CVE-2026-43052

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211tdlsoper When NL80211TDLSENABLELINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDL...

CVE-2026-43052

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211tdlsoper When NL80211TDLSENABLELINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDL...

CVE-2026-43052 wifi: mac80211: check tdls flag in ieee80211_tdls_oper

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211tdlsoper When NL80211TDLSENABLELINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDL...

CVE-2026-43052

CVE-2026-43052 fixes a Linux kernel mac80211 TDLS handling flaw: NL80211_TDLS_ENABLE_LINK could run TDLS-side effects on non‑TDLS peers. A kernel patch adds an early sta->sta.tdls check to ensure only true TDLS peers proceed, preventing unintended channel HT-protection changes. Remediation is ...

CVE-2026-43012 net/mlx5: Fix switchdev mode rollback in case of failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason switchdev mode fails, we rollback to legacy mode, before this patch, rollback will unregister the uplink netdev and leave it unregistered causin...

CVE-2026-31752 bridge: br_nd_send: validate ND option lengths

In the Linux kernel, the following vulnerability has been resolved: bridge: brndsend: validate ND option lengths brndsend walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLADDR option...

CVE-2026-31752 bridge: br_nd_send: validate ND option lengths

In the Linux kernel, the following vulnerability has been resolved: bridge: brndsend: validate ND option lengths brndsend walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLADDR option...

CVE-2026-31738

In the Linux kernel, the following vulnerability has been resolved: vxlan: validate ND option lengths in vxlannacreate vxlannacreate walks ND options according to option-provided lengths. A malformed option can make the parser advance beyond the computed option span or use a too-short source LLAD...

CVE-2026-28532

A flaw was found in FRRouting. An integer overflow vulnerability exists in several OSPF Traffic Engineering and Segment Routing TLV parser functions. An attacker with an established OSPF Open Shortest Path Path First adjacency can send a specially crafted LS Link State Update packet containing a...

CVE-2026-43003

creationtimestamp| type| source ---|---|--- 2026-05-01 11:06:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrydpe5r42p 2026-05-04 19:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml2gb6s2oq2w 2026-06-16 21:42:44+00:00| seen|...

CVE-2026-42402

creationtimestamp| type| source ---|---|--- 2026-05-01 11:01:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkry2qs3kp2n...

CVE-2026-42403

creationtimestamp| type| source ---|---|--- 2026-05-01 10:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxpyqkym2i...

CVE-2026-40201

creationtimestamp| type| source ---|---|--- 2026-05-01 10:50:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrxh26lwc2q...

CVE-2026-42404

Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP...

EUVD-2026-26491

Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a policy from a remote URI, an outbound request is made for arbitrary protocols and internal IP...

WordPress Internal Link Juicer: SEO Auto Linker for WordPress plugin <= 2.24.6 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Internal Link Juicer: SEO Auto Linker for WordPress versions = 2.24.6...

CVE-2026-7550

creationtimestamp| type| source ---|---|--- 2026-05-01 06:59:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrkjmcs452q...

CVE-2026-6127

creationtimestamp| type| source ---|---|--- 2026-05-01 06:26:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkriofjyjy2p 2026-05-18 10:33:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm4ofbeehv2l 2026-06-03 23:46:41+00:00| seen|...

CVE-2026-7554

A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitatio...

CVE-2024-13362

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...