracle Application Testing Suite unauthorized access7.5CNA v3.10.4%2026-07-21Fix
CVE-2026-34316Oracle Commerce Service Center unauthorized data modification6.1CNA v3.10.2%2026-07-21Fix
CVE-2026-30633knowns-dev/knowns path traversal7.5CISA ADP v3.10.9%2026-07-21
CVE-2026-30632knowns-dev/knowns path traversal7.5CISA ADP v3.10.9%2026-07-21
CVE-2026-30631bytebot-ai computer_write_file function OS command injection9.8CISA ADP v3.10.7%2026-07-21
CVE-2026-28321SolarWinds Serv-U broken access control9.1CNA v3.10.6%2026-07-21Fix
CVE-2026-28317SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-28316SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.12.1%2026-07-21Fix
CVE-2026-28315SolarWinds Serv-U authenticated stored cross-site scripting (XSS)6.2CNA v3.10.5%2026-07-21Fix
CVE-2026-28314SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.10.6%2026-07-21Fix
CVE-2026-28313SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-28312SolarWinds Serv-U privilege escalation9.1CNA v3.10.6%2026-07-21Fix
CVE-2026-28310SolarWinds Serv-U privilege escalation9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-28309SolarWinds Serv-U broken access control9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-28308SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.10.8%2026-07-21Fix
CVE-2026-28307SolarWinds Serv-U privilege escalation9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-28306SolarWinds Serv-U privilege escalation9.1CNA v3.10.5%2026-07-21Fix
CVE-2026-28305SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.10.8%2026-07-21Fix
CVE-2026-28304SolarWinds Serv-U remote code execution9.1CNA v3.10.8%2026-07-21Fix
CVE-2026-28302SolarWinds Serv-U insecure direct object reference (IDOR)9.1CNA v3.10.8%2026-07-21Fix
CVE-2026-24232NVIDIA Tranformers4Rec deserialization of untrusted data4.3CNA v3.10.4%2026-07-21Fix
CVE-2026-21954Oracle Retail Xstore Point of Service Xstore Mobile component information disclosure4.3CNA v3.10.3%2026-07-21Fix
CVE-2026-21953Oracle Retail Xstore Point of Service Xstore Mobile component information disclosure3.3CNA v3.10.1%2026-07-21Fix
CVE-2026-21579Atlassian Confluence Data Center information disclosure8.2CNA v4.00.4%2026-07-21Fix
CVE-2026-21577Atlassian Confluence Data Center denial of service7.1CNA v4.00.4%2026-07-21Fix
CVE-2026-21575Atlassian Sourcetree code injection7.1CNA v3.00.6%2026-07-21Fix
CVE-2026-16517libarchive ZIP writer integer overflow2.9CNA v3.10.1%2026-07-21Fix
CVE-2026-16493Red Hat Satellite ansible-core: Argument injection in ansible-galaxy collection install7.8CNA v3.10.2%2026-07-21Fix
CVE-2026-16489jsforce SFDX Connection Registry sfdx.js _execCommand os command injection4.8CNA v4.01.1%2026-07-21
CVE-2026-16488QUSETIONS MiniCode-Python Project file config.py subprocess.Popen os command injection2.3CNA v4.01.5%2026-07-21Fix
CVE-2026-16486SourceCodester Class and Exam Timetabling System BSIS.php cross-site scripting5.3CNA v4.00.5%2026-07-21
CVE-2026-16485SourceCodester Class and Exam Timetabling System class.php cross-site scripting5.3CNA v4.00.5%2026-07-21
CVE-2026-16484SourceCodester Class and Exam Timetabling System edit_subjecta.php SQL injection6.9CNA v4.00.4%2026-07-21
CVE-2026-16461Red Hat Enterprise Linux 10 rpcbind's rpcinfo utility stack-based buffer overflow6.5CNA v3.10.3%2026-07-21Fix
CVE-2026-16454Privilege escalation in Eclipse hawkBit DDI allows Tenant-Isolated Firmware Exfiltration4.3CNA v3.10.4%2026-07-21
CVE-2026-16451zsadmin2025 ZS-Admin com.zs.file.controller.SysFileController upload unrestricted upload5.3CNA v4.00.3%2026-07-21
CVE-2026-16450zsadmin2025 ZS-Admin MyBatis-Plus Tenant plugin page getTenantId authorization5.3CNA v4.00.4%2026-07-21
CVE-2026-16449zsadmin2025 ZS-Admin com.zs.sys.dept.controller.SysDeptController page OrderItem.desc SQL injection5.3CNA v4.00.3%2026-07-21
CVE-2026-16448D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection5.3CNA v4.01.9%2026-07-21
CVE-2026-16447D-Link DNS-320 multi_uploadify.php unrestricted upload6.9CNA v4.01.6%2026-07-21
CVE-2026-16445Red Hat Enterprise Linux 8 dracut: Dracut: Root code execution7.5CNA v3.11.1%2026-07-21Fix
CVE-2026-16441Eclipse OpenJ9: Method resolution default method precedence failure6.9CNA v4.00.5%2026-07-21Fix
CVE-2026-16439Eclipse OpenJ9: Using -Xtrace to trace method arguments can lead to buffer underflow5.8CNA v4.00.4%2026-07-21Fix
CVE-2026-16424Google Chrome GPU use-after-free9.6CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16423Google Chrome UI use-after-free8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16422Google Chrome spoofing7.5CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16421Google Chrome WebAudio inappropriate implementation8.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-16420Google Chrome WebAudio type confusion8.8CISA ADP v3.10.6%2026-07-21Fix
CVE-2026-16419Google Chrome ANGLE out-of-bounds read9.6CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16418Google Chrome V8 stack-based buffer overflow8.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-16417Google Chrome uninitialized variable use3.1CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16416Google Chrome Chromecast integer overflow9.3CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-16415Google Chrome improper input validation5.4CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16414Google Chrome sandbox escape7.8NVD v3.10.1%2026-07-21Fix
CVE-2026-16413Google Chrome ANGLE out-of-bounds write8.3CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16412Memory safety bugs fixed in Thunderbird ESR and Thunderbird 1539.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-16411Memory safety bugs fixed in Thunderbird 1539.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-16410Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component9.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16409Mozilla Firefox invalid pointer in the Security: PSM component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16408Mozilla Firefox integer overflow in the Audio/Video: Playback component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16407Mozilla Firefox Mitigation bypass in the DOM: Service Workers component9.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16406Mozilla Firefox mitigation bypass in the Networking component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16405Mozilla Firefox information disclosure in the Networking: WebSockets component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16404Mozilla spoofing issue in Firefox for Android7.4CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16403Mozilla Firefox spoofing issue in the Address Bar component6.5CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16402Mozilla Firefox integer overflow in the Graphics: ImageLib component9.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16401Mozilla Firefox privilege escalation in the Data Loss Prevention component8.8CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16400Mozilla Firefox information disclosure in the DOM: Security component7.5CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16399Mozilla Firefox site isolation issue in the DOM: Navigation component7.5CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-16398Mozilla Firefox site isolation issue in the Graphics component7.5CISA ADP v3.10.1%2026-07-21Fix
CVE-2026-16397Mozilla clickjacking issue in the WebExtensions component in Firefox for Android6.5CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16396Mozilla Firefox privilege escalation in WebExtensions8.8CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16395Mozilla Firefox integer overflow in the Audio/Video component9.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16394Mozilla Firefox mitigation bypass in the DOM: Security component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16393Mozilla Firefox incorrect boundary conditions in the Graphics: WebGPU component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16392Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component9.1CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16391Mozilla Firefox information disclosure in the Storage: IndexedDB component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16390Mozilla Firefox Mitigation bypass in the Enterprise Policies component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16389Mozilla Firefox incorrect boundary conditions, integer overflow in the Libraries component in NSS9.8CISA ADP v3.10.6%2026-07-21Fix
CVE-2026-16388Mozilla Firefox sandbox escape in the DOM: Networking component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16387Mozilla Firefox site isolation issue in the Networking component9.8CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16386Mozilla Firefox information disclosure due to uninitialized memory in the Graphics: WebGPU component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16385Mozilla Firefox information disclosure due to uninitialized memory in the Graphics: WebGPU component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16384Mozilla Firefox information disclosure due to uninitialized memory in the Graphics: WebGPU component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16383Mozilla Firefox mitigation bypass in the DOM: Networking component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16382Mozilla Firefox Mitigation bypass in the DOM: Service Workers component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16381Mozilla Firefox same-origin policy bypass in the Networking: DNS component9.1CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16380Mozilla Firefox mitigation bypass in the Networking component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16379Mozilla Firefox privilege escalation in the DOM: Content Processes component8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16378Mozilla Firefox Other issue in the DOM: Copy and Paste and Drag and Drop component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16377Mozilla Firefox mitigation bypass in the PDF Viewer component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16376Mozilla Firefox denial of service in the Graphics: WebGPU component7.5CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16375Mozilla Firefox site isolation issue in the Networking: HTTP component9.8CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16374Mozilla Firefox information disclosure in the Framework component in DevTools7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16373Mozilla information disclosure in the Privacy component in Firefox for Android7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16372Mozilla Firefox privilege escalation in the DOM: Content Processes component8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16371Mozilla Firefox privilege escalation in the DOM: Navigation component8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16370Mozilla Firefox mitigation bypass in the DOM: Networking component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16369Mozilla Firefox integer overflow in the JavaScript: WebAssembly component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16368Mozilla Firefox incorrect boundary conditions in the JavaScript: WebAssembly component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16367Mozilla Firefox sandbox escape due to invalid pointer in the Disability Access APIs component10.0CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16366Mozilla Firefox privilege escalation in the DOM: Navigation component8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16365Mozilla Firefox privilege escalation in the DOM: Workers component8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16364Mozilla Firefox incorrect boundary conditions in the Audio/Video: Playback component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16363Mozilla Firefox JIT miscompilation in the JavaScript: WebAssembly component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16362Mozilla Firefox use-after-free in the WebRTC: Audio/Video component8.