30581 matches found
CVE-2026-80898: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfs: clear PGprivate2 on copy-to-cache append failure netfspgpriv2copytocache marks the folio with PGprivate2 before netfspgpriv2copyfolio appends it to the copy-to-cache rolling buffer. If the append fails, the folio is not...
Linux Distros Unpatched Vulnerability : CVE-2026-84933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In...
Linux Distros Unpatched Vulnerability : CVE-2026-85152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a...
CVE-2026-85008: Insufficient Verification of Data Authenticity
undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...
PT-2026-85805
Name of the Vulnerable Software and Affected Versions undici versions 7.0.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The cache interceptor incorrectly handles the caching of unsafe HTTP methods. While documentation states only safe methods are cached, the logic used to skip...
PT-2026-86152
Name of the Vulnerable Software and Affected Versions undici versions 7.0.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The cache interceptor fails to handle the Set-Cookie response header, allowing it to be stored and re-served in shared cache mode. This occurs when a cacheab...
CVE-2026-84933: Exposure of Sensitive Information to an Unauthorized Actor
undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, which is the default, an otherwise cacheable response that carries a Set-Cookie header, for example one marked with a...
PT-2026-85800
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 read blocks function regarding buffer head management. The function incorrectly assumes that the buffer head returned by sb getblk is exclusively owned,...
PT-2026-91324
In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double list add tail call on bh-b assoc buffers within nilfs lookup dirty data buffers. Analysis revealed that the root cause was the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106160 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and merges...
Linux Distros Unpatched Vulnerability : CVE-2026-80808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: stop retrying saturated xattr cache entries ext4xattrblockset retries when a cache entry selected for reuse has a saturated reference count after taking t...
Linux Distros Unpatched Vulnerability : CVE-2026-80807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double listaddtail call on bh-bassocbuffers within...
PT-2026-85740
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page frag cache nvme uses page frag cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page frag cache is used in not...
CVE-2026-14199
On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...
CVE-2026-31431
CVE-2026-31431 "Copy Fail" Toolkit Author: byt3l0rd Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are...
CVE-2026-84761
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
Exploit for CVE-2026-75604
CVE-2026-75604 - Next.js path traversal → RCE Windows · rese...
EUVD-2026-70583
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
