CVE-2026-85008: Insufficient Verification of Data Authenticity

undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never placed in the skip list and instead falls through to th...

PT-2026-85648

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double list add tail call on bh-b assoc buffers within nilfs lookup dirty data buffers. Analysis revealed that the root cause was the...

PT-2026-85652

In the Linux kernel, the following vulnerability has been resolved: io uring/cmd: fix iovec leak when the async cmd is not recycled An io async cmd carries an iovec array in -vec.iovec, allocated when the vec has to grow and kept across recycling through ctx-cmd cache. On two paths nothing frees ...

PT-2026-85740

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page frag cache nvme uses page frag cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page frag cache is used in not...

PT-2026-89161

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists where role synchronization fails to invalidate cached user records during a privilege demotion. When an administrator is demoted via a trusted role header or OAuth role...

Linux Distros Unpatched Vulnerability : CVE-2026-80807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject invalid block index in GC ioctl Syzbot reported list corruption caused by a double listaddtail call on bh-bassocbuffers within...

PT-2026-85649

In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4 xattr block set retries when a cache entry selected for reuse has a saturated reference count after taking the buffer lock. The retry returns to the mbcache lookup without...

CVE-2026-14199

On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" Toolkit Author: byt3l0rd Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are...

CVE-2026-84761

Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...

Exploit for CVE-2026-75604

CVE-2026-75604 - Next.js path traversal → RCE Windows · rese...

EUVD-2026-70583

Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...

CVE-2026-84761 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...

CVE-2026-84761

CVE-2026-84761 affects the WordPress LiteSpeed Cache plugin in versions 7.9 and earlier , where an unauthenticated Server Side Request Forgery (SSRF) flaw is present. The CVSS v3.1 score is 7.2 (HIGH) with a Changed scope and low impacts to both confidentiality and integrity, while availability i...

CVE-2026-84761 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...

SUSE CVE-2026-14199

Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled syncttl greater than zero are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An...

CVE-2026-75034

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

CVE-2026-85213

Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueEntries, invalidatesCache, and putOutOfRotation. Authenticated users with minimal account:read permissions can read internal queues, flush server caches, and disable the server b...

CVE-2026-75034 Rancher: SAML Assertion Replay

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a...

CVE-2026-75034

CVE-2026-75034 is a SAML assertion replay flaw in Rancher Manager affecting versions before 2.15.1 (also patched in 2.14.5 and 2.13.9). The replay protection introduced to fix CVE-2026-44946 stored consumed assertion IDs in a per-process cache , so in high-availability deployments each replica on...