2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lemonsoft W

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected de

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk

In the Linux kernel, the following vulnerability has been resolved: inet: frags: flush pending skbs in fqdir_pre_exit()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fs_recover_fsync_data()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix kernel BUG in ocfs2_find_victim_chain s

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context dur

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching

In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_un

In the Linux kernel, the following vulnerability has been resolved: Input: ti_am335x_tsc - fix off-by-one error in wire

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't log conflicting inode if it's a dir mo

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is un

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: only set free_cpus for online runqu

In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed wo

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet ind

In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_se

In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot rep

In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on c

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCA_PORTS compon

In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring arg

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating zero-sized extent in ex

In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GP

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit num_syncs to prevent oversized alloca

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbin

In the Linux kernel, the following vulnerability has been resolved: block: fix race between wbt_enable_default and IO s

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep()

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string paramet

In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_ino

In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4

In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to a

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadlock As Jiaming Z

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read boot_block when m

In the Linux kernel, the following vulnerability has been resolved: f2fs: invalidate dentry cache on failed whiteout cr

Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability,

@adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assi

Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v

Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Deni

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as wel

Y Soft SafeQ 6 renders the Workflow Connector password field in a way that allows an administrator with UI access to rev

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enume

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Use spinlock for context l

TinyOS versions up to and including 2.1.2 contain a global buffer overflow vulnerability in the printfUART formatted out

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to exe

Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenti

Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to

Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulnerability in process_up

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU