CVE-2026-0404

creationtimestamp| type| source ---|---|--- 2026-01-13 17:04:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888872438851637...

CVE-2026-0403

creationtimestamp| type| source ---|---|--- 2026-01-13 17:04:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888872438851637...

GO-2026-4295 Mattermost Server exposes sensitive user status information via REST API version 4 endpoint in github.com/mattermost/mattermost-server

Mattermost Server exposes sensitive user status information via REST API version 4 endpoint in github.com/mattermost/mattermost-server...

CVE-2025-71088

In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect race leading to inconsistent fallback status: WARNING: CPU: 3 PID: 33 at net/mptcp/subflow.c:1515 subflowdataready+0x40b/0x7c0 net/mptcp/subflow.c:15...

CVE-2025-68809

In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on mflags in vfscache ksmbd maintains delete-on-close and pending-delete state in ksmbdinode-mflags. In vfscache.c this field is accessed under inconsistent locking: some paths read and modify mflags under...

CVE-2026-0891

creationtimestamp| type| source ---|---|--- 2026-01-13 16:03:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mccwl4v26i2v 2026-01-13 16:10:43+00:00| seen| Telegram/NtGdm-nKviNCWHikD-PcF3b4R8AkgqcqlHzrx8XSXT7S4dA 2026-01-13 23:47:38+00:00| seen|...

CVE-2025-71026

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

CVE-2025-71023

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

CVE-2025-71025

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

CVE-2025-71088 mptcp: fallback earlier on simult connection

In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect race leading to inconsistent fallback status: WARNING: CPU: 3 PID: 33 at net/mptcp/subflow.c:1515 subflowdataready+0x40b/0x7c0 net/mptcp/subflow.c:15...

CVE-2025-71088 mptcp: fallback earlier on simult connection

In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect race leading to inconsistent fallback status: WARNING: CPU: 3 PID: 33 at net/mptcp/subflow.c:1515 subflowdataready+0x40b/0x7c0 net/mptcp/subflow.c:15...

CVE-2025-71088

CVE-2025-71088 affects the Linux kernel’s mptcp implementation. Syzkaller reported a simult-connect race in net/mptcp/subflow.c where a TCP subflow can process a simult-ack after transitioning to TCP_FIN1, bypassing the MPTCP fallback check and leaving the socket in an inconsistent state; this ca...

CVE-2025-68809 ksmbd: vfs: fix race on m_flags in vfs_cache

In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on mflags in vfscache ksmbd maintains delete-on-close and pending-delete state in ksmbdinode-mflags. In vfscache.c this field is accessed under inconsistent locking: some paths read and modify mflags under...

GHSA-MQW7-C5GG-XQ97

creationtimestamp| type| source ---|---|--- 2026-01-13 14:36:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888290409404878...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Do not block the input queue by waiting for the MSC response.“ Currently, the gsmqueue function processes incoming frames. When opening a DLC channel, it calls gsmdlciopen, which in turn calls gsmmodemupdate. If the...

Astra Linux – Vulnerability in nbdkit

There is a flaw in the “blocksize” filter of nbdkit that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in nbdkit, resulting in a denial of service...

CVE-2026-22833

creationtimestamp| type| source ---|---|--- 2026-01-13 07:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcc2mami7z2e...

RHSA-2026:0483

creationtimestamp| type| source ---|---|--- 2026-01-13 07:41:24+00:00| seen| https://gist.github.com/Darkcrai86/f5deb9e0096255e42024eafa4648e444...

MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.8.el7.AXS7 (AXSA:2025-9625:10)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9625:10 advisory. media: edia: dvbdev: fix a use-after-free CVE-2024-27043 btrfs: dev-replace: properly validate device names CVE-2024-26791 KVM: nSVM: Ignore nCR34:0...

GHSA-VXW4-WV6M-9HHH

creationtimestamp| type| source ---|---|--- 2026-01-12 23:47:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115884793536498609 2026-01-13 00:02:07+00:00| published-proof-of-concept| Telegram/4zuUlGU6EvpMTWPbip1D3Ts-WMioI6unE3WF1UcmysLKI 2026-01-17 00:42:46+00:00| seen|...