28167 matches found
CVE-2026-77120: Improper Neutralization of Special Elements used in an OS Command
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating syste...
September 8, 2026-KB5126052 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2, Windows 11, version 25H2 and Microsoft server operating system 24H2
September 8, 2026-KB5126052 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2, Windows 11, version 25H2 and Microsoft server operating system 24H2 Applies To .NET Note Release Date: September 8, 2026 Version: .NET Framework 3.5 and 4.8.1 The September 8, 2026 update...
CVE-2026-16028
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...
ROOT-OS-DEBIAN-12-CVE-2026-58010 CVE-2026-58010 in glib2.0 - Patched by Root
Root has patched CVE-2026-58010 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-1502 CVE-2026-1502 in python3.11 - Patched by Root
Root has patched CVE-2026-1502 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-82312
OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...
CVE-2026-81738
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...
PAN-OS Uninitialized Resource Unauthorized Access
The vulnerability of the PAN-OS operating system is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
Reachable Assertion
Overview Affected versions of this package are vulnerable to Reachable Assertion through the BPF interpreter process. An attacker can cause the termination of the operating system process by supplying a crafted filter program containing an invalid opcode. Remediation A fix was pushed into the...
CVE-2026-80846
In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...
CVE-2026-85610 OpenPanel before 2.3.0 Remote Code Execution via chart formulas
OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with read access to execute arbitrary code by recovering the native JavaScript Function constructor through mathjs matrix objects. Attackers can use the recovered constructor to loa...
CVE-2026-9853
CVE-2026-9853 is a vulnerability in Hitachi Energy's SYS600 application that allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without completing SYS600's own authentication. This effectively bypasses the intended ac...
ROOT-OS-DEBIAN-11-CVE-2026-12912 CVE-2026-12912 in tiff - Patched by Root
Root has patched CVE-2026-12912 in the tiff package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-3164 CVE-2023-3164 in tiff - Patched by Root
Root has patched CVE-2023-3164 in the tiff package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34589 CVE-2026-34589 in openexr - Patched by Root
Root has patched CVE-2026-34589 in the openexr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-48074 CVE-2025-48074 in openexr - Patched by Root
Root has patched CVE-2025-48074 in the openexr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34589 CVE-2026-34589 in openexr - Patched by Root
Root has patched CVE-2026-34589 in the openexr package for Root:Debian:11. Multiple fixed versions available...