CVE-2026 list

CVE-2026 records published in September 2026

Page three of 15: records 2,001 to 3,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 2,001 to 3,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-98149Linux kernel per-CPU map value updates vulnerability–0.1%2026-09-25Fix
CVE-2026-98148Linux kernel GUD DRM driver rotation property vulnerability–0.2%2026-09-25Fix
CVE-2026-98147Linux kernel printk kthread creation vulnerability–0.2%2026-09-25Fix
CVE-2026-98146Linux kernel amdxdna command chain buffer bounds check denial of service–0.1%2026-09-25Fix
CVE-2026-98145Linux kernel amdxdna command chain validation vulnerability–0.1%2026-09-25Fix
CVE-2026-98144Linux kernel amdxdna command chain handling vulnerability–0.1%2026-09-25Fix
CVE-2026-98143Linux kernel Ethos-U NPU command stream parser vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98142Linux kernel cirrus-qemu DRM driver vulnerability–0.2%2026-09-25Fix
CVE-2026-98141Linux kernel NTFS reparse point improper error handling–0.1%2026-09-25Fix
CVE-2026-98140Linux kernel NTFS MFT record writing vulnerability–0.1%2026-09-25Fix
CVE-2026-98139Linux kernel NTFS cluster allocation accounting vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98138Linux kernel NTFS sync_fs handling vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98137Linux kernel NTFS direct I/O zero range handling vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98136Linux kernel NTFS $AttrDef table parsing vulnerability7.1NVD v3.10.1%2026-09-25Fix
CVE-2026-98135Linux kernel NTFS boot sector parsing vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98134Linux kernel BPF verifier null pointer dereference5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98133In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfs_set_ea(), the exit path unconditionally updates the HasEA flag based on ea_info_qsize. When an error occurs before ea_info_qsize is updated, NInoClearHasEA() hides exist5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98132Linux kernel BPF verifier vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98131Linux kernel stmmac driver TSO transmit vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98130Linux kernel SCTP timer handling race condition8.1CNA v3.10.4%2026-09-25Fix
CVE-2026-98129Linux kernel mpi3mr SAS port driver null pointer dereference–0.1%2026-09-25Fix
CVE-2026-98128Linux kernel mpi3mr SAS port driver reference count leak–0.1%2026-09-25Fix
CVE-2026-98127Linux kernel SMB client fallocate insert range vulnerability–0.1%2026-09-25Fix
CVE-2026-98126Linux kernel SMB client fallocate zero range vulnerability–0.1%2026-09-25Fix
CVE-2026-98125Linux kernel SMB client page cache vulnerability–0.1%2026-09-25Fix
CVE-2026-98124Linux kernel SMB client FS-Cache vulnerability–0.2%2026-09-25Fix
CVE-2026-98123Linux kernel SCTP ASCONF-ACK parsing denial of service–0.1%2026-09-25Fix
CVE-2026-98122Linux kernel mdb use-after-free7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98121Linux kernel msc313e watchdog driver null pointer dereference–0.1%2026-09-25Fix
CVE-2026-98120Linux kernel netfs unbuffered write vulnerability–0.2%2026-09-25Fix
CVE-2026-98119Linux kernel netfs unbuffered write null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98118Linux kernel netfs readahead vulnerability–0.2%2026-09-25Fix
CVE-2026-98117Linux kernel cachefiles coherency tracing use-after-free–0.2%2026-09-25Fix
CVE-2026-98116Linux kernel ALSA PCM mmap use-after-free7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98115Linux kernel ksmbd session teardown vulnerability8.8CNA v3.10.3%2026-09-25Fix
CVE-2026-98114Linux kernel ksmbd DACL parser improper error handling–0.2%2026-09-25Fix
CVE-2026-98113Linux kernel ksmbd SID mapping logging vulnerability–0.2%2026-09-25Fix
CVE-2026-98112Linux kernel ksmbd listener thread vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98111Linux kernel btintel out-of-bounds read–0.2%2026-09-25Fix
CVE-2026-98110In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length The firmware ID is treated as a NUL-terminated string even though the TLV length is its only boundary. If the value does not contain a NUL terminator, snprintf() can read beyond–0.2%2026-09-25Fix
CVE-2026-98109Linux kernel Bluetooth HCI device registration race condition4.7NVD v3.10.1%2026-09-25Fix
CVE-2026-98108Linux kernel Bluetooth L2CAP LE connection handling out-of-bounds write7.5CNA v3.10.2%2026-09-25Fix
CVE-2026-98107Linux kernel Bluetooth L2CAP ECRED connection handling out-of-bounds write–0.2%2026-09-25Fix
CVE-2026-98106Linux kernel DRM pagemap device page migration vulnerability–0.2%2026-09-25Fix
CVE-2026-98105Linux kernel OA-TC6 Ethernet driver vulnerability–0.2%2026-09-25Fix
CVE-2026-98104In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted gen_new_kid() falls back to returning max (htid | 0xFFF) when both idr_alloc_u32() ranges are full, instead of reporting an error. u32_change() trusts that va–0.2%2026-09-25Fix
CVE-2026-98103Linux kernel IGMP source filter list use-after-free–0.2%2026-09-25Fix
CVE-2026-98102Linux kernel IPv6 multicast source filter vulnerability–0.2%2026-09-25Fix
CVE-2026-98101Linux kernel IPv6 multicast source filter vulnerability–0.2%2026-09-25Fix
CVE-2026-98099Linux kernel IPv6 multicast group list race condition–0.2%2026-09-25Fix
CVE-2026-98098Linux kernel TIPC name table null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98097Linux kernel TIPC RESET/ACTIVATE message construction vulnerability–0.2%2026-09-25Fix
CVE-2026-98096Linux kernel IPv6 segment routing header handling vulnerability7.4CNA v3.10.5%2026-09-25Fix
CVE-2026-98095In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). syzbot reported BUG() in sock_sendmsg_nosec(). [0] The problem is that tpacket_parse_header() casts user-provided tpacket_hdr.tp_len, which is u32, to int–0.2%2026-09-25Fix
CVE-2026-98094Linux kernel fbtft framebuffer driver locking deadlock–0.2%2026-09-25Fix
CVE-2026-98093Linux kernel fsl_micfil audio clock handling vulnerability–0.2%2026-09-25Fix
CVE-2026-98092Linux kernel ACP6x PDM DMA driver memory leak–0.2%2026-09-25Fix
CVE-2026-98091Linux kernel Btrfs seed device transaction list handling vulnerability–0.2%2026-09-25Fix
CVE-2026-98090Linux kernel Btrfs seed device sprout handling vulnerability–0.2%2026-09-25Fix
CVE-2026-98089In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd() alb_determine_nd() uses icmp6_hdr(skb) to inspect ICMPv6 headers. However, in xmit paths (e.g. packets sent via AF_PACKET / raw sockets or forwarded pac–0.2%2026-09-25Fix
CVE-2026-98088Linux kernel mpt3sas reply queue CPU assignment vulnerability–0.2%2026-09-25Fix
CVE-2026-98087Linux kernel real-time scheduler push migration vulnerability–0.2%2026-09-25Fix
CVE-2026-98086Linux kernel ALSA UMP legacy rawmidi handling null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98085Linux kernel BPF verifier precision backtracking vulnerability–0.2%2026-09-25Fix
CVE-2026-98084Linux kernel BPF verifier precision backtracking for callbacks vulnerability–0.2%2026-09-25Fix
CVE-2026-98083Linux kernel Btrfs RAID stripe extent transaction handling use-after-free7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-98082Linux kernel Btrfs RAID stripe extent insertion memory leak5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98081Linux kernel Btrfs zoned block group cleanup vulnerability–0.2%2026-09-25Fix
CVE-2026-98080Linux kernel Btrfs qgroup snapshot accounting vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98079Linux kernel Btrfs zstd compression workspace pool vulnerability–0.2%2026-09-25Fix
CVE-2026-98078Linux kernel IPVS sync protocol serialization information disclosure4.4NVD v3.10.2%2026-09-25Fix
CVE-2026-98077Linux kernel nf_conntrack_sip out-of-bounds read–0.2%2026-09-25Fix
CVE-2026-98076Linux kernel ftrace probe event field definitions use-after-free–0.2%2026-09-25Fix
CVE-2026-98075Linux kernel BPF verifier pseudo-function checks vulnerability–0.2%2026-09-25Fix
CVE-2026-98074Linux kernel bonding driver active slave release vulnerability–0.2%2026-09-25Fix
CVE-2026-98073In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). syzbot reported the warning in cfg80211_pernet_exit(). [0] The repro does the following: 1. create two device in root netns and non-root netns 27.8CNA v3.10.2%2026-09-25Fix
CVE-2026-98072In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in release_in_xmit() release_in_xmit() clears RDS_IN_XMIT with clear_bit_unlock() and then checks waitqueue_active() to decide whether anyone needs waking. clear_bit_unlock() is only a release operati–0.2%2026-09-25Fix
CVE-2026-98071Linux kernel RDS connection path reset race condition–0.2%2026-09-25Fix
CVE-2026-98070Linux kernel RDS TCP connection reset vulnerability8.1CNA v3.10.5%2026-09-25Fix
CVE-2026-98069Linux kernel RDS connection shutdown vulnerability8.1CNA v3.10.6%2026-09-25Fix
CVE-2026-98068Linux kernel RDS connection shutdown vulnerability–0.2%2026-09-25Fix
CVE-2026-98067Linux kernel EROFS LZ4 decompression vulnerability–0.2%2026-09-25Fix
CVE-2026-98066Linux kernel caiaq USB audio driver double free–0.2%2026-09-25Fix
CVE-2026-98065Linux kernel BPF hash map key validation vulnerability–0.2%2026-09-25Fix
CVE-2026-98064Linux kernel BTF type display null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98063Linux kernel BTF variable display null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98062Linux kernel signal tracepoint arguments vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98061Linux kernel BPF tail calls vulnerability–0.2%2026-09-25Fix
CVE-2026-98060Linux kernel BPF rbtree callback locking vulnerability–0.2%2026-09-25Fix
CVE-2026-98059Linux kernel sched_process_wait tracepoint null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98058Linux kernel BPF syscall helpers vulnerability–0.2%2026-09-25Fix
CVE-2026-98057Linux kernel persistent ring buffer vulnerability–0.2%2026-09-25Fix
CVE-2026-98056Linux kernel NVMe namespace scanning denial of service7.5CNA v3.10.6%2026-09-25Fix
CVE-2026-98055Linux kernel Intel AVS audio driver vulnerability–0.2%2026-09-25Fix
CVE-2026-98054Linux kernel Intel AVS audio driver vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98053Linux kernel Intel AVS audio driver vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98052Linux kernel bcmasp transmit descriptor handling vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98051Linux kernel bcmasp transmit ring vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98050Linux kernel mlxsw Spectrum PTP driver vulnerability7.5CNA v3.10.2%2026-09-25Fix
CVE-2026-98049Linux kernel BPF arena cmpxchg vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98048Linux kernel BPF verifier vulnerability–0.2%2026-09-25Fix
CVE-2026-98047Linux kernel BPF rbtree insertion callback vulnerability–0.2%2026-09-25Fix
CVE-2026-98046Linux kernel BPF BTF lookup helper vulnerability–0.2%2026-09-25Fix
CVE-2026-98045Linux kernel BPF stack unwinding helpers vulnerability–0.2%2026-09-25Fix
CVE-2026-98044Linux kernel BPF verifier legacy packet load vulnerability–0.2%2026-09-25Fix
CVE-2026-98043Linux kernel BPF verifier pointer offset check vulnerability–0.2%2026-09-25Fix
CVE-2026-98042Linux kernel BPF verifier linked register precision vulnerability–0.2%2026-09-25Fix
CVE-2026-98041Linux kernel BPF verifier JMP32 branch prediction vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-98040Linux kernel BPF verifier null pointer check vulnerability–0.2%2026-09-25Fix
CVE-2026-98039Linux kernel BPF percpu kptr map field store vulnerability–0.2%2026-09-25Fix
CVE-2026-98038Linux kernel BPF RCU kptr refcount check vulnerability–0.2%2026-09-25Fix
CVE-2026-98037Linux kernel BPF verifier allocated-object pointer check vulnerability–0.2%2026-09-25Fix
CVE-2026-98036Linux kernel BPF rhashtable map value timers vulnerability–0.2%2026-09-25Fix
CVE-2026-98035Linux kernel BPF rhashtable map element recycling vulnerability–0.2%2026-09-25Fix
CVE-2026-98034Linux kernel BPF verifier kptr field store vulnerability–0.2%2026-09-25Fix
CVE-2026-98033Linux kernel BPF timer callback map identity vulnerability–0.2%2026-09-25Fix
CVE-2026-98032Linux kernel ftrace ring buffer reader race condition–0.2%2026-09-25Fix
CVE-2026-98031Linux kernel nexthop group entry removal vulnerability–0.2%2026-09-25Fix
CVE-2026-98030Linux kernel bcm_sf2 CFP rule dump vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-98029Linux kernel nfp ntuple rule dump vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-98028Linux kernel nfp flow steering rule list vulnerability–0.2%2026-09-25Fix
CVE-2026-98027Linux kernel mv88e6xxx policy rule dump vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-98026Linux kernel bridge multicast group list vulnerability–0.2%2026-09-25Fix
CVE-2026-98025Linux kernel cx82310_eth USB driver out-of-bounds write–0.2%2026-09-25Fix
CVE-2026-98024Linux kernel s390 ISM driver use-after-free–0.2%2026-09-25Fix
CVE-2026-98023Linux kernel VXLAN FDB nexthop entries vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98022In the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Several subsystems allocate ring buffers sized by dev->tx_queue_len with no upper bound. An unprivileged user (via unshare -Urn) can set a huge tx_queue_len an–0.2%2026-09-25Fix
CVE-2026-98021Linux kernel netlink IFLA_TXQLEN validation vulnerability–0.2%2026-09-25Fix
CVE-2026-98020Linux kernel pds_core command register access race condition–0.2%2026-09-25Fix
CVE-2026-98019In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise check_func_arg() allows bpf_register_is_null() for nullable arguments w/o marking the underlying scalar register precise. Hence a checkpoint created on such a path would prune against arbitra–0.2%2026-09-25Fix
CVE-2026-98018Linux kernel MCTP I3C driver vulnerability–0.2%2026-09-25Fix
CVE-2026-98017Linux kernel qdisc creation error path vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98016Linux kernel mlx5e TC sample restore use-after-free–0.2%2026-09-25Fix
CVE-2026-98015Linux kernel mlx5 E-Switch term table use-after-free–0.2%2026-09-25Fix
CVE-2026-98014Linux kernel mlx5 E-Switch vport multicast list vulnerability–0.2%2026-09-25Fix
CVE-2026-98013Linux kernel fq_pie denial of service–0.2%2026-09-25Fix
CVE-2026-98012Linux kernel sfq denial of service–0.2%2026-09-25Fix
CVE-2026-98011Linux kernel hhf denial of service–0.2%2026-09-25Fix
CVE-2026-98010In the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantum in change class drr_change_class() rejects explicit quantum==0 but falls back to psched_mtu() with no floor. With a crafted size table qdisc_pkt_len reaches ~2 GiB, so quantum=1 (or a zero psched_mtu–0.2%2026-09-25Fix
CVE-2026-98009In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: clamp quantum in parse and fallback paths ets_qdisc_change() falls back to psched_mtu() with no floor for bands without an explicit quantum. With a crafted size table qdisc_pkt_len reaches ~2 GiB, so a zero psched_–0.2%2026-09-25Fix
CVE-2026-98008Linux kernel macb Ethernet MDIO bus null pointer dereference–0.2%2026-09-25Fix
CVE-2026-98007Linux kernel BPF verifier bpf_loop argument check denial of service–0.2%2026-09-25Fix
CVE-2026-98006Linux kernel ALSA caiaq USB driver vulnerability–0.2%2026-09-25Fix
CVE-2026-98005Linux kernel EROFS fscache domain cache key vulnerability–0.2%2026-09-25Fix
CVE-2026-98004Linux kernel RISC-V IOMMU command queue vulnerability–0.2%2026-09-25Fix
CVE-2026-98003Linux kernel AMD IOMMU GA log vulnerability–0.2%2026-09-25Fix
CVE-2026-98002Linux kernel AMD IOMMU nested domain allocation vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98001Linux kernel LTC4282 clock provider denial of service–0.2%2026-09-25Fix
CVE-2026-98000Linux kernel hwmon PEC sysfs attribute use-after-free–0.2%2026-09-25Fix
CVE-2026-97998Linux kernel netfilter nfnetlink_log vulnerability–0.2%2026-09-25Fix
CVE-2026-97997Linux kernel virtio packed ring vulnerability–0.2%2026-09-25Fix
CVE-2026-97996Linux kernel virtio core device unregistration use-after-free–0.2%2026-09-25Fix
CVE-2026-97995Linux kernel virtio console driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97994Linux kernel vhost/vdpa out-of-bounds read–0.2%2026-09-25Fix
CVE-2026-97993Linux kernel vhost-vdpa config callback vulnerability–0.2%2026-09-25Fix
CVE-2026-97992Linux kernel vhost-vdpa config callback vulnerability–0.2%2026-09-25Fix
CVE-2026-97991Linux kernel vdpa_sim_blk out-of-bounds write7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-97990In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_net: check TX pull result before RX copy vringh_iov_pull_iotlb() returns a signed byte count. A failed TX pull is currently added to the unsigned byte counter and then passed as a size_t length to receive_filter() and vr7.5CNA v3.10.1%2026-09-25Fix
CVE-2026-97989Linux kernel vDUSE virtqueue configuration null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97988Linux kernel vhost IOTLB handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97987Linux kernel virtio input driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97986Linux kernel virtio input driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97985In the Linux kernel, the following vulnerability has been resolved: af_unix: Update last skb marker in manage_oob(). Fahad Alharbi reported that blocking recv(MSG_PEEK) could hog CPU due to OOB skb. In the following cases, manage_oob() skips OOB skb(s) and returns NULL for the last recv(MSG_PEEK)–0.2%2026-09-25Fix
CVE-2026-97984Linux kernel IPv6 UDP corking vulnerability–0.2%2026-09-25Fix
CVE-2026-97983Linux kernel vDUSE compat ioctl handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97982Linux kernel Cortina Ethernet driver receive path vulnerability–0.2%2026-09-25Fix
CVE-2026-97981Linux kernel Cortina Ethernet driver receive path vulnerability–0.2%2026-09-25Fix
CVE-2026-97980Linux kernel s390 debug feature null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97979Linux kernel ice Ethernet driver scheduler memory leak–0.2%2026-09-25Fix
CVE-2026-97978Linux kernel ice Ethernet driver trace events vulnerability–0.2%2026-09-25Fix
CVE-2026-97977Linux kernel btusb Bluetooth driver use-after-free–0.2%2026-09-25Fix
CVE-2026-97976Linux kernel btintel_pcie Bluetooth driver out-of-bounds read–0.2%2026-09-25Fix
CVE-2026-97975Linux kernel Bluetooth HCI sysfs null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97974Linux kernel IPv6 route deletion null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97973Linux kernel macb Ethernet driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97972Linux kernel macb MDIO bus driver memory leak–0.2%2026-09-25Fix
CVE-2026-97971Linux kernel namespace listing permission check vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-97970Linux kernel msc313e watchdog clock rate divide-by-zero–0.2%2026-09-25Fix
CVE-2026-97969Linux kernel msc313e watchdog clock handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97968Linux kernel corsair-cpro debugfs vulnerability–0.2%2026-09-25Fix
CVE-2026-97967Linux kernel corsair-cpro debugfs vulnerability–0.2%2026-09-25Fix
CVE-2026-97966Linux kernel octeontx2 HTB scheduler vulnerability–0.2%2026-09-25Fix
CVE-2026-97965Linux kernel VXLAN GBP header vulnerability–0.2%2026-09-25Fix
CVE-2026-97964Linux kernel PPP sync tty channel vulnerability–0.2%2026-09-25Fix
CVE-2026-97963Linux kernel stmmac PTP lock improper initialization–0.2%2026-09-25Fix
CVE-2026-97962Linux kernel mlx5e devlink health reporter vulnerability–0.2%2026-09-25Fix
CVE-2026-97961Linux kernel perf event scheduling callback list vulnerability–0.2%2026-09-25Fix
CVE-2026-97960Linux kernel Intel PEBS buffer vulnerability–0.2%2026-09-25Fix
CVE-2026-97959Linux kernel cls_route filter classifier memory leak–0.2%2026-09-25Fix
CVE-2026-97958Linux kernel tc chain netlink handling denial of service–0.2%2026-09-25Fix
CVE-2026-97957Linux kernel hinic mailbox out-of-bounds write8.8CNA v3.10.1%2026-09-25Fix
CVE-2026-97956Linux kernel net_failover slave name change deadlock–0.2%2026-09-25Fix
CVE-2026-97955Linux kernel MANA XDP program handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97954Linux kernel RDS TCP congestion map vulnerability–0.2%2026-09-25Fix
CVE-2026-97953Linux kernel stmmac TSO transmit vulnerability7.0CNA v3.10.4%2026-09-25Fix
CVE-2026-97952Linux kernel sunvdc LDC descriptor send vulnerability–0.2%2026-09-25Fix
CVE-2026-97951Linux kernel iSCSI target WRITE_PENDING handling deadlock–0.2%2026-09-25Fix
CVE-2026-97950Linux kernel configfs symlink target lookup vulnerability–0.2%2026-09-25Fix
CVE-2026-97949Linux kernel configfs use-after-free–0.2%2026-09-25Fix
CVE-2026-97948Linux kernel PowerPC EEH driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97947Linux kernel x86/amd_node null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97946In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix PCI device reference counting in amd_smn_init() The local "root" pointer is a temporary variable used during the device search. Therefore, refcount related to the search iterators should be cleaned up after the s–0.2%2026-09-25Fix
CVE-2026-97945Linux kernel x86 transparent huge page dirty bit handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97944Linux kernel x86 FineIBT hash validation vulnerability–0.2%2026-09-25Fix
CVE-2026-97943Linux kernel x86 page table collapse use-after-free–0.2%2026-09-25Fix
CVE-2026-97942Linux kernel x86 alternatives text patching vulnerability–0.2%2026-09-25Fix
CVE-2026-97941Linux kernel slab freelist return race condition7.8CNA v3.10.2%2026-09-25Exploit codeFix
CVE-2026-97940Linux kernel IPv6 FIB6 walker use-after-free7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97939Linux kernel multicast routing table allocation vulnerability–0.2%2026-09-25Fix
CVE-2026-97938Linux kernel reboot cad_pid sysctl use-after-free–0.2%2026-09-25Fix
CVE-2026-97937Linux kernel function graph tracer fork handling vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97936Linux kernel histogram stacktrace modifier vulnerability–0.2%2026-09-25Fix
CVE-2026-97935Linux kernel histogram trigger registration vulnerability–0.2%2026-09-25Fix
CVE-2026-97934Linux kernel histogram STACKTRACE key parsing vulnerability–0.2%2026-09-25Fix
CVE-2026-97933Linux kernel tracer options file open use-after-free–0.2%2026-09-25Fix
CVE-2026-97932Linux kernel enable_event trigger deferred free vulnerability–0.2%2026-09-25Fix
CVE-2026-97931Linux kernel us122l hwdep memory mapping vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-97930Linux kernel usbusx2y interrupt handler vulnerability–0.2%2026-09-25Fix
CVE-2026-97929Linux kernel usbusx2y interrupt handler vulnerability–0.2%2026-09-25Fix
CVE-2026-97928Linux kernel amdgpu TTM buffer clear vulnerability–0.2%2026-09-25Fix
CVE-2026-97927Linux kernel UFS mount cylinder group loading vulnerability–0.2%2026-09-25Fix
CVE-2026-97926Linux kernel UFS cylinder group metadata vulnerability7.0CNA v3.10.2%2026-09-25Fix
CVE-2026-97925Linux kernel clockevents broadcast device replacement race condition–0.2%2026-09-25Fix
CVE-2026-97924Linux kernel user_events field list vulnerability–0.2%2026-09-25Fix
CVE-2026-97923Linux kernel histogram trigger variable reference creation vulnerability–0.2%2026-09-25Fix
CVE-2026-97922Linux kernel histogram trigger variable references memory leak–0.2%2026-09-25Fix
CVE-2026-97921Linux kernel histogram trigger vulnerability–0.2%2026-09-25Fix
CVE-2026-97920Linux kernel histogram trigger vulnerability–0.2%2026-09-25Fix
CVE-2026-97919Linux kernel histogram trigger use-after-free–0.2%2026-09-25Fix
CVE-2026-97918Linux kernel histogram trigger vulnerability–0.2%2026-09-25Fix
CVE-2026-97917In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.–0.2%2026-09-25Fix
CVE-2026-97916Linux kernel accel/ivpu time-of-check time-of-use race condition–0.2%2026-09-25Fix
CVE-2026-97915In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vpu_tracing_buffer_header is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces–0.2%2026-09-25Fix
CVE-2026-97914In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosu_job_open() return value A WARN_ON() returns a 0 or 1, not the original negative errno. Just drop the WARN_ON() as the FD open will pass the return code to userspace and there's only one possible source of–0.2%2026-09-25Fix
CVE-2026-97913Linux kernel ethosu out-of-bounds access–0.2%2026-09-25Fix
CVE-2026-97912In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM size is 0 on mapping failure On a mapping failure of the SRAM, the SRAM size is left as non-zero. The probe will succeed as the error return is not checked since having SRAM is not a hard requirement. Th–0.2%2026-09-25Fix
CVE-2026-97911In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97910In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against fixed allocations sprd_platform_compr_open() allocates the stage 0 IRAM buffer (32K data area) and the stage 1 DDR buffer (2M data area) with fixed sizes, but sprd_platform_compr_7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97909Linux kernel STi ASoC audio driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97908In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev The command and ACL RPMsg endpoints store struct btqcomsmd as their callback private data. The receive callbacks dereference btq->hdev without taking an hci_dev–0.2%2026-09-25Fix
CVE-2026-97907In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 When key_id from chip is zero, rtlbt_parse_firmware_v2() intentionally ignores all security headers. However, the implementation simply breaks from a switch–0.2%2026-09-25Fix
CVE-2026-97906Linux kernel boot configuration parser integer overflow–0.2%2026-09-25Fix
CVE-2026-97905Linux kernel CPU frequency policy sysfs interface vulnerability–0.2%2026-09-25Fix
CVE-2026-97904Linux kernel CPU frequency policy sysfs interface vulnerability–0.2%2026-09-25Fix
CVE-2026-97903Linux kernel process exit PID handling vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-97902Linux kernel superblock freeze and thaw vulnerability–0.2%2026-09-25Fix
CVE-2026-97901Linux kernel generic netlink controller vulnerability–0.2%2026-09-25Fix
CVE-2026-97900In the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contended obj when num_objects is 0 drm_exec_prepare_array() silently returns success without calling drm_exec_lock_contended() when num_objects is zero. This breaks the invariant upheld by drm_exec_lock_obj()–0.2%2026-09-25Fix
CVE-2026-97899Linux kernel i915 graphics driver memory leak–0.2%2026-09-25Fix
CVE-2026-97898Broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms8.4CNA v4.00.2%2026-09-25Fix
CVE-2026-97897Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross-site scripting5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-97896krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross-site scripting5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-97895krayin laravel-crm User Management UserController.php privileges management5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-97886mathurvishal CloudClassroom-PHP-Project managevideos2.php SQL injection5.3CNA v4.00.3%2026-09-25
CVE-2026-97885mathurvishal CloudClassroom-PHP-Project updatefaculty.php SQL injection6.9CNA v4.00.3%2026-09-25
CVE-2026-97884mathurvishal CloudClassroom-PHP-Project Student Update Functionality updatestudent.php SQL injection5.3CNA v4.00.2%2026-09-25
CVE-2026-97883mathurvishal CloudClassroom-PHP-Project updatequery.php SQL injection6.9CNA v4.00.3%2026-09-25
CVE-2026-97882mathurvishal CloudClassroom-PHP-Project Faculty Authentication loginlinkfaculty.php SQL injection6.9CNA v4.00.5%2026-09-25
CVE-2026-97879zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication6.9CNA v4.00.6%2026-09-25
CVE-2026-97878zhistaredu StarTraining Druid console index.html anonymous missing authentication6.9CNA v4.00.6%2026-09-25
CVE-2026-97877zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password6.9CNA v4.00.5%2026-09-25
CVE-2026-97875DNS rebinding vulnerability in rojo serve HTTP API8.1CNA v3.10.3%2026-09-25Fix
CVE-2026-97871Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection6.9CNA v4.00.5%2026-09-25
CVE-2026-97869LangChain4j agentic module deserialization of untrusted data2.1CNA v4.00.4%2026-09-25Fix
CVE-2026-97868sheshbabu zen Note Editor NotesEditor.jsx dangerouslySetInnerHTML cross-site scripting5.1CNA v4.00.2%2026-09-25
CVE-2026-97866Zhonglun CloudPOS Automatic Update Program.cs channel accessible6.3CNA v4.00.3%2026-09-25
CVE-2026-97865Open-Web-Analytics Remote Event Queue endpoint queue.php loadFromArray deserialization6.9CNA v4.00.4%2026-09-25Fix
CVE-2026-97864GibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authentication6.9CNA v4.00.7%2026-09-25
CVE-2026-97863MISP Project misp-modules Cisco fireSIGHT Manager ACL export module OS command injection6.3CNA v4.00.3%2026-09-25
CVE-2026-97846Red Hat Keycloak Standard Token Exchange V2 mTLS holder-of-key binding improper authentication6.8CNA v3.10.1%2026-09-25
CVE-2026-97818phpipam incorrect authorization8.6CNA v3.10.3%2026-09-25
CVE-2026-97764django-allauth login attempt limiting vulnerability3.7CNA v3.10.2%2026-09-25Fix
CVE-2026-97737muety Wakapi type confusion7.4CNA v3.10.3%2026-09-25Fix
CVE-2026-97736tinyauth route matching rules vulnerability5.4CNA v3.10.2%2026-09-25Fix
CVE-2026-97735ITFlow cross-site scripting8.0CNA v3.10.3%2026-09-25Fix
CVE-2026-97732IRONMACE Ironshield improper signature verification5.1CNA v3.10.1%2026-09-25
CVE-2026-97731minio improper signature verification7.1CNA v3.10.2%2026-09-25
CVE-2026-97730Netgate pfSense Plus path traversal8.5CNA v3.11.0%2026-09-25Fix
CVE-2026-97724swmansion React Native Reanimated Software Mansion React Native Worklets prototype pollution5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-97723madpsy ka9q_ubersdr cross-site scripting5.4CNA v3.10.2%2026-09-25Fix
CVE-2026-97721Sanluan PublicCMS exportExcel and exportData functions improper authorization5.1CNA v4.00.2%2026-09-25
CVE-2026-97650ningzichun student-management-system addLog.php echo cross-site scripting5.3CNA v4.00.3%2026-09-25
CVE-2026-97649ningzichun student-management-system example_lite.sql default credentials5.1CNA v4.00.2%2026-09-25
CVE-2026-97648ningzichun student-management-system cross-site request forgery5.3CNA v4.00.2%2026-09-25
CVE-2026-97647ningzichun student-management-system editLog.php authorization6.9CNA v4.00.3%2026-09-25
CVE-2026-97646ningzichun student-management-system getStudent.php authorization6.9CNA v4.00.3%2026-09-25
CVE-2026-97621Linux kernel analogix_dp endpoint name formatting buffer overflow–0.2%2026-09-25Fix
CVE-2026-97620Linux kernel Xe GPU render and compute cache flush vulnerability–0.2%2026-09-25Fix
CVE-2026-97619Linux kernel io_uring buffered write accounting vulnerability–0.2%2026-09-25Fix
CVE-2026-97618Linux kernel io_uring MSG_TRUNC buffer consumption vulnerability–0.2%2026-09-25Fix
CVE-2026-97617Linux kernel ring buffer subbuffer order resize vulnerability–0.2%2026-09-25Fix
CVE-2026-97616Linux kernel act_api NEWACTION reference release vulnerability–0.2%2026-09-25Fix
CVE-2026-97615Linux kernel bridge CFM and MRP frame handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97614In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_brcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb->len bytes starting at skb->data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated sl–0.2%2026-09-25Fix
CVE-2026-97613Linux kernel mana Ethernet driver receive completion queue vulnerability–0.2%2026-09-25Fix
CVE-2026-97612Linux kernel MPLS label popping vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97611Linux kernel openvswitch use-after-free7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97610Linux kernel netfs unbuffered write path vulnerability–0.2%2026-09-25Fix
CVE-2026-97609Linux kernel netfilter connection tracking timeout use-after-free7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-97608Linux kernel netfilter logging subsystem vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-97607Linux kernel ifcvf vDPA device initialization vulnerability–0.2%2026-09-25Fix
CVE-2026-97606Linux kernel autofs superblock initialization memory leak–0.2%2026-09-25Fix
CVE-2026-97605Linux kernel EROFS LZMA decompression pool vulnerability–0.2%2026-09-25Fix
CVE-2026-97604Linux kernel vfb colormap ioctl handling use-after-free–0.2%2026-09-25Fix
CVE-2026-97603Linux kernel idpf interrupt moderation work vulnerability–0.2%2026-09-25Fix
CVE-2026-97602Linux kernel IPv6 fragment reassembly vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97601Linux kernel 6LoWPAN link creation null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97600Linux kernel cc2520 FIFOP interrupt handler use-after-free–0.2%2026-09-25Fix
CVE-2026-97599Linux kernel ieee802154 hwsim PIB updates double free–0.2%2026-09-25Fix
CVE-2026-97598Linux kernel IPv4 FIB table ID allocation vulnerability–0.2%2026-09-25Fix
CVE-2026-97597Linux kernel IPv6 flow label allocation vulnerability–0.2%2026-09-25Fix
CVE-2026-97596Linux kernel IPVS connection template sync vulnerability–0.2%2026-09-25Fix
CVE-2026-97595Linux kernel mac802154 RX frame worker use-after-free7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-97594Linux kernel Landlock path hooks use-after-free7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97593Linux kernel iommu/s390 null pointer dereference–0.2%2026-09-25Fix
CVE-2026-97592Linux kernel s390 CPACF AES CTR and GCM driver information disclosure–0.2%2026-09-25Fix
CVE-2026-97591Linux kernel s390 PHMAC crypto engine queuing vulnerability–0.2%2026-09-25Fix
CVE-2026-97590Linux kernel s390 PAES cipher driver information disclosure–0.2%2026-09-25Fix
CVE-2026-97589Linux kernel s390 PAES and PHMAC crypto callbacks vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-97588Linux kernel s390 crypto engine error handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97587In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask was a single unsigned long, but iteration uses RISCV_MAX_COUNTERS, which is 64. On RV32 that reads past the object. Filling with an unsigned-long bit–0.2%2026-09-25Fix
CVE-2026-97586Linux kernel AFS directory search vulnerability–0.2%2026-09-25Fix
CVE-2026-97585Linux kernel AFS directory block handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97584Linux kernel AFS server lookup vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97583Linux kernel AFS peer address list handling vulnerability7.5CNA v3.10.4%2026-09-25Fix
CVE-2026-97582Linux kernel gpio-fan alarm work use-after-free–0.2%2026-09-25Fix
CVE-2026-97581Linux kernel Hantro G2 HEVC decoder vulnerability–0.2%2026-09-25Fix
CVE-2026-97580In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity compute_tiles_uniform() and compute_tiles_non_uniform() loop over num_tile_columns_minus1 + 1 / num_tile_rows_minus1 + 1 entries, and assemble_hw_pps() writes o7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97579In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdec_av1_slice_setup_tile() copies tile_cols + 1 / tile_rows + 1 entries into mi_col_starts[] / mi_row_starts[] from the bitstream tile_info. Bound the copy7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97578Linux kernel Rockchip VPU981 AV1 decoder vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97577Linux kernel Rockchip VPU981 AV1 decoder vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97576Linux kernel V4L2 HEVC control validation vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97575Linux kernel V4L2 AV1 control validation vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97574Linux kernel bnxt_en RX ring TPA state vulnerability–0.2%2026-09-25Fix
CVE-2026-97573Linux kernel bnxt_en RX ring reset vulnerability8.1CNA v3.10.6%2026-09-25Fix
CVE-2026-97572Linux kernel bnxt_en RX ring initialization improper error handling–0.2%2026-09-25Fix
CVE-2026-97571Linux kernel bnxt_en TPA buffer allocation vulnerability–0.2%2026-09-25Fix
CVE-2026-97570Linux kernel bnxt_en TPA ID mapping vulnerability8.1CNA v3.10.4%2026-09-25Fix
CVE-2026-97569Linux kernel bnxt_en queue stop handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97568Linux kernel MPTCP syncookie handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97567Linux kernel MPTCP disconnect and retransmission timer race condition–0.2%2026-09-25Fix
CVE-2026-97566Linux kernel MPTCP path manager address announcements denial of service–0.2%2026-09-25Fix
CVE-2026-97565Linux kernel SMB1 client read response parser vulnerability–0.2%2026-09-25Fix
CVE-2026-97564Linux kernel SMB client idmap upcall vulnerability–0.2%2026-09-25Fix
CVE-2026-97563Linux kernel SMB1 client read response parser vulnerability–0.2%2026-09-25Fix
CVE-2026-97562Linux kernel SMB client DFS superblock handling use-after-free7.5CNA v3.10.4%2026-09-25Fix
CVE-2026-97561Linux kernel SMB client uid/gid mapping vulnerability–0.2%2026-09-25Fix
CVE-2026-97560Linux kernel SMB client native symlink parser out-of-bounds read–0.2%2026-09-25Fix
CVE-2026-97559Linux kernel SMB client DACL rewrite vulnerability–0.2%2026-09-25Fix
CVE-2026-97558Linux kernel SMB client deferred close vulnerability–0.2%2026-09-25Fix
CVE-2026-97557Linux kernel SMB client oplock break queueing memory leak7.5CNA v3.10.7%2026-09-25Fix
CVE-2026-97556Linux kernel SMB client oplock break handling vulnerability–0.2%2026-09-25Fix
CVE-2026-97555Linux kernel SMB client DACL rewrite buffer overflow8.8CNA v3.10.5%2026-09-25Fix
CVE-2026-97554Linux kernel SMB client POSIX attribute parsing vulnerability–0.2%2026-09-25Fix
CVE-2026-97553Linux kernel XFS health monitor vulnerability–0.2%2026-09-25Fix
CVE-2026-97552Linux kernel XFS deferred operation processing vulnerability–0.2%2026-09-25Fix
CVE-2026-97551Linux kernel XFS parent pointer updates vulnerability–0.2%2026-09-25Fix
CVE-2026-97550Linux kernel XFS log space reservation vulnerability–0.2%2026-09-25Fix
CVE-2026-97549Linux kernel XFS short-form directory repair denial of service–0.2%2026-09-25Fix
CVE-2026-97548Linux kernel XFS realtime rmap and refcount btrees vulnerability7.8CNA v3.10.2%2026-09-25Fix
CVE-2026-97547Linux kernel XFS file range exchange vulnerability–0.2%2026-09-25Fix
CVE-2026-97546In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrep_dir_recover_data can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing–0.2%2026-09-25Fix
CVE-2026-97545Linux kernel XFS btree bulk load vulnerability–0.2%2026-09-25Fix
CVE-2026-97544In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak dqacct if rhashtable insertion fails LOLLM observes that xqcheck_mod_live_ino_dqtrx doesn't free the newly allocated dqa object if rhashtable insertion fails. Fix this leak.–0.2%2026-09-25Fix
CVE-2026-97543Linux kernel XFS directory tree repair memory leak–0.2%2026-09-25Fix
CVE-2026-97542Linux kernel XFS AGFL repair vulnerability–0.2%2026-09-25Fix
CVE-2026-97541Linux kernel ath9k_htc Wi-Fi driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97540Linux kernel pegasus USB Ethernet driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97539Linux kernel xusbatm USB driver vulnerability–0.2%2026-09-25Fix
CVE-2026-97538In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Validate HID report lengths rog_ryujin_raw_event() parses response headers and payload fields without first checking that they are present in the received report. A short report can therefore make the driv–0.2%2026-09-25Fix
CVE-2026-97537Linux kernel qla2xxx undefined behavior–0.2%2026-09-25Fix
CVE-2026-97536Linux kernel qla2xxx use-after-free7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-97535Linux kernel qla2xxx out-of-bounds write–0.2%2026-09-25Fix
CVE-2026-97534Linux kernel f2fs free space accounting vulnerability–0.2%2026-09-25Fix
CVE-2026-97533Linux kernel x86 page table attribute changes use-after-free–0.2%2026-09-25Fix
CVE-2026-97532Linux kernel qla2xxx memory allocation error path vulnerability–0.2%2026-09-25Fix
CVE-2026-97531Linux kernel qla2xxx vport ID acquisition vulnerability7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-97530Linux kernel qla2xxx response queue polling denial of service–0.2%2026-09-25Fix
CVE-2026-97529Linux kernel qla2xxx BSG vendor command handler vulnerability–0.2%2026-09-25Fix
CVE-2026-97528Linux kernel qla2xxx NVMe unsolicited context list vulnerability8.8CNA v3.10.3%2026-09-25Fix
CVE-2026-97527Linux kernel qla2xxx NVMe unsolicited context list vulnerability8.8CNA v3.10.3%2026-09-25Fix
CVE-2026-97526Linux kernel s390 PAI performance counters vulnerability–0.2%2026-09-25Fix
CVE-2026-97525Linux kernel x86 page table allocator vulnerability8.2CNA v3.10.2%2026-09-25Fix
CVE-2026-97524Linux kernel MPTCP subflow reset handling vulnerability7.5CNA v3.10.7%2026-09-25Fix
CVE-2026-97523Linux kernel MPTCP scheduler race condition7.5CNA v3.10.7%2026-09-25Fix
CVE-2026-97522Linux kernel MPTCP subflow transmission vulnerability–0.2%2026-09-25Fix
CVE-2026-97469PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink4.3CNA v3.10.1%2026-09-25Fix
CVE-2026-97228Rapid7 Bulk Export MCP GraphQL Query injection in Export Status Lookup2.7CNA v3.10.2%2026-09-25Fix
CVE-2026-97222Gnumeric: Gnumeric: Heap use-after-free when opening a malformed workbook5.5CNA v3.10.1%2026-09-25Fix
CVE-2026-97064X-SpringBoot authentication bypass via Static Master Code9.3CNA v4.00.3%2026-09-25
CVE-2026-97063X-SpringBoot authentication bypass via Login Code9.3CNA v4.00.3%2026-09-25
CVE-2026-97060X-SpringBoot authorization bypass via User Management8.6CNA v4.00.3%2026-09-25
CVE-2026-96879The Wikimedia Foundation Mediawiki Wikimedia Foundation's improper removal of sensitive information6.9CNA v4.00.3%2026-09-25
CVE-2026-96878The Wikimedia Foundation Mediawiki cargo Exhibit field alias allows stored XSS6.9CNA v4.00.3%2026-09-25Exploit code
CVE-2026-96877The Wikimedia Foundation Mediawiki reflected XSS through Cargo Drilldown full-text search6.9CNA v4.00.3%2026-09-25Exploit code
CVE-2026-96876The Wikimedia Foundation Mediawiki anonymous reflected XSS in CargoExport invalid-alias errors6.9CNA v4.00.3%2026-09-25Exploit code
CVE-2026-96875The Wikimedia Foundation Mediawiki reflected XSS in Cargo Drilldown hierarchy filters6.9CNA v4.00.3%2026-09-25
CVE-2026-96874The Wikimedia Foundation Mediawiki stored XSS in Cargo Drilldown tab names2.3CNA v4.00.2%2026-09-25Exploit code
CVE-2026-96812Google Host Root sandbox escape in gVisor via Character Device Passthrough and CUSE8.8CNA v4.00.1%2026-09-25
CVE-2026-96795Horilla: Authenticated RCE in Horilla List-View Export8.8CNA v3.10.3%2026-09-25Fix
CVE-2026-96766GeoDirectory WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-25Fix
CVE-2026-96752bmarshall511 Zero Spam for WordPress stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-96568Restaurant Menu and Food Ordering WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-96448Red Hat Build of Keycloak Fine-Grained Admin Permissions role mapping privilege escalation6.6CNA v3.10.2%2026-09-25
CVE-2026-96039BA Book Everything WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-95866User Profile Builder WordPress plugin unauthenticated stored cross-site scripting via Avatar field7.2CNA v3.10.3%2026-09-25Fix
CVE-2026-95864Themify Builder WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-09-25Fix
CVE-2026-95835Missing ownership check on the shared memory object named by the kitty askpass escape code5.6CNA v4.00.1%2026-09-25Fix
CVE-2026-95834kovidgoyal kitty use-after-free4.6CNA v4.00.1%2026-09-25Fix
CVE-2026-95832kovidgoyal kitty improper neutralization9.3CNA v4.00.2%2026-09-25Fix
CVE-2026-95811Lemonldap::NG::Handler location rule matching incorrect authorization6.5CISA ADP v3.10.4%2026-09-25Fix
CVE-2026-94573Repeater Fields for Elementor Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-94445Malicious user input may lead to RCE in golang.org/x/playground8.8CISA ADP v3.10.4%2026-09-25Fix
CVE-2026-94376Better Messages WordPress plugin stored DOM-based cross-site scripting6.4CNA v3.10.2%2026-09-25Fix
CVE-2026-93901Optima Express IDX WordPress plugin privilege escalation7.3CNA v3.10.3%2026-09-25Fix
CVE-2026-93899Better Messages WordPress plugin SQL injection6.5CNA v3.10.3%2026-09-25Fix
CVE-2026-93897GeoDirectory WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-25Fix
CVE-2026-93834QEMU 9pfs subsystem use-after-free8.8CNA v3.10.4%2026-09-25Exploit codeFix
CVE-2026-93747wpForo Forum WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-25Fix
CVE-2026-93682PHP HTTP stream wrapper out-of-bounds read5.8CNA v3.10.4%2026-09-25Fix
CVE-2026-93656User Profile Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-25Fix
CVE-2026-93654Premium Packages WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-93647Zimbra Collaboration Suite Classic Web client stored cross-site scripting9.3CNA v3.10.2%2026-09-25Fix
CVE-2026-93643Zimbra Collaboration Suite OnlyOffice Integration path traversal leading to remote code execution9.8CNA v3.11.0%2026-09-25Fix
CVE-2026-93642Zimbra Collaboration Suite Modern Web client stored cross-site scripting via Forged Share Invitation9.3CNA v3.10.2%2026-09-25Fix
CVE-2026-93641Zimbra Collaboration Suite Classic Web client stored cross-site scripting9.3CNA v3.10.3%2026-09-25Fix
CVE-2026-93477Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash5.9CNA v4.00.2%2026-09-25Fix
CVE-2026-93399Bookly WordPress plugin insecure direct object reference9.1CNA v3.10.4%2026-09-25Reported exploitedExploit codeFix
CVE-2026-93366Bludit CMS authorization bypass via list-images/delete-image AJAX endpoints5.3CNA v4.00.2%2026-09-25
CVE-2026-93365Bludit CMS missing authorization via content-get-list AJAX endpoint7.1CNA v4.00.2%2026-09-25
CVE-2026-93364Bludit CMS mass assignment privilege escalation via Pages::edit5.3CNA v4.00.2%2026-09-25
CVE-2026-93363Payload CMS storage-vercel-blob Adapter improper access control on upload route5.3CNA v4.00.2%2026-09-25Fix
CVE-2026-93306This Power System update is being released to address7.1CNA v3.10.2%2026-09-25Fix
CVE-2026-93303HT Contact Form WordPress plugin unauthenticated stored DOM-based cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-93030IBM Financial Transaction Manager (FTM) for Redhat OpenShift XML external entity injection6.5CNA v3.10.3%2026-09-25
CVE-2026-92842PHP OOB read / info leak in convert.* stream filters when line-break-chars contains NUL5.9CNA v3.10.4%2026-09-25Fix
CVE-2026-92829Blog2Social: Social Media Auto Post and Scheduler WordPress plugin authorization bypass4.3CNA v3.10.3%2026-09-25Fix
CVE-2026-92799Online Scheduling and Appointment Booking System WordPress plugin authorization bypass5.3CNA v3.10.3%2026-09-25Fix
CVE-2026-92746Gutenverse WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-25Fix
CVE-2026-92713Modula Image Gallery WordPress plugin missing authorization authenticated arbitrary file deletion8.1CNA v3.10.3%2026-09-25Fix
CVE-2026-92609Apache Qpid Broker-j: Missing HTTP-session renewal after successful authentication9.8CISA ADP v3.10.4%2026-09-25Fix
CVE-2026-92608Apache Qpid Broker-j: Incomplete property conversion handling from AMQP to AMQP 0-107.5CISA ADP v3.10.5%2026-09-25Fix
CVE-2026-92573Apache Qpid Broker-J GZIP decompression handling denial of service6.5CISA ADP v3.10.4%2026-09-25Fix
CVE-2026-92564Apache Qpid Broker-J AMQP field-table decoder denial of service7.5CISA ADP v3.10.5%2026-09-25Fix
CVE-2026-92560Apache Qpid Broker-J AMQP 0-10 decoder denial of service7.5CISA ADP v3.10.5%2026-09-25Fix
CVE-2026-92550Apache Qpid Broker-J AMQP 0-8/0-9/0-9-1 decoder denial of service7.5CISA ADP v3.10.5%2026-09-25Fix
CVE-2026-92289LemonLDAP::NG Portal PKCE validation vulnerability9.1CISA ADP v3.10.4%2026-09-25Fix
CVE-2026-92288LemonLDAP::NG Portal OAuth2 token introspection vulnerability9.1CISA ADP v3.10.4%2026-09-25Fix
CVE-2026-92212JetFormBuilder WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-09-25Fix
CVE-2026-92161FriendsOfFlarum OAuth: Unauthenticated account takeover9.8CNA v3.10.3%2026-09-25Fix
CVE-2026-92106lazy_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS2.3CNA v4.00.4%2026-09-25Fix
CVE-2026-91841GNOME NetworkManager-vpnc CA-file path handling CRLF injection7.8CNA v3.10.2%2026-09-25
CVE-2026-91840NetworkManager-vpnc: NetworkManager-vpnc: Local privilege escalation to root7.8CNA v3.10.2%2026-09-25
CVE-2026-91839NetworkManager-fortisslvpn: NetworkManager-fortisslvpn: Local privilege escalation to root7.8CNA v3.10.2%2026-09-25
CVE-2026-91838NetworkManager-sstp: NetworkManager-sstp: Local privilege escalation to root7.8CNA v3.10.1%2026-09-25
CVE-2026-91837NetworkManager-iodine: NetworkManager-iodine: Local privilege escalation to root7.8CNA v3.10.1%2026-09-25
CVE-2026-91769PHP TLS Hostname Verification Falls Back to CN after SAN Mismatch4.3CNA v3.10.1%2026-09-25Fix
CVE-2026-91768PHP IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison6.5CNA v3.10.6%2026-09-25Fix
CVE-2026-91767PHP heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN6.5CNA v3.10.2%2026-09-25Fix
CVE-2026-91766PHP cross-origin credential leak in HTTP stream wrapper redirects5.9CNA v3.10.3%2026-09-25Fix
CVE-2026-91765PHP SOAP: Unbounded Recursion in Server-Side cleanup_xml_node7.5CNA v3.10.5%2026-09-25Fix
CVE-2026-89426Knit Pay WordPress plugin privilege escalation8.8CNA v3.10.5%2026-09-25Fix
CVE-2026-89406wpchill Modula Image Gallery gallery metadata hook missing authorization7.5CNA v3.10.4%2026-09-25Fix
CVE-2026-89055Customer Reviews for WooCommerce WordPress plugin authorization bypass9.1CNA v3.10.4%2026-09-25Exploit codeFix
CVE-2026-89032BerriAI LiteLLM Tenant Isolation Bypass via Semantic Cache Layer8.7CNA v4.00.3%2026-09-25Fix
CVE-2026-88996WPForms WordPress plugin reflected cross-site scripting via page_title POST parameter6.1CNA v3.10.3%2026-09-25Reported exploitedExploit codeFix
CVE-2026-88848MasterStudy LMS membership plan enrollment incorrect authorization4.2CNA v3.10.1%2026-09-25Fix
CVE-2026-88421APSL puput BlogPage.get_entries improper access control7.5CISA ADP v3.10.3%2026-09-25
CVE-2026-88420APSL puput EntryAbstract.save reflected cross-site scripting5.4CISA ADP v3.10.2%2026-09-25
CVE-2026-88389Espruino JavaScript lexer null pointer dereference6.2CISA ADP v3.10.1%2026-09-25
CVE-2026-88003InvoicePlane: Failure to Revoke Administrative Privileges after Role Downgrade7.5CNA v4.00.3%2026-09-25Fix
CVE-2026-86837Bookly customer identity verification insecure direct object reference5.3CNA v3.10.2%2026-09-25Fix
CVE-2026-86066Horilla attendance approval endpoint is vulnerable to cross-site request forgery5.9CNA v4.00.2%2026-09-25Fix
CVE-2026-85750Piwigo arbitrary file read and remote code execution via insecure image processing7.2CNA v3.11.2%2026-09-25
CVE-2026-85542IBM Guardium Data Protection GIM bundle import OS command injection8.8CNA v3.12.4%2026-09-25Fix
CVE-2026-85417Incomplete property masking in the SANnav logging subsystem6.4CNA v4.00.2%2026-09-25Fix
CVE-2026-85293InvoicePlane: Stored cross-site scripting (XSS) via Client Email in Invoice and Quote Mailer forms4.8CNA v3.10.2%2026-09-25Fix
CVE-2026-85292InvoicePlane: Loose Type Comparison in Core Authentication Check (Defense-in-Depth)4.8CNA v3.10.3%2026-09-25Fix
CVE-2026-85291InvoicePlane IDOR: Horizontal privilege escalation via Password Change without Authorization Check6.5CNA v3.10.3%2026-09-25Fix
CVE-2026-85290InvoicePlane: Log injection via Unsanitized User Input in Cron Key Error Logging5.3CNA v3.10.2%2026-09-25Fix
CVE-2026-85289InvoicePlane: Missing CSRF Token Validation on multiple Delete endpoints6.5CNA v3.10.2%2026-09-25Fix
CVE-2026-85274InvoicePlane: Recurring Invoice State Change via GET request without CSRF Protection6.5CNA v3.10.2%2026-09-25Fix
