CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2

CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2. A patched version of the package is available...

CVE-2025-69648 affecting package binutils for versions less than 2.41-11

CVE-2025-69648 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-14876 affecting package qemu for versions less than 9.1.0-3

CVE-2025-14876 affecting package qemu for versions less than 9.1.0-3. A patched version of the package is available...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 — Meta below Symlink Local Privilege Escalati...

CVE-2026-40504 Creolabs Gravity < 0.9.6 Heap Buffer Overflow via gravity_vm_exec

Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravityvmexec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can exploit insufficient bounds checking in gravityfiberreassign t...

CVE-2026-20203 Improper Access Control in Data Model Acceleration in Splunk Enterprise

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user that does not hold the admin or power Splunk roles, has write permission on...

WordPress e-shot plugin <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAX vulnerability

Missing Authorization to Authenticated Subscriber+ Form Settings Modification via AJAX vulnerability discovered by Poli - CMC Global in WordPress Plugin e-shot versions = 1.0.2...

PT-2026-33067

Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 1.0.3 Description A user with a role that has access to the Splunk internal index or the high-privilege capability mcp tool admin can view user session and authorization tokens in clear text. This issue...

GHSA-2HX3-VP6R-MG3F Kiota: Code Generation Literal Injection

CVE Advisory CVE-2026-41134: Code Generation Literal Injection in Kiota Summary Kiota versions prior to 1.31.1 are affected by a code-generation literal injection vulnerability in multiple writer sinks for example: serialization/deserialization keys, path/query parameter mappings, URL template...

CVE-2026-23891

Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code execution vulnerability in the user name field allows a low-privileged attacker to execute arbitrary code in the context of any user who passively visits a comment page, resulting...

CVE-2026-24049 affecting package python-virtualenv for versions less than 20.26.6-3

CVE-2026-24049 affecting package python-virtualenv for versions less than 20.26.6-3. A patched version of the package is available...

CVE-2024-8354 affecting package qemu for versions less than 6.2.0-27

CVE-2024-8354 affecting package qemu for versions less than 6.2.0-27. A patched version of the package is available...

CVE-2026-23237 affecting package kernel for versions less than 5.15.202.1-1

CVE-2026-23237 affecting package kernel for versions less than 5.15.202.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-27171 affecting package rust for versions less than 1.72.0-15

CVE-2026-27171 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...

CVE-2025-11065 affecting package rook for versions less than 1.6.2-29

CVE-2025-11065 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...

CVE-2026-25727 affecting package rust for versions less than 1.72.0-15

CVE-2026-25727 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...

CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2

CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2. A patched version of the package is available...

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-4

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-4. A patched version of the package is available...

CVE-2025-30204 affecting package rook for versions less than 1.6.2-29

CVE-2025-30204 affecting package rook for versions less than 1.6.2-29. A patched version of the package is available...

CVE-2025-71236 affecting package kernel for versions less than 5.15.202.1-1

CVE-2025-71236 affecting package kernel for versions less than 5.15.202.1-1. An upgraded version of the package is available that resolves this issue...