CVE-2026-43312

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647initcontrols we call v4l2getsubdevdata, but it is initialized by v4l2i2csubdevinit in the probe, which currently happens after initcontrols. This can result in a...

CVE-2026-3614

The CVE-2026-3614 entry concerns the AcyMailing plugin for WordPress, affected versions 9.11.0 through 10.8.1. The root cause is a missing capability check on the wp_ajax_acymailing_router AJAX handler, enabling privilege escalation from Subscriber-level (and above) to admin-level controllers, in...