CVE-2025-69652 affecting package binutils for versions less than 2.41-11

CVE-2025-69652 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-14876 affecting package qemu for versions less than 9.1.0-3

CVE-2025-14876 affecting package qemu for versions less than 9.1.0-3. A patched version of the package is available...

CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2

CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2. A patched version of the package is available...

CVE-2026-34743 affecting package rust for versions less than 1.75.0-28

CVE-2026-34743 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...

CVE-2026-33056 affecting package rust for versions less than 1.90.0-7

CVE-2026-33056 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...

CVE-2026-34743 affecting package rust for versions less than 1.90.0-7

CVE-2026-34743 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...

CVE-2026-33055 affecting package rust for versions less than 1.75.0-28

CVE-2026-33055 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...

CVE-2025-69648 affecting package binutils for versions less than 2.41-11

CVE-2025-69648 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2026-33056 affecting package rust for versions less than 1.75.0-28

CVE-2026-33056 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 — Meta below Symlink Local Privilege Escalati...

CVE-2026-40504 Creolabs Gravity < 0.9.6 Heap Buffer Overflow via gravity_vm_exec

Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravityvmexec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can exploit insufficient bounds checking in gravityfiberreassign t...

CVE-2026-20203 Improper Access Control in Data Model Acceleration in Splunk Enterprise

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user that does not hold the admin or power Splunk roles, has write permission on...

WordPress e-shot plugin <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAX vulnerability

Missing Authorization to Authenticated Subscriber+ Form Settings Modification via AJAX vulnerability discovered by Poli - CMC Global in WordPress Plugin e-shot versions = 1.0.2...

PT-2026-33067

Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 1.0.3 Description A user with a role that has access to the Splunk internal index or the high-privilege capability mcp tool admin can view user session and authorization tokens in clear text. This issue...

GHSA-2HX3-VP6R-MG3F Kiota: Code Generation Literal Injection

CVE Advisory CVE-2026-41134: Code Generation Literal Injection in Kiota Summary Kiota versions prior to 1.29.1 and 1.31.1 are affected by a code-generation literal injection vulnerability in multiple writer sinks for example: serialization/deserialization keys, path/query parameter mappings, URL...

CVE-2026-23891

Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code execution vulnerability in the user name field allows a low-privileged attacker to execute arbitrary code in the context of any user who passively visits a comment page, resulting...

CVE-2026-33412 affecting package vim for versions less than 9.2.0240-1

CVE-2026-33412 affecting package vim for versions less than 9.2.0240-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-29111 affecting package systemd for versions less than 250.3-24

CVE-2026-29111 affecting package systemd for versions less than 250.3-24. A patched version of the package is available...

CVE-2026-23237 affecting package kernel for versions less than 5.15.202.1-1

CVE-2026-23237 affecting package kernel for versions less than 5.15.202.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-3494 affecting package mariadb for versions less than 10.6.25-1

CVE-2026-3494 affecting package mariadb for versions less than 10.6.25-1. An upgraded version of the package is available that resolves this issue...