1278232 matches found
CVE-2026-39113
creationtimestamp| type| source ---|---|--- 2026-08-21 16:00:04+00:00| seen| Telegram/6ucW9mtXNyvhM6wkgMEsY9neWTK-pNNF7XSM3aSxwwcjb4 2026-08-22 00:00:28+00:00| published-proof-of-concept| Telegram/6ucW9mtXNyvhM6wkgMEsY9neWTK-pNNF7XSM3aSxwwcjb4 2026-08-22 18:43:40+00:00| seen|...
ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in cryptography - Patched by Root
Root has patched CVE-2026-39892 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root
Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69247 CVE-2026-69247 in cryptography - Patched by Root
Root has patched CVE-2026-69247 in the cryptography package for Root:PyPI. Multiple fixed versions available...
DEBIAN-CVE-2026-62941
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check AllowInstanceCreation runs BEFORE the source instance's configuration is merged into the request. Dangerous configuration keys including...
DEBIAN-CVE-2026-62313
Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...
ROOT-OS-ALPINE-320-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root
Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root
Root has patched CVE-2026-8927 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root
Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-9079 CVE-2026-9079 in curl - Patched by Root
Root has patched CVE-2026-9079 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
CVE-2026-62940
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...
ROOT-APP-PYPI-CVE-2025-69223 CVE-2025-69223 in aiohttp - Patched by Root
Root has patched CVE-2025-69223 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54275 CVE-2026-54275 in aiohttp - Patched by Root
Root has patched CVE-2026-54275 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69244 CVE-2026-69244 in aiohttp - Patched by Root
Root has patched CVE-2026-69244 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69229 CVE-2025-69229 in aiohttp - Patched by Root
Root has patched CVE-2025-69229 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
CVE-2026-62867
Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided block.createoptions in storage volume configuration leads to argument injection in the constructed filesystem creation command line. This allows a project-scoped user to inject...
CVE-2026-55621
Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume t...
CVE-2026-48769
Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...
CVE-2026-48754
Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...