2026

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store a

PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion log

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - T

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controll

Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 -

Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - Th

Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint

Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform an

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in l

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit f

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The on

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment en

Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateCommen

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number b

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_l

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enable

In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: always stabilise against page table free

In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip special zero mappings pa

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_all

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don't warn when the mount is completed

In the Linux kernel, the following vulnerability has been resolved: ovl: don't warn when the mount is completed from an

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gact, act_police: range check the fa

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not re

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free stranded TX buffers on ring dei

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in module eve

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between update_event_fields and,

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: re-anchor capture URBs on resubmis

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migr

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: error out for >10000 active_mem_

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in WMM_param_handl

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_of: clear stuck empty-FIFO RX-timeout

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dma: Clear stale RX state on shutdown

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops fi

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wi

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mis

In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattr_verify() The

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to av

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdev_pass_v

In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKB

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnec