CVE-2026-42926 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

MINI-5RP5-MJ84-GFR7

Bulletin has no description...

CVE-2026-54758 Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

MINI-F7P2-FF8M-3HW4

Bulletin has no description...

MINI-M4F4-Q4V9-V5R8

Bulletin has no description...

ANT-2026-2NNMB24E · openssh · stack-overflow

stack-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-2NNMB24E: stack-overflow in openssh OpenSSH's matchpattern in...

MINI-FXJ3-W3J2-X7J3

Bulletin has no description...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

UBUNTU-CVE-2026-59903

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse...

ANT-2026-CAH7XGSQ · lua · stack-overflow

stack-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-CAH7XGSQ: stack-overflow C stack exhaustion via unbounded...

Exploit for CVE-2026-40345

deepmerge-ts mergeleft.self, right.self - mergeleft.sel...

MINI-GFXM-Q3V3-339V

Bulletin has no description...

MINI-W7VW-CM5M-8QC6

Bulletin has no description...

MINI-P7FQ-X97F-H6XP

Bulletin has no description...

MINI-JWCG-FXW6-J63J

Bulletin has no description...

MINI-36VX-9X5J-FQWV

Bulletin has no description...

MINI-8P2F-RP33-3RMP

Bulletin has no description...

MINI-658X-4WV3-XF5H

Bulletin has no description...

MINI-X99W-6QH7-QVJR

Bulletin has no description...

CVE-2026-74843 Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow

A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/exportpingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTPCOOKIE can lead to...