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16361Memory safety bugs fixed in Thunderbird ESR9.8CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16360Memory safety bugs fixed in Thunderbird ESR and Thunderbird 1539.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-16359Mozilla Firefox incorrect boundary conditions in the Audio/Video: GMP component9.1CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16358Mozilla Firefox site isolation issue in the Graphics: WebRender component9.8CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16357Mozilla Firefox incorrect boundary conditions in the Graphics component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16356Mozilla Firefox sandbox escape due to use-after-free in the Disability Access APIs component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16355Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16354Mozilla Firefox information disclosure in the Graphics: ImageLib component7.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-16353Mozilla Firefox invalid pointer in the DOM: Bindings (WebIDL) component9.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-16352Mozilla Firefox sandbox escape due to use-after-free in the Disability Access APIs component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16351Mozilla Firefox sandbox escape due to use-after-free in the DOM: Navigation component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16350Mozilla Firefox incorrect boundary conditions in the Audio/Video: Cubeb component9.8CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-16349Mozilla Firefox same-origin policy bypass in the DOM: Navigation component9.8CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-16336trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect5.3CNA v4.00.4%2026-07-21
CVE-2026-16334itsourcecode Hospital Management System prescriptionorder.php SQL injection5.3CNA v4.00.3%2026-07-21
CVE-2026-16332D-Link DNS-320 multi_uploadify.php unrestricted upload6.9CNA v4.01.4%2026-07-21
CVE-2026-16331D-Link DNS-320 save_ajax.php unrestricted upload6.9CNA v4.01.6%2026-07-21
CVE-2026-16330D-Link DNS-320 uploadify.php unrestricted upload6.9CNA v4.01.6%2026-07-21
CVE-2026-16329D-Link DNS-320 uploadify.php unrestricted upload6.9CNA v4.01.4%2026-07-21
CVE-2026-16318QUIC Transport parameters memory leak during HelloRetryRequest in s2n-tls6.9CNA v4.00.5%2026-07-21Fix
CVE-2026-16317Silent Drop of TLS 1.3 Encrypted Records in s2n-tls8.3CNA v4.00.2%2026-07-21Fix
CVE-2026-16266mongo-object prototype pollution6.3CNA v4.00.4%2026-07-21Fix
CVE-2026-16243Eclipse Omr: Arraycmp SIMD implementation does not check if the number of bytes to compare is zero5.7CNA v4.00.4%2026-07-21Fix
CVE-2026-15957aws-sdk-rust uncontrolled recursion8.7CNA v4.00.8%2026-07-21Fix
CVE-2026-15927Quay: Mirror-registry: Ssrf: Repo-level mirror accepts external_reference without URL validation6.8CNA v3.10.6%2026-07-21Fix
CVE-2026-15829SQL injection and Security Boundary Bypass in googleapis/mcp-toolbox8.6CNA v4.00.2%2026-07-21
CVE-2026-15812kronosnet dynamic link access control vulnerability4.8CNA v3.10.3%2026-07-21Fix
CVE-2026-15811kronosnet cryptographic configuration memory handling information disclosure5.8CNA v3.10.1%2026-07-21Fix
CVE-2026-15793moby BuildKit git source checkout from a bundle file could lead to command injection6.5CNA v4.00.2%2026-07-21Fix
CVE-2026-15792moby BuildKit possible panic when incorrect parameters sent from frontend6.3CNA v4.00.2%2026-07-21Fix
CVE-2026-15791moby BuildKit LLB file operation can be tricked to remove /tmp directory contents3.3CNA v4.00.2%2026-07-21Fix
CVE-2026-15789moby BuildKit malicious client can bypass destination directory validation on local sources upload6.9CNA v4.00.3%2026-07-21Fix
CVE-2026-15782WPForms WordPress plugin stored cross-site scripting4.9CNA v3.10.3%2026-07-21Fix
CVE-2026-15724Path traversal in Progress ShareFile Storage Zones Controller (SZC)8.7CNA v3.10.5%2026-07-21Fix
CVE-2026-15432Google observable timing discrepancy in Tink-Java and Tink-Android ChunkedMacVerification8.2CNA v4.00.2%2026-07-21
CVE-2026-15370Libssh: Libssh: Stack buffer overflow in sftp server longname construction7.3NVD v3.10.2%2026-07-21Fix
CVE-2026-15342Plane asset management API insecure direct object reference6.5CISA ADP v3.10.4%2026-07-21
CVE-2026-15226Canonical snapd snap-confine seccomp templates vulnerability8.4CNA v3.10.2%2026-07-21Fix
CVE-2026-15156Essential Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-21Fix
CVE-2026-15145Essential Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-07-21Fix
CVE-2026-14185WPBot AI ChatBot WordPress plugin Subscriber+ RAG settings update4.3CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-14184Academy LMS WordPress plugin Subscriber+ Cross-User Lesson Note and Progress modification via IDOR5.4CISA ADP v3.10.2%2026-07-21Fix
CVE-2026-14183Classified Listing WordPress plugin Subscriber+ Payment Receipt disclosure via IDOR4.3CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-13694Bit Form WordPress plugin unauthenticated Workflow Trigger via authentication bypass6.5CISA ADP v3.10.3%2026-07-21Fix
CVE-2026-13693Bit Form WordPress plugin unauthenticated arbitrary file read via path traversal5.9CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-13439Easy Form Builder by WhiteStudio WordPress plugin privilege escalation9.8CNA v3.10.7%2026-07-21Fix
CVE-2026-12548Libsoup: Heap out-of-bounds read in libsoup due to integer truncation4.2CNA v3.10.3%2026-07-21Fix
CVE-2026-12547Red Hat Enterprise Linux 10 libsoup: Information disclosure in libsoup3.4CNA v3.10.2%2026-07-21Fix
CVE-2026-12139Tanium addressed an information disclosure vulnerability in Connect4.4CNA v3.10.2%2026-07-21Fix
CVE-2026-11925Tanium Server UI misrepresentation2.7CNA v3.10.3%2026-07-21Fix
CVE-2026-11876Missing authorization in get_deployed_stack endpoint in zenml-io/zenml5.0CNA v3.00.3%2026-07-21Fix
CVE-2026-11767CRT Addons for Elementor WordPress plugin unauthenticated stored XSS via Contact form8.8CISA ADP v3.10.5%2026-07-21Fix
CVE-2026-10680Out-of-bounds access in Zephyr BR/EDR L2CAP configuration request handling7.6CNA v3.10.2%2026-07-21Fix
CVE-2026-10679zephyrproject zephyr divide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall3.3CNA v3.10.1%2026-07-21Fix
CVE-2026-10678Zephyr MCTP I2C GPIO target driver null pointer dereference8.1CNA v3.10.4%2026-07-21Fix
CVE-2026-10677Zephyr k_poll syscall verifier memory leak6.5CNA v3.10.1%2026-07-21Fix
CVE-2026-10675Zephyr Bluetooth Mesh provisioning bearer denial of service4.3CNA v3.10.4%2026-07-21Fix
CVE-2026-10674Zephyr NXP LPUART driver denial of service5.5CNA v3.10.1%2026-07-21Fix
CVE-2026-9499Out-of-bounds read in QTextCodec::codecForName in Qt6.3CNA v4.00.3%2026-07-21Fix
CVE-2026-8989Autel MaxiCharger Single Open Recovery Mode6.8NVD v3.10.2%2026-07-21
CVE-2026-8988Autel MaxiCharger Single UART bootloader interface vulnerability6.8NVD v3.10.2%2026-07-21
CVE-2026-8987Autel MaxiCharger Single authenticated heap overflow8.8NVD v3.10.6%2026-07-21
CVE-2026-8986Autel MaxiCharger Single command injection via Malicious OCPP Server9.8NVD v3.13.3%2026-07-21
CVE-2026-8985Autel MaxiCharger Single unauthenticated command injection9.8NVD v3.17.1%2026-07-21
CVE-2026-8984Autel MaxiCharger Single unauthenticated RCE9.8NVD v3.10.9%2026-07-21
CVE-2026-8983Autel MaxiCharger Single backdoor Authentication Token9.8NVD v3.10.7%2026-07-21
CVE-2026-8982Autel MaxiCharger Single Hard-coded / backdoor Accounts8.1NVD v3.10.5%2026-07-21
CVE-2026-8933Canonical Ubuntu snap-confine local privilege escalation7.8CNA v3.10.2%2026-07-21Fix
CVE-2026-8593Checkmk Fix Business Intelligence API Pack permission5.3CNA v4.00.4%2026-07-21Fix
CVE-2026-8285OTP Bypass in Universal Sotware's FlexCity4.3CNA v3.10.4%2026-07-21Fix
CVE-2026-8284Open redirect in Universal Sotware's FlexCity6.1CNA v3.10.2%2026-07-21Fix
CVE-2026-8082Bpost Shipping Platform WooCommerce order submission handler SQL injection7.5CISA ADP v3.10.4%2026-07-21Fix
CVE-2026-6952Zyxel AX7501-B1 firmware "LogServer" field of the syslog component command injection7.2CNA v3.11.5%2026-07-21Fix
CVE-2026-6792Improper authorization in Universal Sotware's FlexCity6.5CNA v3.10.3%2026-07-21Fix
CVE-2026-3183Zoho ManageEngine ADSelfService Plus Multi Factor Auth Bypass7.1CNA v3.11.2%2026-07-21Fix
CVE-2026-3182Zoho ManageEngine Endpoint Central sensitive data exposure4.3CNA v3.10.6%2026-07-21Fix
CVE-2026-1771MapSVG WordPress plugin arbitrary file upload7.2CNA v3.11.1%2026-07-21Fix
CVE-2026-1617SQLi in Turkmesh's Turkhotspot 5651 Loglama9.8CNA v3.10.5%2026-07-21Fix
CVE-2026-1372Tutor LMS Elementor Addons WordPress plugin missing authorization4.3CNA v3.10.4%2026-07-21
CVE-2026-64651vercel @ai-sdk/harness-opencode AI SDK OpenCode Harness Tool Relay authorization bypass6.3CNA v4.00.2%2026-07-20Fix
CVE-2026-64650vercel @ai-sdk/harness-codex AI SDK Codex Harness Tool Relay authorization bypass6.3CNA v4.00.2%2026-07-20Fix
CVE-2026-64626AVideo Encoder downloadURL SSRF via unpinned retry fallback5.3CNA v4.00.3%2026-07-20
CVE-2026-64625AVideo OS command injection via execAsync9.3CNA v4.00.6%2026-07-20Fix
CVE-2026-64624FreeRDP RDP file parser remote code execution via CLI options8.5CNA v4.00.2%2026-07-20Fix
CVE-2026-64623Network-AI Cryptographic signature verification Bypass8.8CNA v4.00.3%2026-07-20Fix
CVE-2026-64622Network-AI missing authorization via ApprovalInbox9.3CNA v4.00.5%2026-07-20
CVE-2026-64621FreeRDP double free via selectedmonitors9.3CNA v4.00.4%2026-07-20Fix
CVE-2026-64620FreeRDP heap buffer overflow via crypto_rsa_common9.1v3.10.9%2026-07-20Fix
CVE-2026-64619FileCodeBox Anti-bruteforce Rate Limit Bypass via Spoofed headers8.7CNA v4.00.3%2026-07-20Fix
CVE-2026-64612cups-filters libcupsfilters PNG image filter vulnerability7.5CNA v3.10.7%2026-07-20Fix
CVE-2026-64207Linux kernel dualpi2 scheduler null pointer dereference5.5v3.10.1%2026-07-20Fix
CVE-2026-64206Linux kernel L2CAP connection teardown deadlock8.8CNA v3.10.2%2026-07-20Fix
CVE-2026-64205Linux kernel i801 SMBus controller driver denial of service5.5v3.10.2%2026-07-20Fix
CVE-2026-64194Net::DNS versions for Perl allow denial of service via deep DNS compression pointer chains7.5CISA ADP v3.10.7%2026-07-20Fix
CVE-2026-64193Net::DNS versions for Perl allow remote execution injection via EDNS EXTENDED error9.8CISA ADP v3.11.4%2026-07-20Fix
CVE-2026-64192Linux kernel BPF inode storage map null pointer dereference5.5v3.10.1%2026-07-20Fix
CVE-2026-64191Linux kernel I2C stub driver out-of-bounds read7.8CNA v3.10.1%2026-07-20Fix
CVE-2026-64190Linux kernel team driver transmit path null pointer dereference5.5NVD v3.10.1%2026-07-20Fix
CVE-2026-64189Linux kernel netfilter ipset dump race condition7.8CNA v3.10.1%2026-07-20Fix
CVE-2026-64188Linux kernel rmnet driver use-after-free7.8CNA v3.10.1%2026-07-20Fix
CVE-2026-64187Linux kernel XFS log recovery null pointer dereference5.5v3.10.1%2026-07-20Fix
CVE-2026-63771Adminer Cookie injection via X-Forwarded-Prefix header6.0CNA v4.00.4%2026-07-20Fix
CVE-2026-63770Glance IP spoofing authentication brute-force Protection Bypass8.2CNA v4.00.3%2026-07-20
CVE-2026-63769Huginn SSRF via ScenarioImport fetch_url method6.3CNA v4.00.4%2026-07-20Fix
CVE-2026-63768cal.diy Conferencing OAuth Callback open redirect via Unsigned State5.3CNA v4.00.3%2026-07-20
CVE-2026-63767ktransformers Unauthenticated Pickle deserialization RCE via ZMQ9.3CNA v4.01.1%2026-07-20
CVE-2026-63766GPT-SoVITS 20250606v2pro OS command injection via webui.py9.3CNA v4.02.1%2026-07-20
CVE-2026-63763SurrealDB privilege escalation via Future fields8.8v3.10.5%2026-07-20Fix
CVE-2026-63762SurrealDB denial of service via scripting6.5NVD v3.10.5%2026-07-20Fix
CVE-2026-63761SurrealDB Algorithm Downgrade via ES5125.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63760SurrealDB denial of service via JSON parser8.7CNA v4.00.5%2026-07-20Fix
CVE-2026-63759SurrealDB denial of service nested type annotations7.1CNA v4.00.5%2026-07-20Fix
CVE-2026-63758SurrealDB authorization bypass via KILL Statement5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63757SurrealDB session hijacking via /RPC sessions8.7CNA v4.00.5%2026-07-20Fix
CVE-2026-63756SurrealDB privilege escalation via RPC Session race condition9.2CNA v4.00.4%2026-07-20Fix
CVE-2026-63755SurrealDB permission bypass via WHERE Clause7.1CNA v4.00.4%2026-07-20Fix
CVE-2026-63754SurrealDB denial of service via LIVE Query7.1CNA v4.00.5%2026-07-20Fix
CVE-2026-63753SurrealDB authentication bypass via LIVE Query5.3CNA v4.00.4%2026-07-20Fix
CVE-2026-63752SurrealDB RELATE Statement Record Overwrite5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63751SurrealDB field permission bypass via JSON Patch5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63750SurrealDB Memory Amplification via /SQL WebSocket7.5v3.10.5%2026-07-20Fix
CVE-2026-63749SurrealDB authentication bypass via LIVE SELECT5.3CNA v4.00.4%2026-07-20Fix
CVE-2026-63748SurrealDB information disclosure via Error messages5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63747SurrealDB denial of service via malformed RPC use8.7CNA v4.00.5%2026-07-20Fix
CVE-2026-63746SurrealDB permission bypass via Graph Traversal7.1CNA v4.00.4%2026-07-20Fix
CVE-2026-63745SurrealDB authorization bypass via Composite Record-id5.3CNA v4.00.2%2026-07-20Fix
CVE-2026-63744SurrealDB SSRF via JWKS URL Redirect5.1CNA v4.00.3%2026-07-20Fix
CVE-2026-63743SurrealDB Port-Specific Deny Rule Bypass via HTTP Redirect5.3CNA v4.00.2%2026-07-20Fix
CVE-2026-63742SurrealDB field permission bypass via Indexed COUNT5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63741SurrealDB authentication bypass via use statement6.9CNA v4.00.4%2026-07-20Fix
CVE-2026-63740SurrealDB Array Element permission bypass7.1CNA v4.00.4%2026-07-20Fix
CVE-2026-63739SurrealDB arbitrary file read via DEFINE ANALYZER8.3CNA v4.00.5%2026-07-20Fix
CVE-2026-63738SurrealDB field permission bypass via Traversal5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63737SurrealDB denial of service via deep operator chains7.1CNA v4.00.5%2026-07-20Fix
CVE-2026-63736SurrealDB SSRF via JWKS URL hostname resolution5.1CNA v4.00.3%2026-07-20Fix
CVE-2026-63735SurrealDB authentication bypass via Custom API8.6CNA v4.00.4%2026-07-20Fix
CVE-2026-63734SurrealDB denial of service via malformed SurrealML import6.9CNA v4.00.5%2026-07-20Fix
CVE-2026-63733SurrealDB permissions bypass via PERMISSIONS Clause6.5v3.10.3%2026-07-20Fix
CVE-2026-63731HyperDX SSRF via ClickHouse Proxy Test endpoint6.3CNA v4.00.4%2026-07-20Fix
CVE-2026-63730HyperDX SSRF via Webhook Test endpoint5.3CNA v4.00.4%2026-07-20Fix
CVE-2026-63728Gitleaks Secret Exfiltration via Non-Hermetic Sprig template functions in Report template feature8.1CNA v4.00.2%2026-07-20Fix
CVE-2026-63429HeyForm file upload endpoint missing authentication8.6CNA v3.10.5%2026-07-20Fix
CVE-2026-63428HeyForm form submission handler mass assignment5.8CNA v3.10.3%2026-07-20Fix
CVE-2026-63108RooCodeInc Roo-Code Roo Code command injection via Parameter Expansion Parsing7.7CNA v4.01.8%2026-07-20
CVE-2026-63107LimeSurvey SSRF via REST API Survey template host header6.3CNA v4.00.4%2026-07-20
CVE-2026-63102rConfig Core privilege escalation via Users API role field5.3CNA v4.00.3%2026-07-20Fix
CVE-2026-63091ProFTPD mod_sftp Signed integer overflow via SCP Size-Record parser7.1CNA v4.00.5%2026-07-20Fix
CVE-2026-63090ProFTPD mod_sftp heap buffer overflow via SFTP Packet Reassembly8.7CNA v4.00.9%2026-07-20Fix
CVE-2026-63071Apache Syncope: RCE via Groovy sandbox bypass9.8CISA ADP v3.10.8%2026-07-20Fix
CVE-2026-62418Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check8.1CISA ADP v3.10.5%2026-07-20Fix
CVE-2026-62414Joomla extension joomlack.fr improper access control in Page Builder CK9.1CISA ADP v3.10.4%2026-07-20
CVE-2026-62183Apache Syncope: User self-service privilege escalation9.8CISA ADP v3.10.7%2026-07-20Exploit codeFix
CVE-2026-61901Joomla extension hikashop.com open redirect in Hikashop6.1CISA ADP v3.10.2%2026-07-20
CVE-2026-61900Joomla extension dj-extensions.com unauthenticated arbitrary file upload in DJ-jDownloads10.0CNA v4.00.4%2026-07-20
CVE-2026-61425Joomla extension balbooa.com authentication bypass in Gridbox9.4CNA v4.00.6%2026-07-20
CVE-2026-61424Joomla extension dj-extensions.com unauthenticated arbitrary file upload in DJ-Classifieds10.0CNA v4.00.4%2026-07-20Exploit code
CVE-2026-60034Joomla extension themexpert.com authenticated stored XSS in JMedia extension9.4CNA v4.00.4%2026-07-20
CVE-2026-60033Joomla extension themexpert.com SSRF via remote download in JMedia extension5.1CNA v4.00.4%2026-07-20
CVE-2026-60032Joomla extension themexpert.com authenticated arbitrary file upload in JMedia9.4CNA v4.00.4%2026-07-20
CVE-2026-60031Joomla extension themexpert.com information disclosure in Quix Page Builder6.9CNA v4.00.4%2026-07-20
CVE-2026-60030Joomla extension themexpert.com broken access control for media management in Quix Page Builder8.7CNA v4.00.4%2026-07-20
CVE-2026-60029Joomla extension themexpert.com authenticated stored XSS in Quix Page Builder5.1CNA v4.00.4%2026-07-20
CVE-2026-60028Joomla extension themexpert.com authenticated stored XSS in Quix Page Builder8.6CNA v4.00.4%2026-07-20
CVE-2026-60027Joomla extension themexpert.com unauthenticated path traversal / file read in Quix Page Builder8.7CNA v4.00.5%2026-07-20
CVE-2026-60026Joomla extension themexpert.com Authenticated PHP code execution in Quix Page Builder8.9CNA v4.00.5%2026-07-20
CVE-2026-59238Stored XSS in Pentestify via unsanitized finding images and report client logo6.9CNA v4.00.6%2026-07-20Fix
CVE-2026-58624Apache Mina Sshd: Remote execution of JGit commands can write files on the server5.4CNA v3.10.6%2026-07-20Fix
CVE-2026-58484Jovancoding Network-AI backup pruning path traversal7.1CNA v3.10.2%2026-07-20Fix
CVE-2026-58482Network-AI: ApprovalInbox HTTP server has no authentication anyone can approve pending agent actions5.9CNA v3.10.2%2026-07-20Fix
CVE-2026-58481Jovancoding Network-AI AgentRuntime sandbox path traversal6.5CNA v3.10.2%2026-07-20Fix
CVE-2026-58414Jovancoding Network-AI EnvironmentManager backup file collection link following5.5CNA v3.10.2%2026-07-20Fix
CVE-2026-58413Jovancoding Network-AI EnvironmentManager backup restore path traversal6.1CNA v3.10.2%2026-07-20Fix
CVE-2026-57852Authentication bypass via Null Short-Circuit in Grav CMS Scheduler Webhook Token Check6.3CNA v4.00.7%2026-07-20Fix
CVE-2026-57495AgenticMail inbound mail handler missing authentication8.2CNA v4.00.4%2026-07-20Fix
CVE-2026-57494AgenticMail: Cross-agent task authorization bypass in AgenticMail API7.1CNA v4.00.4%2026-07-20Fix
CVE-2026-57311Unrestricted upload of file with dangerous type in Windu CMS5.3CNA v4.00.6%2026-07-20
CVE-2026-57310Weak password hashing in Windu CMS6.3CNA v4.00.3%2026-07-20
CVE-2026-57309Blind SQL injection in Windu CMS9.3CNA v4.00.5%2026-07-20
CVE-2026-57308Apache Syncope: SQL injection vulnerability in Audit Events search9.8CISA ADP v3.10.8%2026-07-20Fix
CVE-2026-56624Apache Mina Sshd: SSH certificate options lack validations7.3CNA v3.10.3%2026-07-20Fix
CVE-2026-56623Apache Mina Sshd: Path traversal in org.Apache.sshd:sshd-git on Windows7.1CNA v3.10.9%2026-07-20Fix
CVE-2026-56452Apache Mina Sshd: Path traversal in SCP file reception7.5CNA v3.10.8%2026-07-20Fix
CVE-2026-55833Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation7.5CNA v3.10.7%2026-07-20Fix
CVE-2026-55831Netty SPDY SETTINGS frame count materializes unbounded settings map7.5CNA v3.10.7%2026-07-20Fix
CVE-2026-55645xrdp Client Control PDU processing out-of-bounds read6.5CNA v3.10.5%2026-07-20Fix
CVE-2026-55639xrdp GCC Conference Create Request CS_SECURITY parsing out-of-bounds read5.3CNA v3.10.4%2026-07-20Fix
CVE-2026-55626xrdp Xvnc backend session missing authentication8.0CNA v3.10.2%2026-07-20Fix
CVE-2026-55550NextCRM MCP product tools missing authorization7.1CNA v3.10.3%2026-07-20
CVE-2026-55544NextCRM MCP campaign tools insecure direct object reference7.6CNA v3.10.3%2026-07-20
CVE-2026-55238xrdp Confirm Active PDU parser out-of-bounds read5.3CNA v3.10.5%2026-07-20Fix
CVE-2026-55219Paymenter: Race condition in payWithCredit enables credit double-spend5.3CNA v3.10.2%2026-07-20Fix
CVE-2026-54910FileBrowser Quantum subtitle handler path traversal7.7CNA v3.10.5%2026-07-20Fix
CVE-2026-54685FileBrowser Quantum has Username Enumeration via authentication timing side-channel5.3CNA v3.10.5%2026-07-20Fix
CVE-2026-54538xrdp RDP share control header parsing infinite loop7.5CNA v3.10.7%2026-07-20Fix
CVE-2026-54051Network-AI has an an OS command injection issue9.9CNA v3.10.7%2026-07-20Fix
CVE-2026-53596FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS)5.3CNA v3.10.4%2026-07-20Fix
CVE-2026-53595FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL9.4CNA v3.11.9%2026-07-20NucleiFix
CVE-2026-53594FreeScout has arbitrary file read in App Logs Viewer via Forged Encrypted Path4.9CNA v3.10.5%2026-07-20Fix
CVE-2026-53593FreeScout Vulnerable to authenticated remote code execution8.8CNA v3.10.5%2026-07-20Fix
CVE-2026-53592FreeScout vulnerable to prototype pollution in getQueryParam4.6CNA v3.10.2%2026-07-20Fix
CVE-2026-53591FreeScout vulnerable to Unauthenticated Conversation Thread injection8.6CNA v3.10.4%2026-07-20Fix
CVE-2026-53421Apache Syncope: Remote code execution via Scripted Connector9.8CISA ADP v3.11.1%2026-07-20Fix
CVE-2026-53405Apache Syncope: Remote code execution via Flowable BPMN Groovy ScriptTask9.8CISA ADP v3.10.7%2026-07-20Fix
CVE-2026-52656SJCAM SJ4000-Air FEX file parser code injection9.8CISA ADP v3.10.7%2026-07-20Exploit code
CVE-2026-52349Menyoo path traversal7.8CISA ADP v3.10.4%2026-07-20
CVE-2026-51385safishamsi GRAPHIFY URL fetch functions code injection6.9CNA v3.10.5%2026-07-20
CVE-2026-51031FlareSolverr /v1 API endpoint server-side request forgery7.5CISA ADP v3.10.5%2026-07-20Exploit code
CVE-2026-51027FileThingie ft2.php information disclosure9.9CNA v3.10.6%2026-07-20
CVE-2026-51026FileThingie v.2.5.7 path traversal6.5CNA v3.11.3%2026-07-20
CVE-2026-51025fuint Member Marketing System ClientMessageController cross-site scripting6.1CISA ADP v3.10.4%2026-07-20
CVE-2026-50743Revive Adserver `zone-include.php` script cross-site request forgery5.4CNA v3.00.1%2026-07-20
CVE-2026-48824Mailpit: Sibling-endpoint memory-exhaustion DoS5.3CNA v3.10.5%2026-07-20Fix
CVE-2026-48812FreeScout allows unauthenticated access to Legacy Attachment files7.5CNA v3.10.6%2026-07-20Fix
CVE-2026-48389DNG SDK stack-based buffer overflow7.8CNA v3.10.3%2026-07-20Fix
CVE-2026-47276nanomq null pointer dereference in REST API properties_parse via Malformed user_properties6.5CNA v3.10.4%2026-07-20
CVE-2026-47275nanomq null pointer dereference in MQTTv5 Client CONNECT Decoder leading to remote DoS2.6CNA v3.10.3%2026-07-20
CVE-2026-47255AgenticMail API/storage and outbound relay hardening8.2CNA v3.10.3%2026-07-20Fix
CVE-2026-47198Paymenter: URL parameter injection bypasses paid plan limits at checkout8.5CNA v3.10.4%2026-07-20Fix
CVE-2026-47144Shamefile has an arbitrary file read via shamefile.yaml in shame next5.5CNA v3.10.2%2026-07-20Fix
CVE-2026-47134ClearanceKit policy signing key storage incorrect permission assignment6.9CNA v4.00.2%2026-07-20Fix
CVE-2026-47133ClearanceKit policy store signature verification vulnerability6.9CNA v4.00.2%2026-07-20Fix
CVE-2026-47130NextCRM contact and target update endpoints insecure direct object reference7.1CNA v3.10.3%2026-07-20Fix
CVE-2026-47129NextCRM user activation controls missing authorization8.1CNA v3.10.4%2026-07-20Fix
CVE-2026-47128nono sandbox policy sandbox escape6.1CNA v3.10.1%2026-07-20Fix
CVE-2026-46715Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance5.3CNA v4.00.5%2026-07-20Fix
CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret7.6CNA v3.10.2%2026-07-20Fix
CVE-2026-46671Rust OneNote File Parser notebook parser path traversal4.4CNA v3.10.2%2026-07-20Fix
CVE-2026-46555WhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration7.7CNA v3.10.2%2026-07-20Fix
CVE-2026-46516Frogman vulnerable to stored XSS in chat console formatter4.8CNA v4.00.4%2026-07-20Fix
CVE-2026-46428lettre has TLS hostname verification disabled when using Boring TLS backend9.1CNA v4.00.3%2026-07-20Fix
CVE-2026-46415JasonLovesDoggo caddy-defender caddy Defender trusted proxy client IP bypass8.2CNA v3.10.2%2026-07-20Fix
CVE-2026-46412Malicious code in @BeProduct/nestjs-auth Mini Shai-Hulud worm10.0CNA v3.10.8%2026-07-20
CVE-2026-46410FileBrowser Quantum: Unauthenticated user share share info8.7CNA v4.00.4%2026-07-20Fix
CVE-2026-45797HeyForm vulnerable to stored XSS via Unauthenticated SVG file upload6.4CNA v4.00.6%2026-07-20Fix
CVE-2026-45713Mailpit: Unauthenticated remote memory-exhaustion DoS7.5CNA v3.10.6%2026-07-20Fix
CVE-2026-45712Mailpit: Concurrent map read and write in proxy CSS rewriter remote unauth crash5.9CNA v3.10.3%2026-07-20Fix
CVE-2026-45711Mailpit: Path traversal and arbitrary file write in mailpit dump --http5.9CNA v3.10.4%2026-07-20Fix
CVE-2026-45709Mailpit HTML check CSS downloader server-side request forgery5.8CNA v3.10.3%2026-07-20Fix
CVE-2026-45295FreeScout open tracking endpoint insecure direct object reference6.5CNA v3.10.3%2026-07-20Fix
CVE-2026-45270CI4MS: Stored XSS in pages Module Content via Broken html_purify Validation Rule8.7CNA v3.10.4%2026-07-20Fix
CVE-2026-45139CI4MS Fileeditor module vulnerability6.5CNA v3.10.5%2026-07-20Fix
CVE-2026-44978xrdp FIPS HMAC verification out-of-bounds read5.3CNA v3.10.5%2026-07-20Fix
CVE-2026-44585Paymenter ticket creation insecure direct object reference5.4CNA v3.10.3%2026-07-20Fix
CVE-2026-44584Paymenter doesn't reset email verification status after email change4.3CNA v3.10.2%2026-07-20Fix
CVE-2026-44583Paymenter: Blind unauthenticated SSRF on the Paypal gateway module5.3CNA v3.10.4%2026-07-20Fix
CVE-2026-44231RT: Privilege escalation and information disclosure via REST user collection endpoint9.1CNA v3.10.4%2026-07-20Fix
CVE-2026-44230RT: Reflected cross-site scripting in search results chart6.1CNA v3.10.3%2026-07-20Fix
CVE-2026-44229RT: Cross-site scripting via inline-served uploaded content5.4CNA v3.10.2%2026-07-20Fix
CVE-2026-44228RT: Stored cross-site scripting via insufficient template escaping5.4CNA v3.10.3%2026-07-20Fix
CVE-2026-44227RT: Reflected cross-site scripting via URL parameters6.1CNA v3.10.3%2026-07-20Fix
CVE-2026-44178xrdp virtual channel forwarding heap-based buffer overflow8.8CNA v3.10.9%2026-07-20Fix
CVE-2026-42218XRDP is vulnerable to a server timing attack, leading to user enumeration5.3CNA v3.10.4%2026-07-20Fix
CVE-2026-42210Webmin improper authentication5.3CNA v4.00.5%2026-07-20Fix
CVE-2026-41521neutrinolabs xrdp VNC framebuffer update handling integer overflow8.2CNA v3.10.7%2026-07-20Fix
CVE-2026-41252neutrinolabs xrdp VNC color map handling heap-based buffer overflow9.8CNA v3.11.1%2026-07-20Fix
CVE-2026-40187Authenticated RCE via Malicious eTemplate upload in EGroupware8.6CNA v4.00.9%2026-07-20Fix
CVE-2026-39879SQL injection in syslog-ng SQL destionation driver7.1CNA v3.10.3%2026-07-20Fix
CVE-2026-39878Chamilo stored XSS via user registration leads to admin account takeover9.3CNA v3.10.4%2026-07-20
CVE-2026-39385Frappe LMS enrollment bypass in paid courses via unrelated batch7.1CNA v4.00.4%2026-07-20
CVE-2026-35591libvips possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile7.0CNA v4.00.2%2026-07-20Fix
CVE-2026-35590libvips possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata6.8CNA v4.00.2%2026-07-20Fix
CVE-2026-35217NanoMQ MQTT v5 SUBSCRIBE handling out-of-bounds read6.5CNA v3.10.3%2026-07-20
CVE-2026-35198HeyForm vulnerable to stored XSS via form field titles9.0CNA v3.10.5%2026-07-20Fix
CVE-2026-35048Piwigo RCE via PHP code injection into Config file in Installer9.8CNA v3.10.6%2026-07-20
CVE-2026-34239Chamilo Authenticated remote code execution7.5CNA v4.00.5%2026-07-20
CVE-2026-33328libvips possible integer overflow on 32-bit systems when reading GIF images6.8CNA v4.00.2%2026-07-20Fix
CVE-2026-33327libvips possible integer overflow leading to potential heap-based buffer overflow7.0CNA v4.00.2%2026-07-20Fix
CVE-2026-32825datacycle-engine dataCycle-CORE dataCycle no brute-force Protection on Web and API Login endpoints7.3CNA v3.10.3%2026-07-20
CVE-2026-32824dataCycle-CORE password reset flow open redirect7.3CNA v3.10.3%2026-07-20
CVE-2026-32823datacycle-engine dataCycle-CORE dataCycle State-Changing GET Endpoints Enable CSRF4.3CNA v3.10.1%2026-07-20
CVE-2026-32822datacycle-engine dataCycle-CORE dataCycle Unauthenticated Reflected DOM XSS6.1CNA v3.10.3%2026-07-20
CVE-2026-32821dataCycle-CORE collection API missing authorization8.1CNA v3.10.4%2026-07-20
CVE-2026-32820datacycle-engine dataCycle-CORE dataCycle Public Markdown path traversal via /docs/*path7.5CNA v3.10.9%2026-07-20
CVE-2026-32819datacycle-engine dataCycle-CORE dataCycle User Directory Enumeration via /users/search4.3CNA v3.10.3%2026-07-20
CVE-2026-32807dataCycle-CORE DataLink file download missing authorization7.5CNA v3.10.4%2026-07-20
CVE-2026-32806datacycle-engine dataCycle-CORE dataCycle authorization bypass via /remote_render7.5CNA v3.10.4%2026-07-20
CVE-2026-28220Wazuh cluster Distributed API deserialization of untrusted data8.4CNA v3.10.7%2026-07-20Fix
CVE-2026-27823Remote code execution vulnerability in EGroupware8.7CNA v4.01.0%2026-07-20Fix
CVE-2026-26483Mettle SendPortal template management stored cross-site scripting6.1CISA ADP v3.10.3%2026-07-20
CVE-2026-26199HDFGroup hdf5 buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero5.9CNA v4.00.4%2026-07-20Fix
CVE-2026-26197HDF Group HDF5 array datatype handling out-of-bounds read5.9CNA v4.00.4%2026-07-20Fix
CVE-2026-26081HAProxy improper length parameter handling4.8CNA v3.10.5%2026-07-20Fix
CVE-2026-26080HAProxy unchecked return value3.7CNA v3.10.5%2026-07-20Fix
CVE-2026-25039Scille parsec-cloud the application evaluate UNC path in workspace name8.8CNA v3.10.5%2026-07-20Fix
CVE-2026-21824A privilege escalation vulnerability affects HCL Commerce8.8CNA v3.10.4%2026-07-20
CVE-2026-16337dotCMS improper authorization9.4CNA v4.00.6%2026-07-20
CVE-2026-16327D-Link DNS-320 upload.php unrestricted upload6.9CNA v4.01.6%2026-07-20
CVE-2026-16324Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload6.9CNA v4.00.5%2026-07-20
CVE-2026-16277Red Hat Enterprise Linux 10 rpcbind: Rpcbind: Stack buffer overflow in rpcinfo rpcbaddrlist6.5CNA v3.10.5%2026-07-20Fix
CVE-2026-16254Red Hat Advanced Cluster Security 4 claircore: Claircore: Denial of service4.3CNA v3.10.4%2026-07-20
CVE-2026-16252Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System SQL injection6.9CNA v4.00.4%2026-07-20
CVE-2026-16248Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-based overflow8.7CNA v4.00.9%2026-07-20
CVE-2026-16247Insecure permission overwrite due to execution of LogPathConfig.exe while installing _connect.BRAIN7.3CNA v3.10.1%2026-07-20
CVE-2026-16246Bizerba BRAIN2 setup permission assignment incorrect default permissions7.3CNA v3.10.2%2026-07-20
CVE-2026-16244itsourcecode Hospital Management System prescriptionorderreport.php SQL injection5.3CNA v4.00.3%2026-07-20
CVE-2026-16242Red Hat OpenShift Container Platform Konnectivity proxy-server missing authentication9.4CNA v3.10.9%2026-07-20Fix
CVE-2026-16235Crypt::Password versions for Perl generate insecure random values for salts9.8CISA ADP v3.10.6%2026-07-20
CVE-2026-15905Google Chrome Aura use-after-free7.8CISA ADP v3.10.1%2026-07-20Fix
CVE-2026-15904Google Chrome Ozone use-after-free8.8CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-15903Google Chrome V8 out-of-bounds read8.8CISA ADP v3.10.4%2026-07-20Fix
CVE-2026-15902Google Chrome Cast use-after-free8.8CISA ADP v3.10.4%2026-07-20Fix
CVE-2026-15901Google Chrome Network use-after-free9.6CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-15900Google Chrome GPU use-after-free9.6CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-15899Google Chrome CameraCapture use-after-free9.6CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-15813Red Hat Enterprise Linux 10 kronosnet: Kronosnet: Memory corruption and out-of-bounds access6.5CNA v3.10.4%2026-07-20Fix
CVE-2026-15788moby BuildKit WCOW cache mount source selector resolves NTFS junctions outside of cache root5.6CNA v4.00.4%2026-07-20Fix
CVE-2026-15588Red Hat Enterprise Linux 10 gdbusserver: Glib2: Gdbusserver pre-authentication DoS5.3CNA v3.10.5%2026-07-20Fix
CVE-2026-14448MB connect line mbCONNECT24 authenticated RCE in system_certificates view8.6CNA v4.00.9%2026-07-20Fix
CVE-2026-13724Business Logic Bypass in Gobito's Corporate Training Management System4.3CNA v3.10.3%2026-07-20Fix
CVE-2026-13577Dancer2 versions for Perl generate insecure session ids when required CSPRNG modules are unavailable8.2CISA ADP v3.10.6%2026-07-20Fix
CVE-2026-13432ThumbPress WordPress plugin Subscriber+ plugin deactivation5.4CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-13381VSee Clinic File API insecure direct object reference8.1v3.10.4%2026-07-20Fix
CVE-2026-13380VSee Clinic and API exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses7.5NVD v3.10.4%2026-07-20Fix
CVE-2026-13156MailerSend WordPress plugin cross-site request forgery5.4CISA ADP v3.10.1%2026-07-20Fix
CVE-2026-13147Kirki WordPress plugin unauthenticated server-side request forgery via kirki_get_apis9.1CISA ADP v3.11.5%2026-07-20NucleiFix
CVE-2026-13142Passwordless Login by VentraConnect WordPress plugin unauthenticated account takeover8.1CISA ADP v3.10.4%2026-07-20Fix
CVE-2026-12973PayPlus Payment Gateway order AJAX action missing authorization6.5CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-12972PayPlus Payment Gateway WordPress plugin unauthenticated order Payment Metadata tampering5.3CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-12970LearnPress WordPress plugin reflected XSS via c_search7.1CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-12900Spectra Gutenberg Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-07-20Fix
CVE-2026-12898All-in-One WP Migration and Backup log file path traversal6.5CISA ADP v3.11.4%2026-07-20NucleiFix
CVE-2026-12724Kirki WordPress plugin unauthenticated HTML injection in password reset email4.3CISA ADP v3.10.1%2026-07-20Fix
CVE-2026-12723Kirki Component Library REST route missing authorization5.3CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-12701Pulpcore relative_path_validator path traversal9.0CNA v3.11.2%2026-07-20Fix
CVE-2026-12592SlimStat Analytics WordPress plugin unauthenticated stored XSS via CF-IPCountry Header7.5CISA ADP v3.10.4%2026-07-20Fix
CVE-2026-12341SailPoint IdentityIQ Improper Bearer Token Validation vulnerability8.8CNA v3.10.4%2026-07-20
CVE-2026-12080Red Hat Enterprise Linux 9 qemu-kvm: Qemu-guest-agent: Local privilege escalation7.3CNA v3.10.1%2026-07-20Fix
CVE-2026-11868WP Travel WordPress plugin unauthenticated arbitrary Booking Cancellation5.3CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-11349Modern Events Calendar (Lite and Pro) WordPress plugin unauthenticated SQL injection8.6CISA ADP v3.10.4%2026-07-20Exploit codeFix
CVE-2026-10755All in One SEO Contributor+ incorrect authorization via AI Integration2.7CISA ADP v3.10.3%2026-07-20Fix
CVE-2026-10724Reviews Feed dynamic block vulnerability4.8CISA ADP v3.10.1%2026-07-20Fix
CVE-2026-10081Unlimited Elements for Elementor WordPress plugin unauthenticated stored XSS8.8CISA ADP v3.10.5%2026-07-20Fix
CVE-2026-9833Tag Groups WordPress plugin reflected XSS via tag_groups_task parameter7.1CISA ADP v3.10.3%2026-07-20NucleiFix
CVE-2026-8825Elementor WordPress plugin Contributor+ sensitive information disclosure via REST API4.9CISA ADP v3.10.4%2026-07-20Fix
CVE-2026-8170Extreme Networks Switch Engine ExtremeXOS privilege escalation8.7CNA v4.00.6%2026-07-20Fix
CVE-2026-8169Extreme Networks Switch Engine (EXOS) ExtremeXOS Debug-Mode privilege escalation via Weak PRNG8.7CNA v4.00.4%2026-07-20Fix
CVE-2026-6793Stored XSS in Bifra Engineering's Q-smart NexT Poll5.4CNA v3.10.2%2026-07-20Fix
