CVE-2026-5160 affecting package telegraf for versions less than 1.31.0-19

CVE-2026-5160 affecting package telegraf for versions less than 1.31.0-19. A patched version of the package is available...

CVE-2026-40386 affecting package libexif for versions less than 0.6.24-3

CVE-2026-40386 affecting package libexif for versions less than 0.6.24-3. A patched version of the package is available...

CVE-2026-23444 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-23444 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1

CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1. A patched version of the package is available...

CVE-2026-23389 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-23389 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

CVE-2026-33055 affecting package clamav for versions less than 1.5.2-2

CVE-2026-33055 affecting package clamav for versions less than 1.5.2-2. A patched version of the package is available...

CVE-2026-33555 affecting package haproxy for versions less than 2.9.11-5

CVE-2026-33555 affecting package haproxy for versions less than 2.9.11-5. A patched version of the package is available...

CVE-2026-28389 affecting package edk2 for versions less than 20240524git3e722403cd16-16

CVE-2026-28389 affecting package edk2 for versions less than 20240524git3e722403cd16-16. A patched version of the package is available...

CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7

CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...

CVE-2026-40385 affecting package libexif for versions less than 0.6.24-3

CVE-2026-40385 affecting package libexif for versions less than 0.6.24-3. A patched version of the package is available...

CVE-2026-0964 affecting package libssh for versions less than 0.10.6-7

CVE-2026-0964 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...

CVE-2026-0965 affecting package libssh for versions less than 0.10.6-7

CVE-2026-0965 affecting package libssh for versions less than 0.10.6-7. A patched version of the package is available...

CVE-2026-4647 affecting package gdb for versions less than 13.2-7

CVE-2026-4647 affecting package gdb for versions less than 13.2-7. A patched version of the package is available...

CVE-2026-4897 affecting package polkit for versions less than 123-4

CVE-2026-4897 affecting package polkit for versions less than 123-4. A patched version of the package is available...

CVE-2026-39882 affecting package docker-buildx for versions less than 0.14.0-11

CVE-2026-39882 affecting package docker-buildx for versions less than 0.14.0-11. A patched version of the package is available...

DEBIAN-CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

CVE-2026-44987

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

CVE-2026-42456 AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (IDOR)

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLLM returns the text-to-speech audio for another user's chat response within the same workspace...

CVE-2026-42354 Sentry: Improper authentication on SAML SSO process allows user identity linking

Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity...

CVE-2026-45130

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in readcompound in src/spellfile.c when loading a crafted spell file .spl with UTF-8 encoding active. An attacker-controlled length field in the spell file's compound section overflows a 32-b...