1031 matches found
CVE-2026-68419
The CVE relates to the Linux kernel RDMA/irdma driver. During QP/CQ/SRQ creation, the process registers user-space buffers as special regions (ABI-indicated, no valid mkey) before the actual QP/CQ/SRQ object is created. This can allow a user to call rereg_mr on these MR objects and cause a real C...
EUVD-2026-55011
The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read and write access through the REST API...
CVE-2026-18960
The Block User Account WordPress plugin is affected prior to version 2.0.1. The issue: the plugin does not enforce its account block on every authentication path, allowing a blocked user who has an application password created before the block to retain full role-level read and write access throu...
CVE-2026-15970
Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...
EUVD-2026-53319
Pixelfed's SearchController behind the auth middleware accepts a URL via its remote-search parameters and fetches it server-side through ActivityPubFetchService, whose validateUrl only blocks the literal hosts 127.0.0.1, localhost, and ::1 and requires https, without checking the resolved IP...
CVE-2026-71246 Pixelfed - Authenticated SSRF via Remote URL Search
Pixelfed's SearchController behind the auth middleware accepts a URL via its remote-search parameters and fetches it server-side through ActivityPubFetchService, whose validateUrl only blocks the literal hosts 127.0.0.1, localhost, and ::1 and requires https, without checking the resolved IP...
CVE-2026-10774
Summary. CVE-2026-10774 affects Zephyr’s Bluetooth Mesh implementation. The vulnerability arises when subnet keys are torn down: net_keys_create() imports the Private Beacon Key into a PSA key slot, but subnet_keys_destroy() did not balancedly free the slot due to a removed Kconfig guard. This cr...
GHSA-98PP-VCCM-QM25 Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
Summary rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php accepts filenames that contain a blocked extension as a non-terminal segment of a longer extension chain, for example shell.php.any.jpg. The check only catches the blocked extension when it appears at the en...
CVE-2026-6889
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DNS signing DoS via TKEY name cache exhaustion
== Summary: An unauthenticated user can repeatedly register names TKEY names, which floods a cache causing legitimate TKEYs to be expunged. This can practically block the use DNS TSIG signing. Description Only authenticated users are supposed to be able to use TKEY DNS records to register shared...
SUSE CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
Denial Of Service
Next.js is vulnerable to Denial Of Service. The vulnerability is due to improper handling of crafted requests targeting applications using the App Router with Server Actions, allowing attackers to trigger excessive CPU usage and block processing of further requests...
UBUNTU-CVE-2026-64437
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit f580d27e8928 "ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL" made smb2cancel skip a work whose state is...
UBUNTU-CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
CVE-2026-64474
The CVE-2026-64474 issue affects the Linux kernel VFIO path, specifically vfio_mig_get_next_state() which walks vfio_from_fsm_table[] and could spin forever when encountering an ERROR sentinel (STOP_COPY arcs to ERROR). The root cause was an unaccounted ERROR sentinel in the skip loop, allowing a...
EUVD-2026-48818
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
CVE-2026-64474
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
CVE-2026-64474 vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc
In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...
Linux Distros Unpatched Vulnerability : CVE-2026-64474
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states...