CVE-2026-74719

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

CVE-2026-74719 net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

CVE-2026-74719 net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

Linux Distros Unpatched Vulnerability : CVE-2026-74719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler store...

CVE-2026-19435

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

CVE-2026-19085

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...

CVE-2026-19435

The Duplicate Post WordPress plugin (versions before 1.5.6 ) contains a vulnerability where it fails to verify user capabilities before returning post data. This flaw allows authenticated users with delegated roles to access content, metadata, and passwords of posts they are not authorized to vie...

CVE-2026-19085 Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...

EUVD-2026-63822

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...

CVE-2026-19435 Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

CVE-2026-19085

The Duplicate Post WordPress plugin (versions before 1.5.6 ) is vulnerable to a content disclosure flaw. The plugin fails to verify if a user has permission to read a post's content before allowing them to duplicate it. Consequently, users with a delegated role can republish another user's passwo...

EUVD-2026-63823

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

CVE-2026-19085 Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...

CVE-2026-19435 Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

cowboy: Cowboy: Denial of Service via HTTP/1.1 duplicate header names

A flaw was found in Cowboy. An unauthenticated remote attacker can exploit this vulnerability by sending multiple HTTP/1.1 header lines with the same name. This bypasses the maxheaders limit, causing the connection process memory to grow uncontrollably. This can lead to memory exhaustion and a...

PT-2026-79307

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable...

PT-2026-79308

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

CVE-2026-75484 HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in mtrudel bandit allows an unauthenticated remote attacker to smuggle CR, LF, or NUL characters into application-visible request headers via HTTP/2. Bandit.HTTP2.Stream.readheaders/1 validates pseudo-header placement and...

EEF-CVE-2026-53424 Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

Summary Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it. Samly.Helper.decodeidpauthresp/3 in lib/samly/helper.ex calls esamlsp:validateassertion/2, whose default duplicate...

CVE-2026-53424

CVE-2026-53424 is an authentication bypass by capture-replay in dropbox/samly , a SAML service provider library for Elixir, affecting versions 0.3.0 and later . The root cause is that Samly.Helper.decode_idp_auth_resp/3 calls esaml_sp:validate_assertion/2, whose default duplicate detector is a no...