CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: druid...

Exploit for CVE-2026-16723

CVE-2026-16723 Reproduction Project Overview This project...

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: pinot-fips, apache-pulsar-fips, druid...

CVE-2026-54591 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-54590 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-9548

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...

CVE-2026-9491

A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...

CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

CVE-2026-80724

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

CVE-2026-80723

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

CVE-2026-82123

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80719

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation size deltas in walk-nrpages while walking page tables without holding the lruvec lock. The resetbatchsize later folds...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80721

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

CVE-2026-80720

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bioset for iomapsplitioend iomapsplitioend can split bios that already come from iomapioendbioset and thus deadlock when the bioset is exhausted. Add a separate bioset to avoid this deadlock. Christian Braun...

CVE-2026-80715

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...