CVE-2026-6656Crypt::Password versions for Perl are susceptible to timing attacks7.5CISA ADP v3.10.5%2026-07-20
CVE-2026-2445WSO2 API Manager, API Control Plane and Identity Server reflected cross-site scripting6.1CNA v3.10.3%2026-07-20Fix
CVE-2026-64186Linux kernel AMD IOMMU debugfs interface out-of-bounds read7.1v3.10.1%2026-07-19Fix
CVE-2026-64185Linux kernel sysfs group update vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64184Linux kernel DAMON sysfs scheme memory cgroup filter memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64183Linux kernel EFI runtime workqueue null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64182Linux kernel memory block poison accounting memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64181Linux kernel huge zero page handling vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64180Linux kernel memory hotplug block removal memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64179Linux kernel iosm WWAN driver memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64178Linux kernel BNEP connection handling use-after-free8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64177Linux kernel Phonet PEP socket forwarding vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64176Linux kernel iwlwifi TX rate handling denial of service8.1CNA v3.10.2%2026-07-19Fix
CVE-2026-64175Linux kernel iwlwifi firmware restart handling denial of service7.5CNA v3.10.3%2026-07-19Fix
CVE-2026-64174Linux kernel cfg80211 multi-BSSID profile merging vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64173Linux kernel tracing map element allocation vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64172Linux kernel KVM AVIC interrupt virtualization vulnerability7.1CNA v3.10.2%2026-07-19Fix
CVE-2026-64171Linux kernel Tegra I2C driver improper locking5.5v3.10.1%2026-07-19Fix
CVE-2026-64170Linux kernel SPI QUP driver null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64169Linux kernel SPI EP93xx driver DMA setup null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64168Linux kernel sprd SPI driver null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64167Linux kernel kexec handover crash kernel path null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64166Linux kernel arm_ffa bus driver registration null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64165Linux kernel ARM Integrator early initialization null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64164Linux kernel btrfs sync file tracepoint denial of service5.5v3.10.1%2026-07-19Fix
CVE-2026-64163Linux kernel kprobes self-test module vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64162Linux kernel idpf PTP clock initialization vulnerability9.8CNA v3.10.3%2026-07-19Fix
CVE-2026-64161Linux kernel icssm-prueth driver memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64160Linux kernel netfs remote file size tracking vulnerability9.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64159Linux kernel netfs zero-point calculation vulnerability5.5NVD v3.10.2%2026-07-19Fix
CVE-2026-64157Linux kernel netfs streaming-write folio invalidation vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64156Linux kernel AFS and netfs directory and symlink writeback vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64155Linux kernel ath11k WMI wake-on-wireless calls memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64154Linux kernel a6xx GPU initialization vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64153Linux kernel drm msm driver vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64152Linux kernel IOMMU debug tracing vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64151Linux kernel IOMMU page table page-size bitmap vulnerability8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-64150Linux kernel netfilter nft_inner module vulnerability9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64149Linux kernel DMA resource mapping denial of service5.5v3.10.1%2026-07-19Fix
CVE-2026-64148Linux kernel pds_core device command improper error handling7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-64147Linux kernel pds_core firmware reset recovery memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64146Linux kernel erofs extended attribute initialization memory leak5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64145Linux kernel wilc1000 Wi-Fi driver memory leak7.8v3.10.1%2026-07-19Fix
CVE-2026-64144Linux kernel Bluetooth btmtk driver memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64143Linux kernel uniwill-laptop charging limit control vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64142Linux kernel ksmbd durable handle scavenger use-after-free9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-64141Linux kernel ksmbd lease key comparison null pointer dereference7.5CNA v3.10.6%2026-07-19Fix
CVE-2026-64140Linux kernel ksmbd proc files listing null pointer dereference7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-64139Linux kernel POSIX ACL DACL entry handling memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64138Linux kernel ACL inheritance security descriptor vulnerability8.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64137Linux kernel CIFS SWN netlink interface vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64136Linux kernel SMB2 session and tcon lookup vulnerability9.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64135Linux kernel ADM1266 blackbox info buffer vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64134Linux kernel ALSA PCM silence handling null pointer dereference7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64133Linux kernel ALSA asihpi driver cache lookup out-of-bounds read7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64132Linux kernel IPv6 IOAM option processing use-after-free9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-64131Linux kernel device-private page unmapping vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64130Linux kernel huge zero folio memory tag initialization vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64129Linux kernel migrate_device huge PMD page migration deadlock5.5v3.10.1%2026-07-19Fix
CVE-2026-64128Linux kernel Bluetooth ISO data reception null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64127Linux kernel Bluetooth L2CAP ECRED reconfiguration vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64126Linux kernel Bluetooth management extended advertising data out-of-bounds read7.3CNA v3.10.1%2026-07-19Fix
CVE-2026-64125Linux kernel bcmgenet Ethernet driver RX path denial of service9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64124Linux kernel devmem dma-buf memory binding vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64123Linux kernel HSR protocol node table use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64122Linux kernel mlx5e Ethernet driver TX reporter use-after-free9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64121Linux kernel ifb driver ethtool stats out-of-bounds read7.1v3.10.1%2026-07-19Fix
CVE-2026-64120Linux kernel ethtool PHY info reporting null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64119Linux kernel L2TP session hash table vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64118Linux kernel qed context manager CID bitmap allocation double free8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-64117Linux kernel mac80211 mesh fast-RX forwarding use-after-free8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-64116Linux kernel IPv6 IOAM hop-by-hop option processing null pointer dereference7.5CNA v3.10.7%2026-07-19Fix
CVE-2026-64115Linux kernel vsock VMCI transport handshake use-after-free8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64114Linux kernel raw socket IP_HDRINCL header validation out-of-bounds read7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64113Linux kernel ixgbevf VEPA multicast source pruning use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64112Linux kernel RBD exclusive lock work queue race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64111Linux kernel LSM self attribute setting vulnerability7.1CNA v3.10.1%2026-07-19Fix
CVE-2026-64110Linux kernel igc frame preemption transmit memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64109Linux kernel AF_UNIX stream socket receive wait use-after-free8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64108Linux kernel CIFS deferred close vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64107Linux kernel pcm512x codec overclock control null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64106Linux kernel arm64 vGIC ITS device table restore vulnerability9.0CNA v3.10.1%2026-07-19Fix
CVE-2026-64105Linux kernel arm64 vGIC vCPU initialization vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64104Linux kernel sev-guest memory leak8.7CNA v3.10.2%2026-07-19Fix
CVE-2026-64103Linux kernel isci completion tasklet use-after-free7.8v3.10.1%2026-07-19Fix
CVE-2026-64102Linux kernel RDMA siw MPA receive parser out-of-bounds read9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64101Linux kernel fwctl PDS RPC handler vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64100Linux kernel MSM GEM shrinker deadlock5.5v3.10.1%2026-07-19Fix
CVE-2026-64099Linux kernel V3D CPU job query arrays use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64098Linux kernel virtio GPU plane update improper locking7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64097Linux kernel AMD display GPIO pin table parser out-of-bounds read7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64096Linux kernel batman-adv multicast originator release use-after-free8.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64095Linux kernel batman-adv driver race condition7.1CNA v3.10.4%2026-07-19Fix
CVE-2026-64094Linux kernel batman-adv bridge loop avoidance null pointer dereference5.5v3.10.2%2026-07-19Fix
CVE-2026-64093Linux kernel batman-adv throughput meter vulnerability8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-64092Linux kernel batman-adv throughput meter vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64091Linux kernel batman-adv driver race condition9.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64090Linux kernel batman-adv driver vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64089Linux kernel batman-adv driver type confusion9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64088Linux kernel batman-adv driver type confusion8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-64087Linux kernel ADM1266 PMBus blackbox reader vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64086Linux kernel ADM1266 PMBus block transfer vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64085Linux kernel ADM1266 PMBus blackbox reader out-of-bounds write7.8v3.10.1%2026-07-19Fix
CVE-2026-64084Linux kernel ADM1266 PMBus GPIO driver out-of-bounds write7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64083Linux kernel ADM1266 PMBus GPIO driver vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64082Linux kernel RISC-V compat register handling vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64081Linux kernel ARM FF-A notification message parsing out-of-bounds write8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-64080Linux kernel ARM FF-A notification handling use-after-free9.3CNA v3.10.2%2026-07-19Fix
CVE-2026-64079Linux kernel x_tables hook registration null pointer dereference5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64078Linux kernel x_tables table removal vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64077Linux kernel ebtables table removal vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64076Linux kernel ebtables module initialization race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64075Linux kernel fprobe tracing use-after-free7.8v3.10.1%2026-07-19Fix
CVE-2026-64074Linux kernel statmount filesystem interface out-of-bounds write7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64073Linux kernel irq_work subsystem use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64072Linux kernel NVMe integrity mapping memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-64071Linux kernel nvme-pci driver use-after-free7.8v3.10.1%2026-07-19Fix
CVE-2026-64070Linux kernel PowerPC hv-gpci sysfs interface vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64069Linux kernel netfs read subrequest handling out-of-bounds read9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64068Linux kernel netfs subrequest retry handling improper locking9.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64067Linux kernel netfs subrequest list handling vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64066Linux kernel netfs read-to-pagecache handling vulnerability9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64065Linux kernel netfs write-begin handling vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64064Linux kernel netfs folio invalidation vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64063Linux kernel netfs streaming write handling out-of-bounds write7.8v3.10.1%2026-07-19Fix
CVE-2026-64062Linux kernel netfs write-through mode deadlock5.5v3.10.1%2026-07-19Fix
CVE-2026-64061Linux kernel netfs read-gaps handling use-after-free9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-64060Linux kernel netfs write-begin error handling memory leak5.5NVD v3.10.2%2026-07-19Fix
CVE-2026-64059Linux kernel netfs write handling vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-64058Linux kernel netfs read path out-of-bounds read7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64057Linux kernel AFS symbolic link handling improper locking7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64056Linux kernel Cortina Gemini ethernet driver race condition9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-64055Linux kernel cortina ethernet driver vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64054Linux kernel net shaper GROUP command double free7.8v3.10.1%2026-07-19Fix
CVE-2026-64053Linux kernel bio integrity copy handling vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64052Linux kernel bio integrity mapping null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64051Linux kernel qaic accelerator driver use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64050Linux kernel DPU writeback connector use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64049Linux kernel Adreno GPU driver null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-64048Linux kernel SMC-D device matching null pointer dereference7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-64047Linux kernel TLS sk_msg ring buffer off-by-one error9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64046Linux kernel TLS scatterlist chaining vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64045Linux kernel ovpn TCP close path null pointer dereference8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-64044Linux kernel ovpn driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64043Linux kernel ovpn interface teardown race condition4.7NVD v3.10.1%2026-07-19Fix
CVE-2026-64042Linux kernel VFIO PCI DMABUF export vulnerability8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64041Linux kernel fs210x audio codec driver out-of-bounds write7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64040Linux kernel cachefiles unchecked return value5.5NVD v3.10.2%2026-07-19Fix
CVE-2026-64039Linux kernel MSM display snapshot vulnerability7.7CNA v3.10.2%2026-07-19Fix
CVE-2026-64038Linux kernel lm90 hwmon driver vulnerability4.7NVD v3.10.1%2026-07-19Fix
CVE-2026-64037Linux kernel iwlwifi MLD TSO segmentation vulnerability9.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64036Linux kernel cgroup rstat BPF interface vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64035Linux kernel igc SMD frame handling vulnerability9.8CNA v3.10.4%2026-07-19Fix
CVE-2026-64034Linux kernel mana time-of-check time-of-use race condition9.3CNA v3.10.1%2026-07-19Fix
CVE-2026-64033Linux kernel RDMA RTRS sysfs path files use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64032Linux kernel bridge multicast snooping use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64031Linux kernel EROFS managed cache race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64030Linux kernel mac80211 multi-link EPCS handling vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64029Linux kernel ALSA sequencer UMP output vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64028Linux kernel histogram trigger field name lookup vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64027Linux kernel net_shaper subsystem use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64026Linux kernel rxrpc vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64025Linux kernel BPF sockmap kTLS receive path race condition9.8CNA v3.10.3%2026-07-19Fix
CVE-2026-64024Linux kernel TCP vulnerability9.4CNA v3.10.3%2026-07-19Fix
CVE-2026-64023Linux kernel GPIO aggregator use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64022Linux kernel GPIO aggregator vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64021Linux kernel Xe DRM driver vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64020Linux kernel NVMe PCIe driver vulnerability7.5CNA v3.10.6%2026-07-19Fix
CVE-2026-64019Linux kernel NVMe PCIe driver vulnerability5.5NVD v3.10.2%2026-07-19Fix
CVE-2026-64018Linux kernel mana driver vulnerability9.3CNA v3.10.1%2026-07-19Fix
CVE-2026-64017Linux kernel block multiqueue request caching use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64016Linux kernel ksmbd durable handle reconnect vulnerability9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-64015Linux kernel keyring lookup vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64014Linux kernel NEXIO USB touchscreen driver vulnerability7.1NVD v3.10.1%2026-07-19Fix
CVE-2026-64013Linux kernel ACPI button notify handler vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64012Linux kernel SFB queueing discipline dequeue denial of service5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64011Linux kernel NFC LLCP socket release use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64010Linux kernel NFC LLCP connection handling use-after-free8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64009Linux kernel XFRM state MTU calculation integer underflow7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64008Linux kernel Rocket accelerator GEM buffer creation use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-64007Linux kernel netfilter SYNPROXY TCP header handling vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-64006Linux kernel nf_tables register shift operation vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-64005Linux kernel SMC hash table initialization vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64004Linux kernel IUCV socket getsockopt null pointer dereference7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64003Linux kernel SCSI host queue recovery denial of service7.5CNA v3.10.4%2026-07-19Fix
CVE-2026-64002Linux kernel IPv4 local reserved ports sysctl vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-64001Linux kernel ALSA OSS PCM setup list use-after-free7.8NVD v3.10.1%2026-07-19Fix
CVE-2026-64000Linux kernel HSR supervision frame handling vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63999Linux kernel ethtool RSS configuration vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63998Linux kernel ethtool module flash vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63997Linux kernel ethtool module flash vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63996Linux kernel ethtool CMIS CDB reply parsing vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63995Linux kernel ethtool CMIS firmware update out-of-bounds write7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63994Linux kernel IP tunnel PMTUD ICMP builder use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63993Linux kernel vxlan use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63992Linux kernel tunnels out-of-bounds read9.1CNA v3.10.5%2026-07-19Fix
CVE-2026-63991Linux kernel Bluetooth 6lowpan null pointer dereference5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63990Linux kernel bonding CAN device enslavement vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63989Linux kernel bridge port netlink configuration improper locking5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63988Linux kernel bridge port sysfs attribute handling improper locking5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63987Linux kernel ethtool coalesce profile update vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63986Linux kernel ethtool timestamping info dump vulnerability5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-63985Linux kernel ethtool EEPROM netlink fallback vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63984Linux kernel IPv6 RPL header decompression vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63983Linux kernel netem packet duplication vulnerability–0.2%2026-07-19Fix
CVE-2026-63982Linux kernel tc mirred redirect action vulnerability–0.2%2026-07-19Fix
CVE-2026-63981Linux kernel tc mirred blockcast action stack overflow–0.2%2026-07-19Fix
CVE-2026-63980Linux kernel handshake request lock deadlock7.5CNA v3.10.3%2026-07-19Fix
CVE-2026-63979Linux kernel handshake accept request handling vulnerability9.8CNA v3.10.6%2026-07-19Fix
CVE-2026-63978Linux kernel handshake pending request list vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63977Linux kernel zl3073x DPLL driver vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63976Linux kernel Bluetooth l2cap vulnerability8.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63975Linux kernel Bluetooth L2CAP use-after-free8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-63974Linux kernel Bluetooth HCI command workqueue vulnerability8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-63973Linux kernel mana driver null pointer dereference5.5NVD v3.10.2%2026-07-19Fix
CVE-2026-63972Linux kernel mana null pointer dereference7.5CNA v3.10.6%2026-07-19Fix
CVE-2026-63971Linux kernel SCTP socket peeloff race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63970Linux kernel virtio-vsock zerocopy send path vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63969Linux kernel ipv6 denial of service–0.2%2026-07-19Fix
CVE-2026-63968Linux kernel IPv6 route selection denial of service7.5CNA v3.10.7%2026-07-19Fix
CVE-2026-63967Linux kernel st_lsm6dsx tagged FIFO buffer information disclosure–0.2%2026-07-19Fix
CVE-2026-63966Linux kernel adis16550 IMU driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63965Linux kernel bmp580 pressure sensor driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63964Linux kernel UCSI CCG firmware flashing vulnerability–0.2%2026-07-19Fix
CVE-2026-63963Linux kernel TCPM identity discovery vulnerability–0.2%2026-07-19Fix
CVE-2026-63962Linux kernel TCPM alternate mode discovery vulnerability–0.2%2026-07-19Fix
CVE-2026-63961Linux kernel USB Type-C DisplayPort alt mode vulnerability–0.2%2026-07-19Fix
CVE-2026-63960Linux kernel wcove USB Type-C PD driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63959Linux kernel tcpci_maxim USB Type-C driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63958Linux kernel UCSI connector change handling vulnerability–0.2%2026-07-19Fix
CVE-2026-63957Linux kernel safe_serial USB driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63956Linux kernel cypress_m8 USB serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63955Linux kernel vmalloc allocation denial of service7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-63954Linux kernel HPFS dnode bitmap mapping vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63953Linux kernel huge PMD page migration memory leak–0.2%2026-07-19Fix
CVE-2026-63952Linux kernel memfd seal enforcement vulnerability8.4CNA v3.10.1%2026-07-19Fix
CVE-2026-63951Linux kernel zram writeback use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63950Linux kernel rmap page unmapping vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63949Linux kernel auxdisplay line-display driver out-of-bounds read–0.2%2026-07-19Fix
CVE-2026-63948Linux kernel Bluetooth L2CAP channel timer memory leak–0.2%2026-07-19Fix
CVE-2026-63947Linux kernel Bluetooth HIDP input report handling out-of-bounds read8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-63946Linux kernel Bluetooth ISO socket use-after-free8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-63945Linux kernel Bluetooth ISO socket timer vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63944Linux kernel Bluetooth HCI connection sync use-after-free8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-63943Linux kernel xpad input driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63942Linux kernel parport subsystem registration race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63941Linux kernel KVM arm64 SVE register emulation vulnerability8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63940Linux kernel KVM SEV port I/O emulation integer underflow9.3CNA v3.10.2%2026-07-19Fix
CVE-2026-63939Linux kernel KVM SEV GHCB scratch area buffer overflow9.3CNA v3.10.2%2026-07-19Fix
CVE-2026-63938Linux kernel KVM SEV page state change buffer vulnerability9.3CNA v3.10.2%2026-07-19Fix
CVE-2026-63937Linux kernel KVM SEV page state change buffer race condition8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63936Linux kernel mt6359 ADC driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63935Linux kernel nxp-sar-adc driver division by zero–0.2%2026-07-19Fix
CVE-2026-63934Linux kernel itg3200 gyroscope driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63933Linux kernel adis16260 gyroscope driver division by zero–0.2%2026-07-19Fix
CVE-2026-63932Linux kernel mhz19b chemical sensor driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63931Linux kernel scd30 chemical sensor driver division by zero–0.2%2026-07-19Fix
CVE-2026-63930Linux kernel IIO hardware consumer buffer allocation use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63929Linux kernel IIO buffer dmabuf enqueue memory leak–0.2%2026-07-19Fix
CVE-2026-63928Linux kernel omninet USB serial driver memory corruption–0.2%2026-07-19Fix
CVE-2026-63927Linux kernel dwc2 USB driver debug code use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63926Linux kernel BPF sockmap message push vulnerability8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-63925Linux kernel MACsec XPN replay protection vulnerability8.1CNA v3.10.3%2026-07-19Fix
CVE-2026-63924Linux kernel IPv6 jumbogram extension header parsing vulnerability9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-63923Linux kernel octeontx2-af mailbox driver vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63922Linux kernel IPv6 extension header parsing vulnerability9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-63921Linux kernel VTI6 tunnel driver vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63920Linux kernel IPv6 datagram control message handling out-of-bounds read7.1CNA v3.10.2%2026-07-19Fix
CVE-2026-63919Linux kernel xfrm transport reinjection vulnerability8.8CNA v3.10.7%2026-07-19Fix
CVE-2026-63918Linux kernel L2TP session lookup vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63917Linux kernel vti6 tunnel netns handling vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63916Linux kernel Wacom HID driver out-of-bounds write8.8CNA v3.10.4%2026-07-19Fix
CVE-2026-63915Linux kernel NFC HCI header parsing out-of-bounds read8.8CNA v3.10.4%2026-07-19Fix
CVE-2026-63914Linux kernel xfrm MIGRATE notification routing vulnerability7.3CNA v3.10.1%2026-07-19Fix
CVE-2026-63913Linux kernel netfilter TCP conntrack state machine vulnerability8.2CNA v3.11.0%2026-07-19Fix
CVE-2026-63912Linux kernel xfrm ESP output path vulnerability9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-63911Linux kernel xfrm IPTFS state cloning use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63910Linux kernel dma-buf file descriptor tracepoint use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63909Linux kernel ksmbd out-of-bounds read8.1CNA v3.10.6%2026-07-19Fix
CVE-2026-63908Linux kernel atmel_mxt_ts touchscreen driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63907Linux kernel uio_pci_generic_sva driver double free–0.2%2026-07-19Fix
CVE-2026-63906Linux kernel MUSB omap2430 driver use-after-free8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-63905Linux kernel USB/IP vudc driver use-after-free–0.2%2026-07-19Fix
CVE-2026-63904Linux kernel USBTMC driver out-of-bounds read–0.2%2026-07-19Fix
CVE-2026-63903Linux kernel belkin_sa USB serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63902Linux kernel cypress_m8 USB serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63901Linux kernel digi_acceleport USB serial driver memory corruption–0.2%2026-07-19Fix
CVE-2026-63900Linux kernel keyspan USB serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63899Linux kernel mxuport USB serial driver memory corruption–0.2%2026-07-19Fix
CVE-2026-63898Linux kernel mct_u232 USB serial driver memory corruption–0.2%2026-07-19Fix
CVE-2026-63897Linux kernel mct_u232 USB serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63896Linux kernel USB gadget composite driver WebUSB handling integer underflow–0.2%2026-07-19Fix
CVE-2026-63895Linux kernel USB FunctionFS gadget driver vulnerability–0.3%2026-07-19Fix
CVE-2026-63894Linux kernel FunctionFS DMABUF I/O vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63893Linux kernel Thunderbolt XDomain property parser vulnerability8.1CNA v3.10.4%2026-07-19Fix
CVE-2026-63892Linux kernel thunderbolt driver integer underflow–0.2%2026-07-19Fix
CVE-2026-63891Linux kernel Thunderbolt XDomain property parser vulnerability–0.3%2026-07-19Fix
CVE-2026-63890Linux kernel FCoE FIP CVL descriptor walker denial of service–0.2%2026-07-19Fix
CVE-2026-63889Linux kernel Fibre Channel FPIN descriptor walker vulnerability8.1CNA v3.10.4%2026-07-19Fix
CVE-2026-63888Linux kernel iSCSI target text command handling double free9.8CNA v3.10.8%2026-07-19Fix
CVE-2026-63887Linux kernel iSCSI target login response buffer vulnerability9.8CNA v3.10.8%2026-07-19Fix
CVE-2026-63886Linux kernel iSCSI target CHAP authentication vulnerability9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-63885Linux kernel GEM handle management race condition8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63884Linux kernel i915 TTM object purge use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63883Linux kernel qcom_geni serial driver race condition7.3CNA v3.10.2%2026-07-19Fix
CVE-2026-63882Linux kernel amdkfd SVM range attribute handling null pointer dereference–0.2%2026-07-19Fix
CVE-2026-63881Linux kernel amdkfd debugger queue enumeration integer overflow7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63880Linux kernel amdgpu DRM driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63879Linux kernel amdgpu HMM range page management vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63878Linux kernel amdgpu GEM_OP GET_MAPPING_INFO ioctl denial of service–0.2%2026-07-19Fix
CVE-2026-63877Linux kernel DZ serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63876Linux kernel Z85C30 serial driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63875Linux kernel arm64 PMD table unsharing vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63874Linux kernel MCTP USB driver race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63873Linux kernel amdxdna accelerator driver memory leak–0.2%2026-07-19Fix
CVE-2026-63871Linux kernel ISO socket route lookup race condition–0.2%2026-07-19Fix
CVE-2026-63870Linux kernel 6LoWPAN transmit path vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63869Linux kernel mac80211 radiotap parser vulnerability7.6CNA v3.10.2%2026-07-19Fix
CVE-2026-63868Linux kernel GARP attribute parser integer underflow–0.2%2026-07-19Fix
CVE-2026-63867Linux kernel MPTCP race condition8.2CNA v3.10.3%2026-07-19Fix
CVE-2026-63866Linux kernel mt7996 Wi-Fi driver vulnerability8.8CNA v3.10.4%2026-07-19Fix
CVE-2026-63865Linux kernel BPF sleepable LSM hooks vulnerability8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63864Linux kernel BPF verifier tail call improper error handling8.4CNA v3.10.2%2026-07-19Fix
CVE-2026-63863Linux kernel drm gpusvm vulnerability8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63862Linux kernel mediatek-gen3 PCI driver vulnerability–0.2%2026-07-19Fix
CVE-2026-63861Linux kernel mtk-snfi ECC engine registration vulnerability–0.2%2026-07-19Fix
CVE-2026-63860Linux kernel RDMA core netlink attributes vulnerability8.4CNA v3.10.1%2026-07-19Fix
CVE-2026-63859Linux kernel Airoha QDMA transmit queue cleanup vulnerability–0.2%2026-07-19Fix
CVE-2026-63858Linux kernel nf_tables hook transactions vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63857Linux kernel Airoha Ethernet driver vulnerability9.8CNA v3.10.7%2026-07-19Fix
CVE-2026-63856Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63855Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63854Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63853Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63852Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63851Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63850Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63849Linux kernel amdgpu VCN driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63848Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63847Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63846Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63845Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63844Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63843Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63842Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63841Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63840Linux kernel amdgpu JPEG driver vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63839Linux kernel lenovo-wmi-helpers driver memory leak–0.2%2026-07-19Fix
CVE-2026-63838Linux kernel ASoC rsnd driver out-of-bounds access–0.2%2026-07-19Fix
CVE-2026-63837Linux kernel ena driver PHC information disclosure–0.2%2026-07-19Fix
CVE-2026-63836Linux kernel batman-adv throughput meter divide-by-zero–0.2%2026-07-19Fix
CVE-2026-63835Linux kernel batman-adv driver memory leak–0.2%2026-07-19Fix
CVE-2026-63834Linux kernel batman-adv throughput meter denial of service–0.2%2026-07-19Fix
CVE-2026-63833Linux kernel NTFS3 WSL extended attributes vulnerability7.1CNA v3.10.1%2026-07-19Fix
CVE-2026-63832Linux kernel mt76 Wi-Fi driver vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63831Linux kernel mac802154 llsec vulnerability8.8CNA v3.10.3%2026-07-19Fix
CVE-2026-63830Linux kernel sk_msg BPF scatterlist handling vulnerability9.4CNA v3.10.4%2026-07-19Fix
CVE-2026-63829Linux kernel IP GRE tunnel driver vulnerability8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63828Linux kernel AppArmor socket mediation vulnerability8.4CNA v3.10.2%2026-07-19Exploit codeFix
CVE-2026-63827Linux kernel AppArmor policy loading use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63826Linux kernel fbdev console mode list use-after-free–0.2%2026-07-19Fix
CVE-2026-63825Linux kernel gcov branch counters vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63824Linux kernel KEYS subsystem vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63823Linux kernel request-key keyring use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63822Linux kernel ath11k Wi-Fi driver double free–0.2%2026-07-19Fix
CVE-2026-63821Linux kernel rtw88 USB Wi-Fi driver memory leak–0.2%2026-07-19Fix
CVE-2026-63820Linux kernel f2fs file system vulnerability–0.2%2026-07-19Fix
CVE-2026-63819Linux kernel f2fs file system vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63818Linux kernel f2fs orphan inode recovery vulnerability8.4CNA v3.10.1%2026-07-19Fix
CVE-2026-63817Linux kernel f2fs compress cache inode validation vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63816Linux kernel f2fs atomic write inode reference use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63815Linux kernel f2fs inline xattr size handling vulnerability8.4CNA v3.10.1%2026-07-19Fix
CVE-2026-63814Linux kernel f2fs ACL parsing vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63813Linux kernel f2fs garbage collection data block move race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63812Linux kernel f2fs extent cache vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63811Linux kernel f2fs atomic write COW inode information disclosure–0.1%2026-07-19Fix
CVE-2026-63810Linux kernel bdev pseudo-filesystem null pointer dereference–0.2%2026-07-19Fix
CVE-2026-63809Linux kernel BPF sysctl write handler vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-63808Linux kernel exFAT directory entry lookup use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63807Linux kernel KVM x86 MMU hugepage recovery out-of-bounds read8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63806Linux kernel KVM ioeventfd datamatch handling reachable assertion7.1CNA v3.10.2%2026-07-19Fix
CVE-2026-63805Linux kernel NX crypto accelerator driver vulnerability7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63804Linux kernel GFS2 quota management use-after-free7.8v3.10.1%2026-07-19Fix
CVE-2026-63803Linux kernel HDLC PPP protocol driver use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63802Linux kernel blk-cgroup use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63801Linux kernel TIPC AEAD decryption use-after-free8.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63800Linux kernel pNFS layout management use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63799Linux kernel scheduler MM CID tracking out-of-bounds write7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-63798Linux kernel imgpdc IRQ chip driver memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-63797Linux kernel rpmsg character device driver use-after-free8.4CNA v3.10.1%2026-07-19Fix
CVE-2026-63796Linux kernel OCFS2 group bitmap validation out-of-bounds read8.8CNA v3.10.5%2026-07-19Fix
CVE-2026-63795Linux kernel 9P client protocol use-after-free10.0CNA v3.10.5%2026-07-19Fix
CVE-2026-63794Linux kernel KVM SVM out-of-bounds write7.8v3.10.1%2026-07-19Fix
CVE-2026-63793Linux kernel NTFS volume label handling use-after-free7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-53403Linux kernel framebuffer mode list handling null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-53402Linux kernel fbcon fbdev driver out-of-bounds read7.1CNA v3.10.1%2026-07-19Fix
CVE-2026-53401Linux kernel OMAP2 framebuffer driver use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53400Linux kernel I2C adapter registration race condition7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53399Linux kernel nfsd null pointer dereference9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-53398Linux kernel NFSD SECINFO_NO_NAME decoder vulnerability9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-53397Linux kernel NFS SETACL decoder memory leak7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-53396Linux kernel NFSv4 CREATE file ACL handling memory leak7.1CNA v3.10.3%2026-07-19Fix
CVE-2026-53395Linux kernel nfsd vulnerability7.5CNA v3.10.4%2026-07-19Fix
CVE-2026-53394Linux kernel NFSv4 open owner allocation memory leak7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-53393Linux kernel NFS server write verifier vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-53392Linux kernel NFSv4 flexfiles layout driver null pointer dereference7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-53391Linux kernel NFSv4 pNFS multipath-DS address decoder null pointer dereference7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-53390Linux kernel ksmbd out-of-bounds read8.1CNA v3.10.5%2026-07-19Fix
CVE-2026-53389Linux kernel net/tcp-ao use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53388Linux kernel FUSE filesystem use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53387Linux kernel veml6075 integration time index improper array index validation7.1CNA v3.10.1%2026-07-19Fix
CVE-2026-53386Linux kernel ti-ads1298 PGA settings index improper array index validation7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53385Linux kernel vcs_notifier console write handling null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-53384Linux kernel 8250_dw serial driver use-after-free9.8CNA v3.10.5%2026-07-19Fix
CVE-2026-53383Linux kernel ksmbd SMB2 compound request session validation vulnerability7.5CNA v3.10.7%2026-07-19Fix
CVE-2026-53382Linux kernel vidtv PID context lookup null pointer dereference5.5v3.10.1%2026-07-19Fix
CVE-2026-53381Linux kernel virtiofs submount unmount handling use-after-free7.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53380Linux kernel rzv2h-ivc buffer list handling vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-53379Linux kernel ov8856 control handler initialization vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-53378Linux kernel colorop blob property state handling memory leak5.5v3.10.1%2026-07-19Fix
CVE-2026-53377Linux kernel msm GPU hang recovery denial of service5.5NVD v3.10.1%2026-07-19Fix
CVE-2026-53376Linux kernel amdkfd process apertures ioctl vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-53375Linux kernel amdgpu VCE command address patching vulnerability8.8CNA v3.10.2%2026-07-19Fix
CVE-2026-53374Linux kernel amdgpu GART table initialization vulnerability8.8CNA v3.10.1%2026-07-19Fix
CVE-2026-53373Linux kernel stacked filesystem mmap_prepare VMA handling vulnerability7.8CNA v3.10.2%2026-07-19Fix
CVE-2026-53372Linux kernel IOMMU vt-d driver vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-53371Linux kernel ionic RDMA node description sysfs vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-53370Linux kernel perf x86 Intel driver vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-53369Linux kernel UDF descriptor CRC length validation vulnerability8.4CNA v3.10.1%2026-07-19Fix
CVE-2026-53368Linux kernel f2fs NAT entry checkpoint synchronization vulnerability7.1CNA v3.10.2%2026-07-19Fix
CVE-2026-53367Linux kernel SELinux access vector cache vulnerability5.5v3.10.1%2026-07-19Fix
CVE-2026-45138CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule5.4CNA v3.10.2%2026-07-19Fix
CVE-2026-44359Meshtastic GitHub repo vulnerable to arbitrary code execution10.0CNA v3.11.8%2026-07-19Fix
CVE-2026-42566Meshtastic Firmware node long name field vulnerability7.5CNA v3.10.5%2026-07-19Fix
CVE-2026-16229itsourcecode Courier Management System index.php cross-site scripting5.3CNA v4.00.5%2026-07-19
CVE-2026-16228SourceCodester Class and Exam Timetabling System edit_schoolyr.php SQL injection6.9CNA v4.00.4%2026-07-19
CVE-2026-16227SourceCodester Class and Exam Timetabling System edit_subject.php SQL injection6.9CNA v4.00.4%2026-07-19
CVE-2026-16226SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload5.1CNA v4.00.4%2026-07-19
CVE-2026-16225davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write5.3CNA v4.00.4%2026-07-19
CVE-2026-16224jxxghp MoviePilot Application API improper authorization5.3CNA v4.00.4%2026-07-19
CVE-2026-162231Panel-dev CordysCRM integration config service server-side request forgery5.3CNA v4.00.4%2026-07-19
CVE-2026-162221Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery5.3CNA v4.00.4%2026-07-19
CVE-2026-16221fast-uri vulnerable to host confusion via literal backslash authority delimiter7.5CNA v3.10.3%2026-07-19Fix
CVE-2026-16220code-projects Online Examination System account.php cross-site scripting5.3CNA v4.00.5%2026-07-19
CVE-2026-16219Croogo CMS Admin File Manager FileManager.php isEditable path traversal5.3CNA v4.00.4%2026-07-19
CVE-2026-16218hunvreus devpush storage reset task vulnerability2.1CNA v4.00.3%2026-07-19
CVE-2026-16217guohongze adminset Delivery Deployment endpoint deli.py authorization5.3CNA v4.00.4%2026-07-19
CVE-2026-16216geex-arts django-jet OAuth cross-site request forgery5.3CNA v4.00.2%2026-07-19
CVE-2026-16215geex-arts django-jet OAuth Credential Revoke authorization6.9CNA v4.00.5%2026-07-19
CVE-2026-16214geex-arts django-jet Dashboard views.py authorization5.3CNA v4.00.4%2026-07-19
CVE-2026-16213Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage4.8CNA v4.00.1%2026-07-19
CVE-2026-16212awesto django-shop Purchase Stock inventory.py race condition2.3CNA v4.00.3%2026-07-19
CVE-2026-16211allegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race condition2.1CNA v4.00.2%2026-07-19
CVE-2026-16210newpanjing simpleui AjaxAdmin AJAX endpoint admin.py self.get_action missing authentication6.9CNA v4.00.7%2026-07-19
CVE-2026-16209Gerapy Project upload endpoint views.py missing authentication6.9CNA v4.00.7%2026-07-19
CVE-2026-16208django-tastypie throttle.py CacheDBThrottle race condition2.3CNA v4.00.3%2026-07-19
CVE-2026-16207django-tastypie ApiKeyAuthentication vulnerability6.3CNA v4.00.6%2026-07-19
CVE-2026-16206django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration5.3CNA v4.00.4%2026-07-19Fix
CVE-2026-16205Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross-site scripting4.8CNA v4.00.4%2026-07-19
CVE-2026-16204zevorn rt-claw Telegram-to-AI Tool Execution Flow script.c tool_run_script_execute code injection5.3CNA v4.00.5%2026-07-19
CVE-2026-16203SourceCodester Class and Exam Timetabling System forCYS.php cross-site scripting5.1CNA v4.00.3%2026-07-19
CVE-2026-16202SourceCodester Class and Exam Timetabling System CYS.php cross-site scripting5.1CNA v4.00.3%2026-07-19
CVE-2026-16201zevorn rt-claw http_request net.c claw_net_post information disclosure6.9CNA v4.00.5%2026-07-19
CVE-2026-16200zevorn rt-claw RPC swarm.c claw_tool_invoke authorization6.9CNA v4.00.5%2026-07-19
CVE-2026-16199nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization5.3CNA v4.00.4%2026-07-19
CVE-2026-12484keras-team/keras unsafe deserialization in keras.layers.TorchModuleWrapper.from_config7.8CNA v3.00.4%2026-07-19Fix
CVE-2026-59173Apache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions7.5CISA ADP v3.10.7%2026-07-18Fix
CVE-2026-57857Flow Payment plugin for WordPress reflected cross-site scripting via error_message parameter5.1CNA v4.00.3%2026-07-18
CVE-2026-57848Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation6.8CNA v4.00.2%2026-07-18
CVE-2026-53994ProFTPD mod_sftp heap buffer overflow via Unsigned integer underflow and Size Truncation6.5NVD v3.10.7%2026-07-18Fix
CVE-2026-47871VMware Avi Load Balancer directory traversal8.8CNA v3.11.0%2026-07-18Fix
CVE-2026-47870VMware Avi Load Balancer privilege escalation7.1CNA v3.10.4%2026-07-18Fix
CVE-2026-47869VMware Avi Load Balancer remote code execution8.7CNA v3.10.7%2026-07-18Fix
CVE-2026-47868VMware Avi Load Balancer local privilege escalation7.8CNA v3.10.1%2026-07-18Fix
CVE-2026-47867VMware Avi Load Balancer remote code execution8.7CNA v3.10.7%2026-07-18Fix
CVE-2026-47866VMware Avi Load Balancer authorization bypass8.3CNA v3.10.4%2026-07-18Fix
CVE-2026-47865VMware Avi Load Balancer authentication bypass9.8CNA v3.10.6%2026-07-18Fix
CVE-2026-16198Sipeed PicoClaw First Run Setup access_control.go authentication bypass6.3CNA v4.00.6%2026-07-18
CVE-2026-16197Sipeed PicoClaw Group message feishu_64.go handleMessageReceive authorization5.3CNA v4.00.4%2026-07-18
CVE-2026-16196Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery5.3CNA v4.00.4%2026-07-18
CVE-2026-16195Sipeed PicoClaw Group message wecom.go dispatchIncoming authorization5.3CNA v4.00.4%2026-07-18
CVE-2026-16194zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery5.3CNA v4.00.5%2026-07-18Fix