2026

Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBV

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepar

Verizon Cloud for Android (com.vcast.mediamanager) before 26.7.10 contains a path traversal vulnerability that allows co

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve

WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensi

Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import impl

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders

MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event Gene

MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user

SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints tha

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses W

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parall

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device re

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent m

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master->this sy

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplic

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain

In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting on reparenting inst

In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token li

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_dp: Release core resources Core r

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix OF node reference le

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Clear queue->active_job when v3d_fence_cre

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smack_msg_queu

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: Reject out-of-bound

In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to preven

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: bound device-supplied profile index k

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Return error for invalid

In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: Clamp mailbox output allocation to the pa

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt700-sdw: always drain jack work on remove

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_audmix: rework runtime PM handling in pro

In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drm_mm_init() with a valid allocatio

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in update_tg_cfs_runnable(

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncore_box ref/unref ord

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NPD issue on partial unmap of an e

In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageObjectInfo zero-strid

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in plane rese

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset

In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copy_map_val

In the Linux kernel, the following vulnerability has been resolved: bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hook