CVE-2026-85029IBM Guardium Data Protection path traversal7.5CNA v3.10.5%2026-09-25Fix
CVE-2026-84893IBM Guardium Data Protection PESI service SQL injection7.6CNA v3.10.2%2026-09-25Fix
CVE-2026-84884IBM Guardium Data Protection REST service account credentials plaintext password storage7.5CNA v3.10.2%2026-09-25Fix
CVE-2026-84882IBM Guardium Data Protection Universal Connector Oracle Wallet upload path traversal7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-84862IBM Guardium Data Protection Quartz JDBC job store insecure deserialization7.2CNA v3.10.4%2026-09-25Fix
CVE-2026-84465Zammad: S/MIME signature verification allows forged sender impersonation7.1CNA v4.00.1%2026-09-25Fix
CVE-2026-84464Zammad External Data Source lookup insecure direct object reference7.1CNA v4.00.3%2026-09-25Fix
CVE-2026-84463Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching6.3CNA v4.00.2%2026-09-25Fix
CVE-2026-84462Zammad: AI agent template sanitizer bypass leads to remote code execution8.6CNA v4.00.3%2026-09-25Fix
CVE-2026-84461Zammad: Missing rate limiting allows password brute-forcing during two-factor login6.9CNA v4.00.3%2026-09-25Fix
CVE-2026-84460Zammad: Missing authorization in TagsController#list allows Cross-Object Tag Enumeration5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-84458Zammad: Account takeover via unverified email matching during SSO auto-link9.1CNA v4.00.4%2026-09-25Fix
CVE-2026-84281Fancy Product Designer WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-84280Fancy Product Designer WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-09-25Fix
CVE-2026-84279Fancy Product Designer WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-83591AMP for WP WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-25Fix
CVE-2026-80514wpForo Forum - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass5.3CNA v3.10.2%2026-09-25Fix
CVE-2026-80432kovidgoyal kitty missing authorization6.0CNA v4.00.1%2026-09-25Fix
CVE-2026-80431Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process6.8CNA v4.00.1%2026-09-25Fix
CVE-2026-80430kovidgoyal kitty link following4.6CNA v4.00.2%2026-09-25Fix
CVE-2026-79153Seclore FileSecure Desktop Client kernel-mode driver privilege escalation7.8CISA ADP v3.10.1%2026-09-25
CVE-2026-78902Netgate pfSense cross-site scripting6.1CISA ADP v3.10.3%2026-09-25
CVE-2026-78397Link Library WordPress plugin unauthenticated SSRF via Reciprocal Link validation4.0CISA ADP v3.10.2%2026-09-25Fix
CVE-2026-78394Link Library WordPress plugin Contributor+ path traversal via filepath parameter4.1CISA ADP v3.10.2%2026-09-25Fix
CVE-2026-78393Link Library WordPress plugin reflected XSS via link_tags and link_price Sort and Breadcrumb Links6.1CISA ADP v3.10.1%2026-09-25Fix
CVE-2026-75553Tohoku Electric Power "Yorisou e Net" Android App hard-coded cryptographic key2.4CNA v4.00.1%2026-09-25Fix
CVE-2026-71483Horilla: Reflected cross-site scripting (XSS) in Employee Filter view8.5CNA v4.00.3%2026-09-25Fix
CVE-2026-67421RabbitMQ: Stored HTML injection in RabbitMQ Management OAuth Error Handling4.5CNA v4.00.3%2026-09-25Fix
CVE-2026-67420RabbitMQ OAuth credential refresh retains revoked runtime tags2.3CNA v4.00.2%2026-09-25Fix
CVE-2026-67419RabbitMQ: Consecutive topic wildcards cause combinatorial routing work7.1CNA v4.00.4%2026-09-25Fix
CVE-2026-67415RabbitMQ: Shovel Management Atom Exhaustion allows Persistent Broker-Wide denial of service5.9CNA v4.00.4%2026-09-25Fix
CVE-2026-67413RabbitMQ JMS topic selector plugin regular expression denial of service6.0CNA v4.00.4%2026-09-25Fix
CVE-2026-67412RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access6.0CNA v4.00.3%2026-09-25Fix
CVE-2026-67411RabbitMQ: Web MQTT with PROXY protocol enabled: A loopback-only user permission bypass6.0CNA v4.00.3%2026-09-25Fix
CVE-2026-67410RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript endpoint8.2CNA v4.00.4%2026-09-25Fix
CVE-2026-67409RabbitMQ JWKS key fetching denial of service8.2CNA v4.00.4%2026-09-25Fix
CVE-2026-67408RabbitMQ stream management super-streams API denial of service7.1CNA v4.00.4%2026-09-25Fix
CVE-2026-67407RabbitMQ MQTT topic permission templates vulnerability5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-67406RabbitMQ Shovel and Federation plugins information disclosure4.6CNA v4.00.3%2026-09-25Fix
CVE-2026-67242RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp6.3CNA v4.00.3%2026-09-25Fix
CVE-2026-67241RabbitMQ: AMQP management exchange.declare skips alternate-exchange permission check4.8CNA v4.00.3%2026-09-25Fix
CVE-2026-67239RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI7.6CNA v4.00.2%2026-09-25Fix
CVE-2026-67237RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint7.5CNA v4.00.5%2026-09-25Fix
CVE-2026-67236RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login8.2CNA v4.00.1%2026-09-25Fix
CVE-2026-67234RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference2.3CNA v4.00.6%2026-09-25Fix
CVE-2026-67230RabbitMQ: Web-STOMP unbounded pre-auth accumulation6.3CNA v4.00.5%2026-09-25Fix
CVE-2026-67227RabbitMQ: Atom exhaustion: To_atom on global-parameter :name5.9CNA v4.00.3%2026-09-25Fix
CVE-2026-67226RabbitMQ: Admin-only atom exhaustion: PUT /API/users tags list6.9CNA v4.00.4%2026-09-25Fix
CVE-2026-67225RabbitMQ: Stream-protocol frame length never validated against frame_max6.3CNA v4.00.3%2026-09-25Fix
CVE-2026-67223RabbitMQ: LDAP DN injection via unescaped substitution6.3CNA v4.00.4%2026-09-25Fix
CVE-2026-67222RabbitMQ: List_to_atom on auth_mechanism URI tokens in amqp_client5.9CNA v4.00.3%2026-09-25Fix
CVE-2026-66078RabbitMQ: Protected tag bypass via bulk-delete2.1CNA v4.00.4%2026-09-25Fix
CVE-2026-66073RabbitMQ: Atom table exhaustion via management API node field6.0CNA v4.00.4%2026-09-25Fix
CVE-2026-66071RabbitMQ: Atom exhaustion: OAuth2 JWT tag: Scope values6.0CNA v4.00.5%2026-09-25Fix
CVE-2026-65828Zammad: Pending upload deletion bypass via legacy attachment endpoint2.3CNA v4.00.2%2026-09-25Fix
CVE-2026-63432Horilla mail preview endpoint server-side template injection6.5CNA v3.10.3%2026-09-25Fix
CVE-2026-63431Horilla payroll component views missing authorization6.5CNA v3.10.2%2026-09-25
CVE-2026-63216Zammad: Stored XSS via unescaped option labels in the object attribute options context UI5.3CNA v4.00.2%2026-09-25Fix
CVE-2026-63208Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens5.1CNA v4.00.3%2026-09-25Fix
CVE-2026-63207Zammad: Sensitive information exposure in Integration Administration API6.9CNA v4.00.2%2026-09-25Fix
CVE-2026-63206Zammad: Remote image tracking bypass via shortened URL scheme5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-63205Zammad: Channel admins can read unauthorized attachments via signature rich-text body5.1CNA v4.00.3%2026-09-25Fix
CVE-2026-63204Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets2.3CNA v4.00.3%2026-09-25Fix
CVE-2026-63006Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset5.3CNA v4.00.5%2026-09-25Fix
CVE-2026-62262Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`9.1CNA v3.10.3%2026-09-25Fix
CVE-2026-62062Elementor Website Builder WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.1%2026-09-25Reported exploitedExploit codeFix
CVE-2026-61855Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail5.3CNA v4.00.2%2026-09-25Fix
CVE-2026-61837rabbitmq-server improper authorization6.3CNA v4.00.3%2026-09-25Fix
CVE-2026-61525Zammad: Arbitrary file deletion via Unvalidated Session Identifier in Long Polling controller8.8CNA v4.00.4%2026-09-25
CVE-2026-57449Actual Sync Server CORS proxy information disclosure7.1CNA v4.00.2%2026-09-25Fix
CVE-2026-57443SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API exposes Operator Email Digests7.5CNA v3.10.6%2026-09-25Fix
CVE-2026-56735Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad5.3CNA v4.00.4%2026-09-25Fix
CVE-2026-56734Zammad: Avatar Image URL Server-Side Request Forwarding5.3CNA v4.00.4%2026-09-25Fix
CVE-2026-56733Zammad: Incorrect authorization and improper privilege management8.7CNA v4.00.3%2026-09-25Fix
CVE-2026-56732Zammad ticket body HTML sanitizer cross-site request forgery5.3CNA v4.00.2%2026-09-25Fix
CVE-2026-56731Zammad ticket title field vulnerability8.4CNA v4.00.2%2026-09-25Fix
CVE-2026-56730Zammad: Missing authorization in GraphQL mutation for suggesting knowledge base answers2.1CNA v4.00.4%2026-09-25Fix
CVE-2026-56729Zammad: Titles of knowledge base answers will be shown across all categories via the global search2.1CNA v4.00.4%2026-09-25Fix
CVE-2026-56728Zammad: Cross-User Taskbar Item access control vulnerability5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-56727Zammad: PGP signature spoofing via unvalidated verification return7.1CNA v4.00.2%2026-09-25Fix
CVE-2026-56726zammad missing authorization5.1CNA v4.00.3%2026-09-25Fix
CVE-2026-56725Zammad: Denial of service via OTRS Import controller8.7CNA v4.00.4%2026-09-25Fix
CVE-2026-56724Zammad: Incorrect implementation of permission checks in the knowledge base module7.1CNA v4.00.3%2026-09-25Fix
CVE-2026-56723Zammad ticket attachment download endpoint incorrect authorization7.1CNA v4.00.3%2026-09-25Fix
CVE-2026-55217GLPI: Unallowed modfication of knowbase items comments and translations5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-55214GLPI: Stored XSS in suppliers8.5CNA v4.00.3%2026-09-25Fix
CVE-2026-54790InvoicePlane: Second-order SQL injection6.0CNA v3.10.2%2026-09-25Fix
CVE-2026-53629GLPI: SQL injection in history tab7.1CNA v4.01.0%2026-09-25NucleiExploit codeFix
CVE-2026-53628GLPI: Unallowed authentication method update by administrator5.9CNA v4.00.5%2026-09-25Fix
CVE-2026-53627GLPI: Unexpected access to update operations through the API6.0CNA v4.00.3%2026-09-25Fix
CVE-2026-53626GLPI: Arbitrary Document Read via Form Context authorization bypass7.1CNA v4.00.3%2026-09-25Fix
CVE-2026-53625GLPI: Privilege escalation via authtype API manipulation7.5CNA v4.00.6%2026-09-25Exploit codeFix
CVE-2026-53610GLPI: Reflected XSS in dashboards7.5CNA v4.00.4%2026-09-25Fix
CVE-2026-53493Containerd has image-pull DoS via crafted OCI index graph amplification6.9CNA v4.00.4%2026-09-25Fix
CVE-2026-52622Wellav WES Emergency Broadcast Terminal API request wrapper information disclosure7.5CNA v3.10.3%2026-09-25
CVE-2026-51773OpenStack glance_store VMware datastore driver server-side request forgery8.1CISA ADP v3.10.3%2026-09-25Fix
CVE-2026-51772Image API server-side request forgery6.5CISA ADP v3.10.3%2026-09-25
CVE-2026-50547InvoicePlane permits local file inclusion through the e-invoice XML configuration identifier7.5CNA v3.10.5%2026-09-25Fix
CVE-2026-49850InvoicePlane: Missing CSRF Protection on State-Changing delete Actions7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-49470GLPI: Missing Rate Limiting on Login and TOTP verification account takeover via brute force7.7CNA v4.00.4%2026-09-25Fix
CVE-2026-49469GLPI: LDAP filter injection in user import feature4.6CNA v4.00.4%2026-09-25Fix
CVE-2026-48482GLPI: RCE via form import9.4CNA v4.00.3%2026-09-25Fix
CVE-2026-47679GLPI: Arbitrary file deletion8.5CNA v4.00.3%2026-09-25Fix
CVE-2026-45801GLPI: Unauthorized Debug Mode Activation via Profile Update (privilege escalation)5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-44642Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass8.1CNA v3.11.3%2026-09-25Fix
CVE-2026-42324Piwigo: Second-order SQL injection7.2CNA v3.10.9%2026-09-25Fix
CVE-2026-42323Piwigo: SQL injection in Batch Manager7.2CNA v3.10.4%2026-09-25Fix
CVE-2026-42322Piwigo: Authenticated RCE via file upload in Logo upload feature9.1CNA v3.10.5%2026-09-25Fix
CVE-2026-39372InvoicePlane: Sensitive information disclosure via Unstripped EXIF Metadata in Attachments4.9CNA v3.10.3%2026-09-25Fix
CVE-2026-39353InvoicePlane: Remote code execution via Writable Templates Directory9.1CNA v3.10.4%2026-09-25Fix
CVE-2026-33639InvoicePlane permits DDL injection through tax_rate_decimal_places7.2CNA v3.10.4%2026-09-25Fix
CVE-2026-27867Cross-site scripting (XSS) VIA THE CMDCOOKIE PARAMETER Regesta Smart HD-PLC OF Teldat4.8CNA v4.00.4%2026-09-25Fix
CVE-2026-19804s2Member WordPress plugin unauthenticated remote code execution8.8CNA v3.11.0%2026-09-25Fix
CVE-2026-19775OpenStation WordPress plugin missing authorization authenticated sensitive information disclosure4.3CNA v3.10.2%2026-09-25Fix
CVE-2026-18320Readwise Reader for Android SVG attribute sanitization cross-site scripting6.1CISA ADP v3.10.2%2026-09-25Fix
CVE-2026-18312Readwise Reader for Android WebView URL construction stored cross-site scripting6.1CISA ADP v3.10.2%2026-09-25Fix
CVE-2026-18311Readwise Reader for Android document metadata import stored cross-site scripting6.1CISA ADP v3.10.2%2026-09-25Fix
CVE-2026-17602SSL Zen WordPress plugin path traversal to arbitrary file read4.9CNA v3.10.6%2026-09-25Fix
CVE-2026-17577SSL Zen WordPress plugin reflected cross-site scripting via uri parameter6.1CNA v3.10.3%2026-09-25Fix
CVE-2026-17545PHP filesystem and stream APIs on Windows vulnerability6.9CNA v4.00.3%2026-09-25Fix
CVE-2026-14281Automation Web Platform WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.5%2026-09-25Exploit codeFix
CVE-2026-13456WP Maps WordPress plugin authenticated (Subscriber+) local file inclusion via page parameter7.5CNA v3.10.7%2026-09-25Fix
CVE-2026-13179WP Maps WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-25Fix
CVE-2026-12037Asset CleanUp: Page Speed Booster WordPress plugin server-side request forgery5.5CNA v3.10.3%2026-09-25Fix
CVE-2026-10758Esri LERC out-of-bounds write7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-6103PHP phar TAR phar_tar_number integer overflow Archive Entry injection4.3CNA v3.10.2%2026-09-25Fix
CVE-2026-6088Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-6087Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-6086Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-6085Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-6084Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-6083Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-6082Stored cross-site scripting in StockAgile by Novadigits technologies5.1CNA v4.00.2%2026-09-25Fix
CVE-2026-5267Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS7.5CISA ADP v3.10.4%2026-09-25
CVE-2026-97636Apache Airflow HashiCorp provider insecure direct object reference6.5CISA ADP v3.10.4%2026-09-24Fix
CVE-2026-97521Linux kernel gfs2 quota initialization improper locking–0.2%2026-09-24Fix
CVE-2026-97520Linux kernel gfs2 quota initialization vulnerability7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-97519Linux kernel Xe GPU devcoredump null pointer dereference–0.1%2026-09-24Fix
CVE-2026-97518Linux kernel cfg80211 cipher suite registration vulnerability–0.2%2026-09-24Fix
CVE-2026-97517Linux kernel nl80211 beacon parsing vulnerability–0.2%2026-09-24Fix
CVE-2026-97516Linux kernel rtw88 Wi-Fi driver null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97515In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request (MR) in-band interrupt event. The driver handles–0.2%2026-09-24Fix
CVE-2026-97514In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handle_dynamic_resolution change requires that the state_lock be acquired based on the lockdep_assert_held. However, the handle_dynamic_resolution_change call in in–0.2%2026-09-24Fix
CVE-2026-97513Linux kernel wave5 use-after-free7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97512In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume,–0.2%2026-09-24Fix
CVE-2026-97511Linux kernel mac80211 radiotap header vulnerability–0.1%2026-09-24Fix
CVE-2026-97510Linux kernel Thunderbolt xdomain messaging memory leak–0.2%2026-09-24Fix
CVE-2026-97509Linux kernel Thunderbolt XDomain service vulnerability8.8CNA v3.10.2%2026-09-24Fix
CVE-2026-97508In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep t7.5CNA v3.10.2%2026-09-24Fix
CVE-2026-97507Linux kernel DM1105 media driver DMA allocation null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97506Linux kernel IXP4xx crypto driver null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97505Linux kernel PCI sysfs BAR resize attribute vulnerability–0.2%2026-09-24Fix
CVE-2026-97504Linux kernel lenovo_se10_wdt use-after-free–0.2%2026-09-24Fix
CVE-2026-97503Linux kernel proc irq directory name buffer vulnerability–0.2%2026-09-24Fix
CVE-2026-97502Linux kernel DaVinci MMC driver IRQ handler vulnerability–0.2%2026-09-24Fix
CVE-2026-97501Linux kernel MediaTek Paris pinctrl GPIO driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97500Linux kernel rtw89 Wi-Fi driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97499Linux kernel Coresight ETM perf source tracking race condition–0.2%2026-09-24Fix
CVE-2026-97498Linux kernel amdgpu user queue buffer eviction vulnerability–0.2%2026-09-24Fix
CVE-2026-97497Linux kernel amdkfd SDMA queue allocation vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97496Linux kernel amdkfd wave state retrieval vulnerability7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-97495Linux kernel amdkfd doorbell allocation vulnerability–0.2%2026-09-24Fix
CVE-2026-97494Linux kernel amdgpu PSP firmware buffer copy vulnerability–0.2%2026-09-24Fix
CVE-2026-97493Linux kernel amdgpu VBIOS GPIO I2C table parsing vulnerability–0.2%2026-09-24Fix
CVE-2026-97492Linux kernel mac80211 reconfiguration handling vulnerability–0.2%2026-09-24Fix
CVE-2026-97491In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait_event call, which blocks oth–0.2%2026-09-24Fix
CVE-2026-97490Linux kernel AFFS filesystem driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97489Linux kernel BFS filesystem driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97488Linux kernel QNX4 filesystem driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97487Linux kernel JFS filesystem driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97486Linux kernel HPFS filesystem driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97485Linux kernel OMFS filesystem driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97484Linux kernel USB/IP vhci_hcd driver null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97483Linux kernel USB root hub control transfers deadlock–0.2%2026-09-24Fix
CVE-2026-97482Linux kernel goku_udc USB gadget driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97481Linux kernel 8250 serial driver interrupt handler denial of service–0.2%2026-09-24Fix
CVE-2026-97480Linux kernel 8250 serial driver ACPI companion check vulnerability–0.2%2026-09-24Fix
CVE-2026-97479Linux kernel device driver core device links vulnerability–0.2%2026-09-24Fix
CVE-2026-97478Linux kernel ACRN hypervisor irqfd use-after-free7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97477Linux kernel RDMA counter bind_qp vulnerability–0.2%2026-09-24Fix
CVE-2026-97476Linux kernel RDS getsockopt info interface vulnerability–0.2%2026-09-24Fix
CVE-2026-97475Linux kernel Tegra SOCTHERM cooling device driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97474Linux kernel iwlwifi Wi-Fi driver vulnerability7.4CNA v3.10.1%2026-09-24Fix
CVE-2026-97473Linux kernel intel_rapl power capping driver memory leak–0.2%2026-09-24Fix
CVE-2026-97472Linux kernel IPv6 privacy address generation vulnerability–0.2%2026-09-24Fix
CVE-2026-97456Linux kernel ACPICA parser out-of-bounds access–0.2%2026-09-24Fix
CVE-2026-97455Linux kernel ACPICA control method dispatcher use-after-free8.4CNA v3.10.1%2026-09-24Fix
CVE-2026-97454Linux kernel ACPICA parser out-of-bounds access7.7CNA v3.10.1%2026-09-24Fix
CVE-2026-97453Linux kernel ACPICA parser vulnerability–0.2%2026-09-24Fix
CVE-2026-97452Linux kernel ACPICA object utilities vulnerability8.4CNA v3.10.1%2026-09-24Fix
CVE-2026-97451Linux kernel ACPICA integer overflow8.4CNA v3.10.1%2026-09-24Fix
CVE-2026-97450Linux kernel ACPICA event handler vulnerability8.4CNA v3.10.1%2026-09-24Fix
CVE-2026-97449Linux kernel ACPICA parser out-of-bounds access–0.2%2026-09-24Fix
CVE-2026-97448Linux kernel ACPICA namespace parser use-after-free7.7CNA v3.10.1%2026-09-24Fix
CVE-2026-97447Linux kernel ACPICA table loader buffer overflow–0.2%2026-09-24Fix
CVE-2026-97446Linux kernel ACPICA namespace parser null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97445Linux kernel ACPICA AML resource parsing buffer overflow7.7CNA v3.10.2%2026-09-24Fix
CVE-2026-97444Linux kernel ACPICA out-of-bounds access7.7CNA v3.10.1%2026-09-24Fix
CVE-2026-97443Linux kernel ftrace unregistration vulnerability–0.2%2026-09-24Fix
CVE-2026-97442Linux kernel ath11k native Wi-Fi decapsulation vulnerability8.8CNA v3.10.3%2026-09-24Fix
CVE-2026-97441Linux kernel AHCI port register mapping denial of service–0.2%2026-09-24Fix
CVE-2026-97440Linux kernel qrtr node reference counting resource leak–0.2%2026-09-24Fix
CVE-2026-97439Linux kernel NTFS3 dos_attrib handling null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97438Linux kernel NTFS3 index entry parsing vulnerability7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-97437Linux kernel ntfs3 out-of-bounds read7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-97436Linux kernel dpaa2-switch FDB bridge leave handling vulnerability–0.2%2026-09-24Fix
CVE-2026-97435Linux kernel sja1105 flower cross-chip redirect vulnerability–0.2%2026-09-24Fix
CVE-2026-97434Linux kernel dpaa2-switch NAPI teardown vulnerability–0.2%2026-09-24Fix
CVE-2026-97433Linux kernel NVMe FDP configuration log parsing vulnerability8.2CNA v3.10.3%2026-09-24Fix
CVE-2026-97432Linux kernel iwlwifi P2P device binding denial of service–0.2%2026-09-24Fix
CVE-2026-97431Linux kernel AMD display phantom stream handling null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97430Linux kernel xHCI command ring vulnerability–0.2%2026-09-24Fix
CVE-2026-97429Linux kernel AMDKFD queue destruction use-after-free7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97428Linux kernel AMDGPU FRU EEPROM parsing out-of-bounds read7.7CNA v3.10.1%2026-09-24Fix
CVE-2026-97427Linux kernel drm/amd/pm heap-based buffer overflow–0.2%2026-09-24Fix
CVE-2026-97426Linux kernel AMDGPU SmartShift bias sysfs interface vulnerability–0.2%2026-09-24Fix
CVE-2026-97425Linux kernel AMDGPU vBIOS update interface buffer overflow–0.2%2026-09-24Fix
CVE-2026-97424Linux kernel AMDGPU RAS interrupt handling vulnerability–0.2%2026-09-24Fix
CVE-2026-97423Linux kernel CXL region partition mapping vulnerability–0.2%2026-09-24Fix
CVE-2026-97422Linux kernel AMDKFD SMI event interface information disclosure–0.2%2026-09-24Fix
CVE-2026-97421Linux kernel RDMA umem page size selection vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97420Linux kernel BPF sysctl value handling vulnerability–0.2%2026-09-24Fix
CVE-2026-97419Linux kernel HSR netlink notifications vulnerability–0.2%2026-09-24Fix
CVE-2026-97418Linux kernel ALSA es18xx driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97417Linux kernel netfilter nf_conntrack TCP SACK parser vulnerability7.5CNA v3.10.5%2026-09-24Fix
CVE-2026-97416Linux kernel Btrfs balance null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97415Linux kernel Btrfs tree-checker vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97414Linux kernel MediaTek mt8365 audio driver null pointer dereference–0.2%2026-09-24Fix
CVE-2026-97413Linux kernel RDMA rtrs-srv read/write handler integer underflow9.8CNA v3.10.5%2026-09-24Fix
CVE-2026-97412Linux kernel pds_core driver use-after-free–0.2%2026-09-24Fix
CVE-2026-97411Linux kernel IBM EMAC MAL driver denial of service–0.2%2026-09-24Fix
CVE-2026-97410Linux kernel netconsole target cleanup vulnerability–0.2%2026-09-24Fix
CVE-2026-97409Linux kernel nvme-fc controller improper initialization8.8CNA v3.10.2%2026-09-24Fix
CVE-2026-97408Linux kernel L2CAP connectionless PSM parser vulnerability–0.2%2026-09-24Fix
CVE-2026-97407Linux kernel Rockchip PDM audio driver vulnerability–0.2%2026-09-24Fix
CVE-2026-97404OpenStack Zaqar use of a less trusted source9.2CNA v4.00.3%2026-09-24Fix
CVE-2026-97368SpringBlade user-auth-info endpoint improper authorization5.3CNA v4.00.2%2026-09-24
CVE-2026-97366jhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection5.3CNA v4.01.2%2026-09-24
CVE-2026-97365chonkie-inc littrs lib.rs mount path traversal5.3CNA v4.00.4%2026-09-24
CVE-2026-97362HFS2 unauthenticated denial of service via Hung Serving Thread8.7CNA v4.00.3%2026-09-24
CVE-2026-97360HFS2 unauthenticated arbitrary file read/Write via Template Engine10.0CNA v4.00.3%2026-09-24
CVE-2026-97359HFS2 RCE via Multipart Upload Filename template injection10.0CNA v4.00.8%2026-09-24Reported exploited
CVE-2026-97326songxinjianqwe Chat chat-server ChatServer.java server-side request forgery6.9CNA v4.00.3%2026-09-24
CVE-2026-97325ruoyi-vue-pro OAuth2 client redirect handling open redirect5.3CNA v4.00.3%2026-09-24
CVE-2026-97324ruoyi-vue-pro demo-order payment callback handler improper authorization6.9CNA v4.00.3%2026-09-24
CVE-2026-97323ruoyi-vue-pro file upload service path traversal5.3CNA v4.00.4%2026-09-24
CVE-2026-97322YunaiV/zhijiantianya ruoyi-vue-pro file upload FileController.java cross-site scripting5.3CNA v4.00.3%2026-09-24
CVE-2026-97321ruoyi-vue-pro GoView data endpoint SQL injection5.3CNA v4.00.2%2026-09-24
CVE-2026-97320ruoyi-vue-pro AI Knowledge module server-side request forgery5.3CNA v4.00.2%2026-09-24
CVE-2026-97311Red Hat Keycloak Admin REST API role-groups endpoint information disclosure4.3CNA v3.10.2%2026-09-24
CVE-2026-97233volotat Anagnorisis Media Filename PlaylistManager.js html cross-site scripting5.1CNA v4.00.2%2026-09-24
CVE-2026-97232volotat Anagnorisis page.html start_streaming path traversal5.3CNA v4.00.3%2026-09-24
CVE-2026-97231volotat Anagnorisis Socket.IO Connect app.py missing authentication6.9CNA v4.00.4%2026-09-24
CVE-2026-97230IO::Socket::SSL::SelfCertificate generate_certificate function embedded malicious code9.8CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-97226DbGate files-style endpoint files.js fs.readFile path traversal5.3CNA v4.00.3%2026-09-24
CVE-2026-97225DbGate JSON Runner runners.js code injection5.3CNA v4.00.2%2026-09-24Fix
CVE-2026-97224Excalidraw Imported file restore.ts cross-site scripting5.3CNA v4.00.3%2026-09-24
CVE-2026-97185Red Hat Enterprise Linux 8 gimp: Gimp: Out-of-bounds write in gimpressionist plugin7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-97182halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization6.9CNA v4.00.4%2026-09-24
CVE-2026-97181EzGlobal｜GPM LIGHT sensitive data exposure6.9CNA v4.00.3%2026-09-24Fix
CVE-2026-97179O2OA Cipher Connection CipherConnectionAction.java list information disclosure5.3CNA v4.00.3%2026-09-24
CVE-2026-97177Keycloak Admin REST API user update missing authorization6.6CNA v3.10.2%2026-09-24
CVE-2026-97176Keycloak cookie authenticator vulnerability4.2CNA v3.10.2%2026-09-24
CVE-2026-97155Fabasoft Folio Client origin validation error6.5CNA v3.10.1%2026-09-24Fix
CVE-2026-97152Nanomsg heap-based buffer overflow8.6CNA v4.00.3%2026-09-24Fix
CVE-2026-97151mwilliamson mammoth.js prototype pollution8.4CNA v4.00.4%2026-09-24Fix
CVE-2026-97149OpenStack Swift incomplete denylist5.3CNA v4.00.2%2026-09-24Fix
CVE-2026-97062Aureus ERP stored XSS via SVG file upload5.1CNA v4.00.2%2026-09-24
CVE-2026-97061Black Candy information disclosure via Playlist Search5.3CNA v4.00.2%2026-09-24
CVE-2026-97059DCMTK Heap Over-read via NumberOfFrames8.8CNA v4.00.3%2026-09-24
CVE-2026-97057redis-parser denial of service via Invalid Array Length8.7CNA v4.00.4%2026-09-24
CVE-2026-97056SigNoz insufficient session expiration authentication bypass7.6CNA v4.00.4%2026-09-24Fix
CVE-2026-97055SigNoz authentication bypass via Empty JWT Secret9.2CNA v4.00.4%2026-09-24Fix
CVE-2026-96898yhx070424 ShopXO Ueditor upload ueditor.php path traversal6.9CNA v4.00.4%2026-09-24
CVE-2026-96892Edimax BR-6428nC goform websRedirect redirect5.3CNA v4.00.3%2026-09-24
CVE-2026-96891D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write9.3CNA v4.00.7%2026-09-24
CVE-2026-96884MantisZip Preview MainWindow.UI.cs Path.Combine path traversal5.3CNA v4.00.3%2026-09-24
CVE-2026-96883Type confusion in AWS pgcollection allows remote code execution8.7CNA v4.00.7%2026-09-24Fix
CVE-2026-96882TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization6.9CNA v4.00.3%2026-09-24
CVE-2026-96881TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization6.9CNA v4.00.3%2026-09-24
CVE-2026-96880TaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization6.9CNA v4.00.3%2026-09-24
CVE-2026-96873The Wikimedia Foundation Mediawiki reflected XSS in CirrusSearch debug explain output5.5CNA v4.00.3%2026-09-24Exploit code
CVE-2026-96810huanzi-qch base-admin Add User CommonController.java save cross-site scripting5.1CNA v4.00.2%2026-09-24
CVE-2026-96803java110 MicroCommunity fallBack API Endpoint SQL injection6.9CNA v4.00.3%2026-09-24
CVE-2026-96777Forma LMS Multi-User-Selector AJAX endpoint getData getDataTask SQL injection5.3CNA v4.00.2%2026-09-24
CVE-2026-96774SPON Communications IP Network Audio Device XC-9603 information disclosure6.9CNA v4.00.3%2026-09-24
CVE-2026-96773Intelliants Subrion CMS Login page login.php authorize redirect5.3CNA v4.00.3%2026-09-24
CVE-2026-96772Intelliants Subrion CMS actions.json assign-owner information disclosure6.9CNA v4.00.3%2026-09-24
CVE-2026-96764kvcache-ai Mooncake Regular Expression GetReplicaListByRegex allocation of resources5.3CNA v4.00.3%2026-09-24
CVE-2026-96763kvcache-ai Mooncake MountSegment Request Processing segment.cpp access control5.3CNA v4.00.2%2026-09-24
CVE-2026-96750Shell script injection via server-supplied database name in Open MongoDB shell7.3CNA v4.00.2%2026-09-24Fix
CVE-2026-96749MongoDB Python Driver heap out-of-bounds write via signed size overflow in BSON document encoding7.5CNA v4.00.1%2026-09-24Fix
CVE-2026-96748MongoDB Python Driver PyMongo: PYTHON-5986 host injection in PyMongo connection string parsing8.3CNA v4.00.3%2026-09-24Fix
CVE-2026-96747MongoDB Python Driver server-side request forgery5.3CNA v4.00.1%2026-09-24Fix
CVE-2026-96746MongoDB C Driver heap buffer overflow via mid-scan command list growth in client topology monitoring8.3CNA v4.00.4%2026-09-24Fix
CVE-2026-96745PHP object injection via unsuppressible __pclass class inference in command monitoring events6.3CNA v4.00.3%2026-09-24Fix
CVE-2026-96744Laravel MongoDB (PHP) improper neutralization7.1CNA v4.00.3%2026-09-24Fix
CVE-2026-96515Command injection vulnerability in Netlink ICT HG323RW Router8.6CNA v4.00.3%2026-09-24Fix
CVE-2026-95985Kiro IDE allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces8.6CNA v4.00.1%2026-09-24Fix
CVE-2026-95699MrSteam iSteamX improper isolation or compartmentalization8.4CNA v4.00.3%2026-09-24Fix
CVE-2026-95521Red Hat Enterprise Linux 10 rpm: Rpm: Shell command injection7.8CNA v3.10.6%2026-09-24
CVE-2026-95519Red Hat Enterprise Linux 10 rpm: Code execution7.8CNA v3.10.1%2026-09-24
CVE-2026-94613authentik SAML message handling denial of service7.5CNA v3.10.6%2026-09-24Fix
CVE-2026-94612authentik SAML source authentication bypass7.4CNA v3.10.3%2026-09-24Fix
CVE-2026-94611authentik API serializers information disclosure8.1CNA v3.10.3%2026-09-24Fix
CVE-2026-94609authentik group hierarchy privilege escalation8.8CNA v3.10.5%2026-09-24Exploit codeFix
CVE-2026-94606authentik email authenticator enrollment authentication bypass8.9CNA v3.10.5%2026-09-24Fix
CVE-2026-94416Red Hat Ansible Automation Platform aap-gateway: Aap-gateway: Authorization bypass6.8CNA v3.10.5%2026-09-24Fix
CVE-2026-94281Out-of-bounds read in libXi's XListInputDevices class parsing6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-93830Linux kernel stmmac XGMAC2 Ethernet driver denial of service7.5CNA v3.10.5%2026-09-24Fix
CVE-2026-93829Linux kernel cifs client thread creation race condition–0.2%2026-09-24Fix
CVE-2026-93828Linux kernel exFAT upcase table loading vulnerability–0.2%2026-09-24Fix
CVE-2026-93827Linux kernel virtio-fs queue setup double free8.4CNA v3.10.1%2026-09-24Fix
CVE-2026-93826Linux kernel hidpp HID driver use-after-free7.5CNA v3.10.2%2026-09-24Fix
CVE-2026-93825Linux kernel SPI device match data lookup null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93824Linux kernel TLS sockmap integration vulnerability–0.2%2026-09-24Fix
CVE-2026-93823Linux kernel amdkfd DMA-BUF info ioctl vulnerability–0.2%2026-09-24Fix
CVE-2026-93822Linux kernel iproc use-after-free–0.2%2026-09-24Fix
CVE-2026-93821Linux kernel Altera PCIe controller driver race condition–0.2%2026-09-24Fix
CVE-2026-93820Linux kernel Rockchip PCIe controller driver race condition–0.2%2026-09-24Fix
CVE-2026-93819Linux kernel MediaTek PCIe controller driver race condition–0.2%2026-09-24Fix
CVE-2026-93818Linux kernel PLDA PCIe controller driver race condition–0.2%2026-09-24Fix
CVE-2026-93817Linux kernel perf address filter ranges vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93816Linux kernel f2fs inline dentry conversion vulnerability7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-93815Linux kernel au1000 Ethernet driver vulnerability–0.2%2026-09-24Fix
CVE-2026-93814Linux kernel SPI controller suspend handling denial of service–0.2%2026-09-24Fix
CVE-2026-93813Linux kernel Btrfs tree checker vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93812Linux kernel ksmbd security descriptor encoding memory leak–0.2%2026-09-24Fix
CVE-2026-93811Linux kernel ksmbd ACL handling memory leak–0.2%2026-09-24Fix
CVE-2026-93810Linux kernel cachefiles tmpfile creation vulnerability7.0CNA v3.10.1%2026-09-24Fix
CVE-2026-93809Linux kernel amdgpu driver vulnerability–0.2%2026-09-24Fix
CVE-2026-93808Linux kernel caiaq USB audio driver vulnerability–0.2%2026-09-24Fix
CVE-2026-93807Linux kernel rsi Wi-Fi driver vulnerability–0.2%2026-09-24Fix
CVE-2026-93806Linux kernel cfg80211 association handling vulnerability8.8CNA v3.10.3%2026-09-24Fix
CVE-2026-93805Linux kernel MLME frame handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93804Linux kernel IBSS disconnect handling race condition–0.2%2026-09-24Fix
CVE-2026-93803Linux kernel WEP key index parsing vulnerability–0.2%2026-09-24Fix
CVE-2026-93802Linux kernel beacon frame handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93801Linux kernel SMB open info data handling vulnerability7.0CNA v3.10.1%2026-09-24Fix
CVE-2026-93800Linux kernel relocation root handling use-after-free–0.2%2026-09-24Fix
CVE-2026-93799Linux kernel BA window status notification handling vulnerability8.8CNA v3.10.2%2026-09-24Fix
CVE-2026-93798Linux kernel relocation root cleanup vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93797In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th byte, check the length is big enough.–0.2%2026-09-24Fix
CVE-2026-93796Linux kernel PCIe RX teardown vulnerability7.0CNA v3.10.1%2026-09-24Fix
CVE-2026-93795Linux kernel block cgroup creation memory leak–0.2%2026-09-24Fix
CVE-2026-93794Linux kernel file hole punching vulnerability–0.2%2026-09-24Fix
CVE-2026-93793Linux kernel TX command response parsing vulnerability8.8CNA v3.10.2%2026-09-24Fix
CVE-2026-93792Linux kernel WoWLAN packet handling integer underflow–0.2%2026-09-24Fix
CVE-2026-93791In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware ba_notif->tid is a firmware-controlled u8 that is used directly as an array index into tid_data[] without any validation. Add a bounds check against IWL_MAX_TID_C–0.2%2026-09-24Fix
CVE-2026-93790In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif mvmsta->tid_data was indexed by the TFD loop counter 'i' instead of the actual TID value 'tid'. This writes lq_color into a random tid_data slot unrelated to the BA8.8CNA v3.10.2%2026-09-24Fix
CVE-2026-93789Linux kernel firmware TLV parser integer underflow–0.2%2026-09-24Fix
CVE-2026-93788Linux kernel ACPI WGDS table parsing vulnerability–0.2%2026-09-24Fix
CVE-2026-93787Linux kernel SMB1 directory listing parser vulnerability8.1CNA v3.10.3%2026-09-24Fix
CVE-2026-93786Linux kernel POSIX ACL inheritance vulnerability8.1CNA v3.10.3%2026-09-24Fix
CVE-2026-93785Linux kernel cifs idmap key handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93784Linux kernel cfg80211 crash–0.2%2026-09-24Fix
CVE-2026-93783Linux kernel RFCOMM frame parsing out-of-bounds read–0.2%2026-09-24Fix
CVE-2026-93782Linux kernel vhost-scsi memory table handling vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93781Linux kernel SCSI error handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93662Events Manager - Subscriber+ Unpublished Event and Location Disclosure via owner parameter4.3CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-93661Events Manager ticket update endpoint insecure direct object reference2.7CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-93545Out-of-bounds read in libXi's XListInputDevices6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-93544Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-93543Out-of-bounds read in libXi's XI2 class parser7.4CNA v3.10.2%2026-09-24Fix
CVE-2026-93542Out-of-bounds read in libXi's XI2 class parsing via size_classes and copy_classes6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-93541Out-of-bounds read in libXi's XQueryDeviceState6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-93425Dokploy: Authenticated OS command injection in patch.readRepoDirectories leads to RCE as root9.9CNA v3.10.6%2026-09-24Fix
CVE-2026-93405Mailspring: Stored XSS in attachment quick preview (unsanitized Markdown/DOCX/XLSX conversion)6.1CNA v3.10.2%2026-09-24Fix
CVE-2026-93354Gimanh taskview-community Taskview Community missing authentication8.5CNA v4.00.3%2026-09-24Fix
CVE-2026-93353copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers2.3CNA v4.00.3%2026-09-24
CVE-2026-93291Improper certificate validation in Eufy Omni C209.3CNA v4.00.2%2026-09-24Fix
CVE-2026-93290Eufy Omni C20 hard-coded credentials6.8CNA v4.00.1%2026-09-24Fix
CVE-2026-93289OS command injection in Eufy Omni C20, Omni X10 Pro9.0CNA v4.00.7%2026-09-24Fix
CVE-2026-93288Linux kernel netfilter logging vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93287Linux kernel I2C SMBus core vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93286Linux kernel AppleTalk AARP null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93285Linux kernel f2fs garbage collection thread race condition–0.2%2026-09-24Fix
CVE-2026-93284Linux kernel DRM pagemap migration vulnerability8.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93283Linux kernel i3c device registration vulnerability–0.2%2026-09-24Fix
CVE-2026-93282Linux kernel ksmbd DACL permission check vulnerability8.1CNA v3.10.3%2026-09-24Fix
CVE-2026-93281Linux kernel rtw89 Wi-Fi driver vulnerability–0.2%2026-09-24Fix
CVE-2026-93280Linux kernel Greybus audio driver vulnerability8.8CNA v3.10.3%2026-09-24Fix
CVE-2026-93279Linux kernel Octeon Ethernet driver use-after-free–0.2%2026-09-24Fix
CVE-2026-93278Linux kernel octeon NAPI shutdown use-after-free–0.2%2026-09-24Fix
CVE-2026-93277Linux kernel bnxt_re resource destruction vulnerability7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93276Linux kernel rcar-gen3 USB2 PHY VBUS regulator cleanup vulnerability–0.2%2026-09-24Fix
CVE-2026-93275Linux kernel Intel PT event throttling vulnerability–0.2%2026-09-24Fix
CVE-2026-93274Linux kernel bcm2835 GPIO chip registration null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93273Linux kernel tps6594 regulator device node handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93272Linux kernel qcom_wcnss power domain handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93271Linux kernel ath11k Wi-Fi driver rate handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93270Linux kernel BPF interpreter denial of service–0.2%2026-09-24Fix
CVE-2026-93269Linux kernel ext4 extent migration deadlock–0.2%2026-09-24Fix
CVE-2026-93268Linux kernel ext4 inode size expansion during mount deadlock–0.2%2026-09-24Fix
CVE-2026-93267Linux kernel RDMA core use-after-free–0.2%2026-09-24Fix
CVE-2026-93266Linux kernel arm64 RSI attestation token init vulnerability–0.2%2026-09-24Fix
CVE-2026-93265Linux kernel tc9563 Ethernet MAC endpoint parsing vulnerability7.7CNA v3.10.1%2026-09-24Fix
CVE-2026-93264Linux kernel EFA memory region registration vulnerability–0.2%2026-09-24Fix
CVE-2026-93263Linux kernel eswin clock driver null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93262Linux kernel md raid5-ppl use-after-free7.8CNA v3.10.1%2026-09-24Fix
CVE-2026-93261Linux kernel lockdep class registration null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93260Linux kernel powerpc xive IPI initialization use-after-free7.4CNA v3.10.1%2026-09-24Fix
CVE-2026-93259Linux kernel powerpc PCREL interrupt handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93258Linux kernel ocfs2 inode validation vulnerability–0.2%2026-09-24Fix
CVE-2026-93257Linux kernel block layer data integrity checks vulnerability–0.2%2026-09-24Fix
CVE-2026-93256Linux kernel arm64 hibernation resume vulnerability–0.2%2026-09-24Fix
CVE-2026-93255Linux kernel btrfs extent buffer locking vulnerability–0.2%2026-09-24Fix
CVE-2026-93254Linux kernel arm64 kernel exit IRQ handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93253Linux kernel CPU isolation cpumask memory vulnerability–0.2%2026-09-24Fix
CVE-2026-93252Linux kernel OCFS2 ACL initialization deadlock–0.2%2026-09-24Fix
CVE-2026-93251Linux kernel ACPI physical device lookup use-after-free–0.2%2026-09-24Fix
CVE-2026-93250Linux kernel VXLAN MDB flush use-after-free7.8CNA v3.10.2%2026-09-24Fix
CVE-2026-93249Linux kernel Amlogic SPISG clock driver improper initialization–0.2%2026-09-24Fix
CVE-2026-93248Linux kernel Xe GPU job timeout handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93247Linux kernel Bluetooth discovery UUID list race condition–0.2%2026-09-24Fix
CVE-2026-93246Linux kernel octeontx2-af MSI-X irq affinity out-of-bounds read–0.2%2026-09-24Fix
CVE-2026-93245Linux kernel AppArmor policy improper initialization–0.2%2026-09-24Fix
CVE-2026-93244Linux kernel simpledrm stride validation vulnerability–0.2%2026-09-24Fix
CVE-2026-93243Linux kernel secretmem memory accounting vulnerability–0.2%2026-09-24Fix
CVE-2026-93242Linux kernel qla2xxx response queue vulnerability–0.2%2026-09-24Fix
CVE-2026-93241Linux kernel memory cgroup OOM killer vulnerability–0.2%2026-09-24Fix
CVE-2026-93240Linux kernel memory cgroup v1 soft limit vulnerability–0.2%2026-09-24Fix
CVE-2026-93239Linux kernel arm64 page table walk vulnerability–0.2%2026-09-24Fix
CVE-2026-93238Linux kernel vfio-ap queue reset improper initialization–0.2%2026-09-24Fix
CVE-2026-93237Linux kernel LoongArch vmemmap mapping vulnerability7.8CNA v3.10.2%2026-09-24Fix
CVE-2026-93236Linux kernel meson vdec driver null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93235Linux kernel post-EOF file extension vulnerability–0.2%2026-09-24Fix
CVE-2026-93234Linux kernel GUD TV mode name parser out-of-bounds read–0.2%2026-09-24Fix
CVE-2026-93233Linux kernel Nouveau device-private memory allocator integer underflow–0.2%2026-09-24Fix
CVE-2026-93232Linux kernel bootmem HugeTLB HVO initialization denial of service–0.2%2026-09-24Fix
CVE-2026-93231Linux kernel lockd vulnerability–0.2%2026-09-24Fix
CVE-2026-93230Linux kernel bootmem HugeTLB improper initialization–0.2%2026-09-24Fix
CVE-2026-93229Linux kernel NFS RPC status reporting vulnerability7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-93228Linux kernel RDMA Write and Reply chunk decoding vulnerability9.1CNA v3.10.5%2026-09-24Fix
CVE-2026-93227Linux kernel deferred page initialization vulnerability–0.2%2026-09-24Fix
CVE-2026-93226Linux kernel IPv6 route exception dump race condition–0.2%2026-09-24Fix
CVE-2026-93225Linux kernel i.MX8MQ USB PHY vulnerability7.4CNA v3.10.1%2026-09-24Fix
CVE-2026-93224Linux kernel RDMA transport accept handling vulnerability8.1CNA v3.10.5%2026-09-24Fix
CVE-2026-93223Linux kernel Tegra VIP driver vulnerability–0.2%2026-09-24Fix
CVE-2026-93222Linux kernel signal delivery vulnerability–0.2%2026-09-24Fix
CVE-2026-93221Linux kernel nfsd vulnerability8.1CNA v3.10.4%2026-09-24Fix
CVE-2026-93220Linux kernel sched_ext scheduler class deadlock–0.2%2026-09-24Fix
CVE-2026-93219Linux kernel sun4i timer driver denial of service–0.2%2026-09-24Fix
CVE-2026-93218Linux kernel madvise huge page free denial of service–0.2%2026-09-24Fix
CVE-2026-93217Linux kernel madvise cold and pageout walks denial of service–0.2%2026-09-24Fix
CVE-2026-93216Linux kernel page_owner memcg reporting race condition–0.2%2026-09-24Fix
CVE-2026-93215Linux kernel CDX device sysfs attributes double free–0.2%2026-09-24Fix
CVE-2026-93214Linux kernel USB gadget TCM target deadlock–0.2%2026-09-24Fix
CVE-2026-93213Linux kernel of_alias_scan stem parser out-of-bounds read–0.2%2026-09-24Fix
CVE-2026-93212Linux kernel NFS filecache vulnerability–0.2%2026-09-24Fix
CVE-2026-93211Linux kernel nfsd DRC shrinker vulnerability–0.2%2026-09-24Fix
CVE-2026-93210Linux kernel SMB client DFS cache null pointer dereference–0.2%2026-09-24Fix
CVE-2026-93209Linux kernel HCI request handling vulnerability–0.2%2026-09-24Fix
CVE-2026-93208Linux kernel KASAN quarantine race condition–0.2%2026-09-24Fix
CVE-2026-93207Linux kernel GSS credential decoding vulnerability9.8CNA v3.10.5%2026-09-24Fix
CVE-2026-93206Linux kernel PCI config space read vulnerability–0.2%2026-09-24Fix
CVE-2026-93205Linux kernel arm-smmu-v3 IOMMU driver use-after-free–0.2%2026-09-24Fix
CVE-2026-92905Zoho ManageEngine EventLog Analyzer denial of service5.3CNA v3.11.0%2026-09-24Fix
CVE-2026-92680Araxis Merge insufficiently protected credentials6.8CNA v4.00.2%2026-09-24Exploit codeFix
CVE-2026-91187Improper verification of cryptographic signature in dashbit nimble_zta Cloudflare strategy9.3CNA v4.00.3%2026-09-24Fix
CVE-2026-91161OpenWA: VIEWER API keys can read WhatsApp group invite codes6.4CNA v3.10.2%2026-09-24Fix
CVE-2026-91160OpenWA: A read-only API key can receive a session pairing QR over the WebSocket event stream8.2CNA v3.10.3%2026-09-24Fix
CVE-2026-91134Discourse: Block post iframes whose encoded userinfo bypasses the allowed_iframes allowlist5.4CNA v3.10.2%2026-09-24Fix
CVE-2026-91133Discourse: Escape LIKE metacharacters in upload paths to prevent disclosure6.5CNA v3.10.3%2026-09-24Fix
CVE-2026-91132Discourse: Wildcard iframe origin allowlist bypass via authority separators4.3CNA v3.10.1%2026-09-24Fix
CVE-2026-91123Discourse iframe source validation path traversal7.2CNA v3.10.3%2026-09-24Fix
CVE-2026-91122Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users8.7CNA v3.10.3%2026-09-24Fix
CVE-2026-91121Discourse: Chat upload filenames rendered as raw HTML in excerpts5.0CNA v3.10.3%2026-09-24Fix
CVE-2026-91120Discourse: Stored HTML injection in video notification emails5.4CNA v3.10.2%2026-09-24Fix
CVE-2026-91119Discourse: Encode action_code_who in mention URLs6.4CNA v3.10.2%2026-09-24Fix
CVE-2026-90959Red Hat pulpcore content upload API path traversal8.1CNA v3.10.3%2026-09-24Fix
CVE-2026-90481PortSwigger Burp Suite DAST authentication bypass9.2CNA v4.00.3%2026-09-24Fix
CVE-2026-89325Rapid7 Insight Agent InsightVM assessment content uncontrolled search path7.8CNA v3.10.1%2026-09-24
CVE-2026-89005WPeMatico RSS Feed Fetcher WordPress plugin Contributor+ stored XSS via Word to Category6.8CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-89004WPeMatico RSS Feed Fetcher WordPress plugin Campaign Configuration and Log disclosure via IDOR2.7CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-89002WPeMatico RSS Feed Fetcher WordPress plugin Contributor+ stored XSS via Campaign Item Preview6.8CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-88956Botslab G980H Dashcams missing authentication for critical function7.0CNA v4.00.2%2026-09-24
CVE-2026-88916Admin Access Bypass via Header Fallback in TÜBİTAK ULAKBİM's UlakPDF6.8CNA v3.10.2%2026-09-24
CVE-2026-88907SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDF7.4CNA v3.10.3%2026-09-24
CVE-2026-88847MasterStudy LMS WordPress plugin Subscriber+ Lesson Completion Record creation4.3CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-88846MasterStudy LMS registration flow missing authorization5.3CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-88845MasterStudy LMS demo import missing authorization4.3CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-88843MasterStudy LMS Elementor Courses Categories widget local file inclusion7.2CISA ADP v3.10.4%2026-09-24Fix
CVE-2026-88761Botslab G980H Dashcams use of weak credentials6.0CNA v4.00.2%2026-09-24
CVE-2026-88390jslGetTokenValueAsString in Espruino An out-of-bounds write7.7CISA ADP v3.10.2%2026-09-24
CVE-2026-88388Espruino JavaScript error stack trace handling stack buffer overflow7.5CISA ADP v3.10.3%2026-09-24
CVE-2026-88387LibRaw TIFF IFD parser incorrect numeric conversion5.5CISA ADP v3.10.1%2026-09-24Fix
CVE-2026-88386libsndfile WAV fmt chunk parser denial of service5.5CISA ADP v3.10.1%2026-09-24Fix
CVE-2026-88385Mini-XML XML parser memory leak6.5CISA ADP v3.10.3%2026-09-24Fix
CVE-2026-88384OpenEXR attribute parser null pointer dereference5.5CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-88383libical iCalendar parameter parser denial of service6.2CISA ADP v3.10.1%2026-09-24Fix
CVE-2026-88382hiredis RESP protocol parser vulnerability7.5CISA ADP v3.10.4%2026-09-24
CVE-2026-88378QuickJS JS_ReadFunctionTag out-of-bounds write9.8CISA ADP v3.10.4%2026-09-24
CVE-2026-88377Bento4 avcC and hvcC atom parser integer underflow6.2CISA ADP v3.10.1%2026-09-24
CVE-2026-88376Bento4 avcC and hvcC atom parser integer underflow7.5CISA ADP v3.10.4%2026-09-24
CVE-2026-88373libde265 NAL unit parser null pointer dereference7.5CISA ADP v3.10.3%2026-09-24Fix
CVE-2026-88372libsndfile MAT4 file parser integer overflow7.5CISA ADP v3.10.4%2026-09-24
CVE-2026-88371ZBar Code 128 decoder denial of service5.5CISA ADP v3.10.1%2026-09-24Fix
CVE-2026-88370libconfini INI cache buffer handling out-of-bounds write5.3CISA ADP v3.10.3%2026-09-24
CVE-2026-88369zserge jsmn jsondump example tool out-of-bounds read7.3CISA ADP v3.10.2%2026-09-24
CVE-2026-88368NanoSVG SVG rasterizer incorrect numeric conversion7.5CISA ADP v3.10.4%2026-09-24
CVE-2026-88367NanoSVG SVG stroke rasterizer incorrect numeric conversion6.5CISA ADP v3.10.2%2026-09-24
CVE-2026-88366NanoSVG SVG arc path parser incorrect numeric conversion7.5CISA ADP v3.10.3%2026-09-24
CVE-2026-88365minimp3 APEv2 tag size parsing integer overflow9.8CISA ADP v3.10.4%2026-09-24
CVE-2026-88362MuJS array index conversion incorrect numeric conversion7.5CISA ADP v3.10.3%2026-09-24Fix
CVE-2026-88361SumatraPDF PDF page label parser integer overflow7.5CISA ADP v3.10.4%2026-09-24
CVE-2026-88360libvips PFM image loader denial of service7.5CISA ADP v3.10.3%2026-09-24
CVE-2026-88359libfyaml YAML block scalar formatting stack exhaustion6.5CISA ADP v3.10.2%2026-09-24
CVE-2026-88358simdjson JSON parser out-of-bounds read6.5CISA ADP v3.10.3%2026-09-24
CVE-2026-88357nDPI DNS dissector denial of service7.5CISA ADP v3.10.6%2026-09-24
CVE-2026-88355tinyexpr commit An incorrect buffer size calculation7.5CISA ADP v3.10.3%2026-09-24
CVE-2026-88351MPack Node API in MPack An integer overflow9.8CISA ADP v3.10.3%2026-09-24
CVE-2026-87739PaperCut MF/NG: User permissions are not evaluated on report generation6.9CNA v4.00.4%2026-09-24Fix
CVE-2026-87722Gerrit regex search query predicates resource exhaustion8.7CNA v4.00.3%2026-09-24Fix
CVE-2026-87721Denial of service via Exponential Backtracking in ANTLR Search Query parser in Gerrit Code Review8.7CNA v4.00.3%2026-09-24Fix
CVE-2026-87720Gerrit project name normalization incorrect authorization7.6CNA v4.00.3%2026-09-24Fix
CVE-2026-87118Botslab G980H Dashcams out-of-bounds write6.9CNA v4.00.2%2026-09-24
CVE-2026-86860Unauthenticated sensitive data disclosure in ServiceNow AI Platform9.3CNA v4.00.3%2026-09-24Fix