CVE-2026-40460

When NGINX Plus or NGINX Open Source are configured to use the HTTP/3 QUIC module, an attacker may be able to spoof their source IP address allowing for bypass of authorization or bypass of rate limiting. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-47932

creationtimestamp| type| source ---|---|--- 2026-05-10 16:32:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlj6pzbglv2k...

EUVD-2026-28613

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions The maximum number of flowtable hardware offload actions in IPv6 is: ethernet mangling 4 payload actions, 2 for each ethernet address SNAT 4 payload actions DNAT ...

CVE-2026-6736

creationtimestamp| type| source ---|---|--- 2026-05-08 01:34:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlclnkbewn2e...

CVE-2026-4871

creationtimestamp| type| source ---|---|--- 2026-05-07 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlc2s22zv32l...

CVE-2026-41483

creationtimestamp| type| source ---|---|--- 2026-05-07 02:30:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla6byyvmx2i...

CVE-2026-43139

A flaw was found in the Linux kernel's xfrm6 subsystem. This vulnerability occurs because the xfrm6getsaddr function does not properly check the return value of ipv6devgetsaddr. This oversight can result in an uninitialized source address being used, potentially leading to system instability or a...

EUVD-2026-27698

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139 xfrm6: fix uninitialized saddr in xfrm6_get_saddr()

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6getsaddr xfrm6getsaddr does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address returns -EADDRNOTAVAIL, saddr-in6 is left uninitialize...

CVE-2026-43139

The CVE-2026-43139 entry concerns the Linux kernel xfrm6 subsystem. The issue arises in xfrm6_get_saddr() which does not check the return value of ipv6_dev_get_saddr(); when ipv6_dev_get_saddr() fails with -EADDRNOTAVAIL, saddr->in6 remains uninitialized and xfrm6_get_saddr() incorrectly retur...

CVE-2026-5335

creationtimestamp| type| source ---|---|--- 2026-05-04 10:26:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhinw5uy2v...

CVE-2026-42596

creationtimestamp| type| source ---|---|--- 2026-04-30 19:11:14+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-4vmc-gm8v-m35h 2026-05-14 17:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltcxjauzm2i 2026-05-17 18:01:12+00:0...

CVE-2026-7418

creationtimestamp| type| source ---|---|--- 2026-04-29 23:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mko7cbhulp2t 2026-04-30 00:26:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkoe37qfku2o...

FreeRTOS-Plus-TCP 安全漏洞

FreeRTOS-Plus-TCP is an extensible, open-source TCP/IP stack designed for use with FreeRTOS. Security vulnerabilities existed in versions prior to V4.2.6 and V4.4.1 of FreeRTOS-Plus-TCP. These vulnerabilities stemmed from insufficient data packet validation, allowing adjacent network participants...

CVE-2026-31685 netfilter: ip6t_eui64: reject invalid MAC header for all packets

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. The existing guard only rejects ...

CVE-2026-5358

creationtimestamp| type| source ---|---|--- 2026-04-20 22:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxifteyxs2i 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs...

CVE-2026-40170

creationtimestamp| type| source ---|---|--- 2026-04-16 23:18:23+00:00| published-proof-of-concept| Telegram/x6U1CUbtpfWdw00zGhzow4OOkK7AiEHUVbiM6o3SMYH6zs0 2026-04-17 00:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnmqlsfem26 2026-04-17 17:12:30+00:00| seen|...

CVE-2026-40261 Composer has Command Injection via Malicious Perforce Reference

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...