CVE-2026-6392

creationtimestamp| type| source ---|---|--- 2026-04-22 04:22:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2nkkpuls2n...

CVE-2026-41457

creationtimestamp| type| source ---|---|--- 2026-04-22 04:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2mtmcsed2i...

CVE-2026-41145

creationtimestamp| type| source ---|---|--- 2026-04-22 02:54:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2imoe7br2t 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...

CVE-2026-41131

creationtimestamp| type| source ---|---|--- 2026-04-22 02:49:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2idpwpez2t...

CVE-2026-41128

creationtimestamp| type| source ---|---|--- 2026-04-22 02:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2i2rinzz2i...

CVE-2026-41129

creationtimestamp| type| source ---|---|--- 2026-04-22 02:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2h42byi32i...

CVE-2026-41126

creationtimestamp| type| source ---|---|--- 2026-04-22 02:14:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2gffj6dj2k...

CVE-2026-4367

creationtimestamp| type| source ---|---|--- 2026-04-22 02:01:17+00:00| seen| https://bsky.app/profile/slackers.it/post/3mk2fo63fp42q 2026-05-10 20:00:10+00:00| seen| https://jvn.jp/en/jp/JVN18013369 2026-06-26 22:50:45+00:00| seen|...

CVE-2026-5721

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.5.0.4. This is due to insufficient input sanitization and output escaping in the prepareCellOutput method of the...

PT-2026-34510

A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the split utility of uutils coreutils. The program attempts to prevent data loss by checking for identity between input and output files using their file paths before initiating the split operation. However, the utility subsequently...

PT-2026-34509

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the ln utility causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms, such as 'ln SOURCE... DIRECTORY'...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. There is a security vulnerability in uutils coreutils, which stems from a race condition during the chcon recursive operation between checking time and execution time. This condition may allow local...

PT-2026-34488

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the mkfifo utility. This occurs when the utility creates a FIFO and subsequently performs a path-based chmod to set...

PT-2026-34508

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference or -n flag is explicitly provided. The implementation previously only honored the "no-dereference" intent if the --force overwrite mode was also enabled. Thi...

Linux Distros Unpatched Vulnerability : CVE-2026-35356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates parent...

PT-2026-34417

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP component where the l2cap ecred data rcv function reads the SDU length field from skb-data using get unaligned le16 without verifying that the sock...

PT-2026-34316

The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login link shortcode in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping on the 'prefix' attribute. This makes it possible for...

Linux Distros Unpatched Vulnerability : CVE-2026-35372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference or -n flag is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013543 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix potential panic dues to unprotected smcllcsrvaddlink There is a certain chance to...

uutils coreutils 后置链接漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. uutils coreutils has a post-installation link vulnerability, which stems from a race condition. This vulnerability could allow attackers to bypass the intended references, enabling the privileged cp process to cop...