2026

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst

The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.17 does not perform a per-object capab

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attach_packed_

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscrib

The FunnelKit WordPress plugin before 3.15.0.6 does not validate a user-supplied path before deleting a file during a t

An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The cli

HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can inter

rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can

Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handli

During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The is

AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted stat

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachable to any process on the devic

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcac

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuratio

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes

In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in cas

In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking i

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error i

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv

In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() dur

In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback er

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_new_modelist to prevent null-ptr-dere

In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chai

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The com

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING

In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fails

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in

In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_fra

In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An u

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_r

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pd

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received withou

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the hu

In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping devi

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer t

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries

In the Linux kernel, the following vulnerability has been resolved: platform/x86: uniwill-laptop: Do not enable the cha

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in err

In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initializati

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error