2026

Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend d

Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.

Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custo

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the inf

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the inf

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary s

Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configu

Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises th

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp

Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service d

IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in ma

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLogin

ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a spe

ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows u

bestzip builds the argument list for the system zip utility without separating options from operands. The destination ar

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/s

DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feat

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the S

SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SE

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mecha

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a neve

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions So

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpec

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol acc

In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mapp

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videom

In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections pan

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring pack

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from us

In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focal

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths ifor

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before free

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.len

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 wor

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size t

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block s_input when F54 queu

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors

In the Linux kernel, the following vulnerability has been resolved: Input: hynitron_cstxxx - validate touch count and f

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_a

In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfin