2026

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3

A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which al

Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certific

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, whi

zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress construct

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer)

Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with decl

vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2 processor loader that ignores t

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in pl

Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the /api/v1/text-to-speech/a

The MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and inc

The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 v

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all v

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based blind SQL Injection v

The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pri

The Zonify WordPress plugin before 1.0.5 does not perform any capability or authentication check before returning the s

The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a p

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that

The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL qu

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a

stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation s

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-know

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shel

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the `Add

libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks's HTTP re

Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries" function

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to me

Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` p

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffe

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_

In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-mism

In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering trusted_t

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin_current_labe

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null termina

In the Linux kernel, the following vulnerability has been resolved: mm, swap: don't free a hibernation slot that is in

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing f

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freein