2026

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to creat

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated a

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator wi

An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated

An integer underflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker t

A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privile

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-priv

A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenti

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allo

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authen

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenti

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an aut

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an a

A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowin

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operatio

The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries da

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alt

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range pa

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The dr

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A use

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in p

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_v

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as _

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in c

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NU

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down Sy

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl_em

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maar_res_walk(

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntr_map KASA

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid inf

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic Fix a runtime assert

In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime asser

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The

In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Incr