2026

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious S

libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ss

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src

sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators t

sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the P

sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allo

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated

Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract ar

Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via C

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated at

Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administ

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs()

In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER

In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() P

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from land

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stop_this_cpu

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_w

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop_this_cpu

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when queryi

In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-f

In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode()

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successf

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds c

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe erro

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks A

In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup p

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regi

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent

In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock

In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in d

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_cohe

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks i

In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_inser

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped r

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being as

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is di

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL d

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() in

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mb

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init(

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTL

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on A

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup fa

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in f

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_i

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_g

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter