CVE-2026-53386

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

UBUNTU-CVE-2026-53403

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in info-modelist. vartodisplay relies on this and treats a failed fbmatchmode as...

UBUNTU-CVE-2026-63818

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fsrecoverorphaninodes trusts the orphan block entrycount when replaying orphan inodes from the checkpoint pack. A corrupted entrycount larger than F2FSORPHANSPERBLOCK makes the recovery...

CVE-2026-16228

creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...

CVE-2026-53380

creationtimestamp| type| source ---|---|--- 2026-07-19 11:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyq26v7ju2g 2026-07-20 03:01:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116950071771596942...

OESA-2026-3011 mod_auth_openidc security update

This module enables an Apache 2.x web server to operate as an OpenID Connect Relying PartyRP to an OpenID Connect ProviderOP. Security Fixes: An out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of modauthopenidc. oidcstatecookiesparsetoken src/state.c scans a...

OESA-2026-3000 xdg-desktop-portal security update

xdg-desktop-portal works by exposing a series of D-Bus interfaces known as portals under a well-known name org.freedesktop.portal.Desktop and object path /org/freedesktop/portal/desktop. The portal interfaces include APIs for file access, opening URIs, printing and others. Security Fixes:...

DEBIAN-CVE-2026-53367

In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited vector computed by avcauditrequired rather than recomputing based on the currently requested permissions and distinguishing the...

CVE-2026-16208

creationtimestamp| type| source ---|---|--- 2026-07-19 07:50:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyc74zbzb2j...

MGASA-2026-0267 Updated perl-CSS-Minifier-XS package fixes a security vulnerability

The updated package fixes a security vulnerability: CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. CVE-2026-13593...

MGASA-2026-0269 Updated perl-Mojolicious package fixes a security vulnerability

The updated package fixes a security vulnerability: Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. CVE-2026-14803...

Updated nmap packages fix a security vulnerability

The updated packages fix a security vulnerability: Integer Underflow in IPv6 Extension Header Parsing. CVE-2026-58058...

MGASA-2026-0272 Updated perl-String-Util package fixes a security vulnerability

The updated package fixes a security vulnerability: String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. CVE-2026-14895...

EUVD-2026-45428

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument projectid leads to authorization bypass. It is...

CVE-2026-16215 geex-arts django-jet OAuth Credential Revoke authorization

A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released ...

CVE-2026-16205

creationtimestamp| type| source ---|---|--- 2026-07-19 04:11:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxvxeiucc2b...

CVE-2026-16199

creationtimestamp| type| source ---|---|--- 2026-07-19 03:50:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxurqrgbb2x...

CVE-2026-16211

CVE-2026-16211 affects Allegro Ralph, specifically the Hostname Allocation Handler’s function AssetLastHostname.increment_hostname in the file src/ralph/assets/models/assets.py . The vulnerability arises from a manipulation of the argument counter that can cause a race condition . Documents indic...

CVE-2026-53994

creationtimestamp| type| source ---|---|--- 2026-07-19 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944052588841641 2026-07-19 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxmy73t342g 2026-07-19 06:00:37+00:00| seen|...

PT-2026-61343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc module where in-place decryption of a DATA packet transmitted locally via the splice function can lead to pagecache corruption. This occurs due to packet...