2026

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival r

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalan

In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error p

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_t

In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4_read_inline_di

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in r

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_input_addr(

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MA

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_bu

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggrega

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef->size covers the record's nam

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GRO

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and ser

Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Te

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate t

Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not

Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. T

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memor

Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed sessions,

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap b

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT readin

NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes)

In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a dou

On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted requ

On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured

On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated us

On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially

On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may

On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gN

On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sens

In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a pat

A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using

A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve t

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the aff

An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root pr

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by