CVE-2026-43423

Concrete details show a Linux kernel issue in the usb gadget f_ncm driver: the ncm_set_alt function held a mutex to guard configfs races and invoked may_sleep in an atomic context, enabling a potential sleep path. The fix removes a struct net_device pointer from f_ncm_opts and introduces a new bo...

CVE-2026-32207

creationtimestamp| type| source ---|---|--- 2026-05-07 23:09:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdjiw4jr2w 2026-05-07 23:10:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcdlcfhct2o 2026-05-08 02:34:05+00:00| seen|...

org.webjars.npm:degenerator (=4.0.4), org.webjars.npm:pac-resolver (=6.0.2) +1 more potentially affected by CVE-2026-44000 via org.webjars.npm:vm2 (=3.9.19)

org.webjars.npm:vm2 MAVEN version =3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator =4.0.4 - org.webjars.npm:pac-resolver =6.0.2 - org.webjars.npm:rocket.chatapps-engine =1.35...

CVE-2026-41670

Admidio before 5.0.9 permits an attacker who knows a registered SP’s Entity ID to craft a SAML AuthnRequest with an attacker-controlled AssertionConsumerServiceURL, causing the IdP to send a signed SAML response containing user attributes to the attacker’s URL. The root cause is that ACS URL is t...

VulnCheck KEV: CVE-2026-44742

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

CVE-2025-31957

creationtimestamp| type| source ---|---|--- 2026-05-06 17:39:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7an7llqp2c...

CVE-2026-43268

creationtimestamp| type| source ---|---|--- 2026-05-06 14:14:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6v6mo5un2k 2026-07-02 06:17:58+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-43530

creationtimestamp| type| source ---|---|--- 2026-05-05 13:53:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4dkdqqod2k 2026-05-05 17:46:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4qjgobuf2t 2026-05-24 21:07:08+00:00| seen|...

@aiconnect/codelets-runner (>=0.1.0 <=0.2.0), @cairncms/api (>=1.0.0-beta.1 <=1.0.0-beta.4) +16 more potentially affected by CVE-2026-26332 via vm2 (>=3.0.0 <=3.10.5)

vm2 NPM version =3.0.0, =0.1.0, =1.0.0-beta.1, =3.0.46, =1.0.0-beta.1, =0.1.64, =0.1.61, =1.66.16, =1.66.16, =1.66.16, =1.66.16, =1.66.16, =1.66.16, =1.66.16, =1.72.1 and more Source cves: CVE-2026-26332 Source advisory: SNYK:JS-VM2-16419533...

BELL-CVE-2026-31621 CVE-2026-31621 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-31602

Bulletin has no description...

CVE-2026-41914

creationtimestamp| type| source ---|---|--- 2026-05-01 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkrhlzzy6h2y...

CVE-2026-37536

The CVE-2026-37536 entry concerns miaofng/uds-c (commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a, 2016-10-05). A stack buffer overflow occurs in send_diagnostic_request: a 6-byte buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) is written via memcpy at offset 1+pid_length with payload_length bytes. The def...

CVE-2026-37554

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:17+00:00| seen| https://gist.github.com/sgInnora/45128ae15d52df7238680a8f2da8359f 2026-05-11 20:29:17+00:00| seen| https://gist.github.com/tw89Coder/cd011dc1842625f821c171e41e812fbc...

python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...

CVE-2026-4126

creationtimestamp| type| source ---|---|--- 2026-04-24 00:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk7bocnbhl2s...

CVE-2026-35373

A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms e.g., ln SOURCE... DIRECTORY. While GNU ln treats filenames as raw bytes and creates the links correctly, the uutils implementation...

CVE-2026-34066

creationtimestamp| type| source ---|---|--- 2026-04-22 20:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk4cx72jm72o...

CVE-2026-6823

creationtimestamp| type| source ---|---|--- 2026-04-21 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzy7l4kg62k 2026-04-21 22:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk23hxdyzw2i 2026-04-21 23:08:52+00:00| seen|...

CVE-2026-22017

...