2026

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/un

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_faul

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writeback by addin

In the Linux kernel, the following vulnerability has been resolved: net: udp_tunnel: fix memory leak in udp_tunnel_nic_

In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in

In the Linux kernel, the following vulnerability has been resolved: hwmon: (adt7470) Fix busy-loop and I2C flooding in

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Only report alarms if driver is ready

In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Fix number of temperature reg

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix HA resume deadlock and hisi_sas d

In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch pat

In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk

In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk_drop_skb() for AF_XDP m

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for res

In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtm_tos in mpls_getroute() m

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a

Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key perm

A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application exe

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions p

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user to

OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack that can be exploited by a low-

On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-ban

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Dir

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers wi

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the U

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Window

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. From 0.9.1.3 un

A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility a

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, _sanitize_mustache_dict() in glances/ac

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape ex

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run() in glances/actions

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group_comments in sqlparse/engine/grouping.py

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 -

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vuln

HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read fro

Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute