CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

CVE-2026-43110

creationtimestamp| type| source ---|---|--- 2026-05-06 11:48:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527470440319391 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-06 05:54:49+00:00| see...

CVE-2026-43109

creationtimestamp| type| source ---|---|--- 2026-05-06 11:34:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527415042811896 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-07-09 01:17:37+00:00| seen|...

CVE-2026-43115

creationtimestamp| type| source ---|---|--- 2026-05-06 11:07:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527308839911875...

CVE-2026-43085

creationtimestamp| type| source ---|---|--- 2026-05-06 10:53:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527254171899803 2026-07-06 05:54:21+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 06:25:58+00:00|...

CVE-2026-43075

creationtimestamp| type| source ---|---|--- 2026-05-06 10:13:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527096513413440 2026-07-06 05:54:09+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 06:24:50+00:00|...

RHCOS 4 : OpenShift Container Platform 4.7.12 (RHSA-2021:1562)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:1562 advisory. - runc: vulnerable to symlink exchange attack CVE-2021-30465 Note that Nessus has not tested for this issue but has instead relied only on th...

RHCOS 4 : OpenShift Container Platform 4.6.30 (RHSA-2021:1566)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1566 advisory. - runc: vulnerable to symlink exchange attack CVE-2021-30465 Note that Nessus has not tested for this issue but has instead relied only on th...

RHCOS 4 : OpenShift Container Platform 4.6.46 (RHSA-2021:3642)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3642 advisory. - kubernetes: Symlink exchange can allow host filesystem access CVE-2021-25741 Note that Nessus has not tested for this issue but has instead...

RHCOS 3 : OpenShift Container Platform 3.11.524 (RHSA-2021:3646)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3646 advisory. - kubernetes: Symlink exchange can allow host filesystem access CVE-2021-25741 Note that Nessus has not tested for this issue but has instead...

RHCOS 4 : OpenShift Container Platform 4.7.32 (RHSA-2021:3635)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3635 advisory. - kubernetes: Symlink exchange can allow host filesystem access CVE-2021-25741 Note that Nessus has not tested for this issue but has instead...

CVE-2026-43073

creationtimestamp| type| source ---|---|--- 2026-05-05 16:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4n6tmbqb2e 2026-05-05 17:48:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116523223692989082 2026-05-06 11:10:07+00:00| seen|...

openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

A flaw was found in the OpenSSH GSSAPI Generic Security Service Application Program Interface delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the...

CVE-2026-27693 traccar allows XML injection in KML and GPX exports

Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the KML and GPX export functionality writes device names to XML output without proper escaping. An attacker with low privileges can create a device with a crafted name that injects XML...

CVE-2026-7854

creationtimestamp| type| source ---|---|--- 2026-05-05 11:57:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116521843218674009 2026-05-05 19:17:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vmwbqtm2r 2026-05-05 21:29:10+00:00| seen|...

CVE-2026-40797

creationtimestamp| type| source ---|---|--- 2026-05-05 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116520794744579709 2026-05-05 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml3o4sriyd2j 2026-05-05 08:01:19+00:00| seen|...

CLSA-2026-1777950533 openssh: Fix of CVE-2026-3497

CVE-2026-3497: fix information disclosure / DoS in GSSAPI key exchange by initialising gssbuf, recvtok, msgtok to GSSCEMPTYBUFFER and replacing non-terminating sshpktdisconnect with sshpacketdisconnect in kexgssc.c / kexgsss.c...

CVE-2026-43864

creationtimestamp| type| source ---|---|--- 2026-05-04 20:12:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116518129175813131...

CVE-2026-42376

creationtimestamp| type| source ---|---|--- 2026-05-04 17:02:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517380246425239 2026-05-04 18:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2autcjzk2f 2026-05-04 18:44:20+00:00| seen|...

CVE-2026-29200

creationtimestamp| type| source ---|---|--- 2026-05-04 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116515132214621660 2026-05-04 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkz5ns63hh2o 2026-05-04 12:44:43+00:00| seen|...