CVE-2026-78221

An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs...

UBUNTU-CVE-2026-86219

Authen::SASL::Perl::DIGESTMD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in serverstep. serverstart generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the nonce the client returns. serverstep...

CVE-2026-80255

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

MINI-9HW5-54F8-73HM

Bulletin has no description...

ROOT-OS-UBUNTU-2404-CVE-2025-38500 CVE-2025-38500 in linux - Patched by Root

Root has patched CVE-2025-38500 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-23148 CVE-2025-23148 in linux - Patched by Root

Root has patched CVE-2025-23148 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-39826 CVE-2025-39826 in linux - Patched by Root

Root has patched CVE-2025-39826 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-63807 CVE-2026-63807 in linux - Patched by Root

Root has patched CVE-2026-63807 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2018-1121 CVE-2018-1121 in linux - Patched by Root

Root has patched CVE-2018-1121 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-38345 CVE-2025-38345 in linux - Patched by Root

Root has patched CVE-2025-38345 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

MINI-3PRM-C8CH-W33J

Bulletin has no description...

GHSA-66R2-5GWJ-GXM2 SurrealDB: Writes in a PERMISSIONS clause bypass table permissions

A PERMISSIONS ... WHERE clause is evaluated with permission enforcement disabled, so it can't recurse into its own checks. But the clause could also contain data-modifying statements, and these ran with enforcement still off — so evaluating a permission check could write to tables the caller cann...

CVE-2026-79675 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

CVE-2026-80895

In the Linux kernel, the following vulnerability has been resolved: mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page mappings and then publishes the pointer into partition-ptvparray. Sever...

CVE-2026-80765

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

MINI-859F-PVHQ-W583

Bulletin has no description...

CVE-2026-79116 vulnerabilities

Vulnerabilities for packages: chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-80862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: fix usage of pagefragcache nvme uses pagefragcache to preallocate PDU for each preallocated request of block device. Block devices are created in...

CVE-2026-72803

creationtimestamp| type| source ---|---|--- 2026-09-03 23:31:29+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:00:27+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:35:10+00:00| published-proof-of-concept|...

CVE-2026-53671

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...