CVE-2026-24883

creationtimestamp| type| source ---|---|--- 2026-01-27 19:21:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/127 2026-01-27 21:09:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgo7png6n2h 2026-01-28 02:01:17+00:00| seen|...

CVE-2026-24872

creationtimestamp| type| source ---|---|--- 2026-01-27 16:30:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg6myo4gi2v 2026-01-27 20:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgkkjw5262n...

CVE-2026-24823

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in FASTSHIFT X-TRACK Software/X-Track/USER/App/Utils/lvimgpng/PNGdec/src modules. This vulnerability is associated with program files inflate.C. This issue affects X-TRACK: through v2.7...

Linux Distros Unpatched Vulnerability : CVE-2026-24883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GnuPG before 2.5.17, a long signature packet length causes parsesignature to return success with sig-data set to a NULL value, leading to a denial of service...

CVE-2026-21509

creationtimestamp| type| source ---|---|--- 2026-01-26 17:40:52+00:00| seen| https://bsky.app/profile/dustinchilds.bsky.social/post/3mdds2s6f7c2j 2026-01-26 18:18:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mddu5zx7rs23 2026-01-26 18:32:41+00:00| seen|...

CVE-2026-23009

A use-after-free vulnerability was found in the Linux kernel's xHCI USB host controller driver. The xhcisidebandremoveendpoint function incorrectly assumes the endpoint has a valid transfer ring and dereferences ep-ring without checking. After suspend/resume cycles where the xHCI controller loses...

CVE-2026-23000

A flaw was found in the Linux kernel's mlx5e network driver. A local user can exploit this vulnerability by repeatedly attempting to change the network profile, such as enabling switchdev mode, after an initial failure to apply or roll back the profile. This can lead to a NULL pointer dereference...

CVE-2026-23001

creationtimestamp| type| source ---|---|--- 2026-01-25 15:15:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdaziq2ped26 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0290/ 2026-03-19 00:00:00+00:00| seen|...

CVE-2026-22041

creationtimestamp| type| source ---|---|--- 2026-01-24 21:26:47+00:00| seen| https://gist.github.com/alon710/da6bb8e577db094a3a416473defeda29 2026-01-24 22:42:09+00:00| seen| https://gist.github.com/alon710/fa2d5a72e5733840c9c3958327680581...

CVE-2026-0593

creationtimestamp| type| source ---|---|--- 2026-01-24 19:09:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md6w3bnmvq2r...

CVE-2026-24643

creationtimestamp| type| source ---|---|--- 2026-01-24 07:29:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5oxefnpa2m...

EUVD-2026-4555

The AIKTP plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the /aiktp/getToken REST API endpoint in all versions up to, and including, 5.0.04. The endpoint uses the 'verifyuserloggedin' as a permission callback, which only checks if a...

EUVD-2026-4576

The Simple Crypto Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2. This is due to missing nonce validation on the scsbackend function. This makes it possible for unauthenticated attackers to update plugin settings via a forged...

EUVD-2026-4589

Not used...

CVE-2026-22991

In the Linux kernel, the following vulnerability has been resolved: libceph: make freechooseargmap resilient to partial allocation freechooseargmap may dereference a NULL pointer if its caller fails after a partial allocation. For example, in decodechooseargs, if allocation of argmap-args fails,...

CVE-2026-23954

Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image e.g a member of the ‘incus’ group to use directory traversal or symbolic links in the templating functionality to achieve host arbitrary file...

CVE-2026-22990

creationtimestamp| type| source ---|---|--- 2026-01-23 17:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4b42e4rg2c 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

EUVD-2026-4279

PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service binary location to inject malicious executables that will b...

EUVD-2026-4292

AgataSoft PingMaster Pro 2.1 contains a denial of service vulnerability in the Trace Route feature that allows attackers to crash the application by overflowing the host name input field. Attackers can generate a 10,000-character buffer and paste it into the host name field to trigger an...

EUVD-2026-4315

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev-srcu If two drivers were calling gpiochipadddatawithkey, one may be traversing the srcu-protected list in gpionametodesc, meanwhile other has just added its gdev in gpiodevaddtolistunlocked...