2026

In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path

In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot repo

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: check skb_clone() return value

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on modu

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete() on modul

In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write er

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same re

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_sfb: Replace direct dequeue call wit

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during remo

In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data_len/x_len

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in st

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when dea

In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist_field_name() o

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing hwmon devi

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfs_mkdir() fails

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and addin

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_int

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP reque

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perform

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfs_write_begin() e

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In or

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dirty

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_b

In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs sh

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem(

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bi

In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU gra

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read resp

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records thro

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox

A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to injec

Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. This allows an attacker

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may le

Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter (`assets/js

Stored Cross-site Scripting (CWE-79) in the client-side report rendering functions (renderPreview, renderEditor, renderA

A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows an auth

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated f

lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment vali

In egroupware version 26.0 and earlier, an authenticated administrator can achieve OS-level Remote Code Execution (RCE)

Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.640, for Webmin accounts that

Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax

Flask-Security-Too allows users to add security features to their Flask applicationa. Version 5.8.0's OAuth reauthentica

ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The cha