2026

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to loca

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation o

In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This

In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This co

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lea

In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege

In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalatio

In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escala

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead

In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to l

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could l

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to loca

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to loca

In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local

On affected platforms running Arista EOS with password authentication configured, a specially crafted password can creat

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local informati

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local e

In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the c

In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclo

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalat

In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This cou

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthe

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts neg

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store()

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQuery

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUr

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through

Sakai is a Collaboration and Learning Environment (CLE). From 23.0 until 23.5 and 25.3, the DELETE /api/users/{userId}/p

Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, Bugsink stores every set of custom tags supplied w

Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix

BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the component Trufflebox UI (tru

In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the JWT authentication token, full user object, and se

BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site Scripting (XSS) in the component Trufflebox UI (tru

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 1

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML cod

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authent

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted

IBM Security Verify Identity Access reverse proxy may allow parameters to be injected in requests to third party service

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mech