CVE-2025-71220

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

CVE-2026-23123

In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize srcnode and dstnode to empty strings The debugfscreatestr API assumes that the string pointer is either NULL or points to valid kmalloc memory. Leaving the pointer uninitialized can cause problem...

CVE-2026-1843

creationtimestamp| type| source ---|---|--- 2026-02-14 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a 2026-02-14 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116068163886097864...

CVE-2026-2469

creationtimestamp| type| source ---|---|--- 2026-02-14 07:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mesh67myzn27 2026-02-17 17:10:31+00:00| seen| https://gist.github.com/alon710/d45dbb1daa1ba15aaeff33353e6910aa...

CVE-2026-26056

Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...

CVE-2025-70957

creationtimestamp| type| source ---|---|--- 2026-02-13 15:26:43+00:00| seen| https://gist.github.com/Lucian-code233/d2589ece39914195c0e307b4dee32185...

CVE-2025-70955

creationtimestamp| type| source ---|---|--- 2026-02-13 14:57:44+00:00| seen| https://gist.github.com/Lucian-code233/25b0a13be569db9160340d9ecd2fdf0d...

CVE-2026-26249

creationtimestamp| type| source ---|---|--- 2026-02-13 11:40:23+00:00| seen| https://gist.github.com/alon710/c13997a3281275228dd587b840ca0c56...

CVE-2025-61879

creationtimestamp| type| source ---|---|--- 2026-02-13 08:19:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meq32yrkao25...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

GHSA-XX7M-69FF-9CRP

creationtimestamp| type| source ---|---|--- 2026-02-13 01:10:24+00:00| seen| https://gist.github.com/alon710/db853e0a605e11003bf240d589bebc01 2026-02-13 02:07:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mepgcmwkc6o2...

SUSE SLES15 Security Update : nodejs20 (SUSE-SU-2026:0457-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0457-1 advisory. - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 bsc1256848 - CVE-2025-59465: Add TLSSocket default error handler...

PT-2026-25679

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.10 Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description Mattermost does not properly filter invite IDs based on user permissions. This allows regular users to bypass access...

PT-2026-25810

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description The software does not properly verify the run create permission when a playbookId is empty. This allows team members to create unauthorized runs through the...

CVE-2026-26185

creationtimestamp| type| source ---|---|--- 2026-02-12 22:40:23+00:00| seen| https://gist.github.com/alon710/416bd4c6e882d4c4ca94fe2714e150bc...

GHSA-JR94-GJ3H-C8RF

creationtimestamp| type| source ---|---|--- 2026-02-12 22:40:23+00:00| seen| https://gist.github.com/alon710/416bd4c6e882d4c4ca94fe2714e150bc...

WordPress FastDup - Fastest WordPress Migration & Duplicator plugin <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download vulnerability

WordPress FastDup - Fastest WordPress Migration & Duplicator plugin = 2.7.1 - Missing Authorization to Authenticated Contributor+ Backup Creation and Download vulnerability discovered by WordFence in WordPress Plugin FastDup versions = 2.7.1...

CVE-2026-21434

creationtimestamp| type| source ---|---|--- 2026-02-12 22:10:25+00:00| seen| https://gist.github.com/alon710/55922433a77df7de86cea2e1123888c8...

Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC This vulnerability exists in the Air Traffic Controller ATC component of Yoke, a Kubernetes deployment tool. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller...

CVE-2026-26056

CVE-2026-26056 affects Yoke ATC in 0.19.0 and earlier. A vulnerability in the ATC controller allows users with create/update permissions to inject a malicious URL via the overrides.yoke.cd/flight annotation, causing the ATC controller to download and execute an arbitrary WASM module without prope...