CVE-2026-23216 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23216 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23126 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23126 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23204 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23204 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23102 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23102 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23089 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23089 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-58190 affecting package kubernetes for versions less than 1.30.10-21

CVE-2025-58190 affecting package kubernetes for versions less than 1.30.10-21. A patched version of the package is available...

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6

CVE-2025-47911 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...

CVE-2025-0838 affecting package abseil-cpp for versions less than 20240116.0-3

CVE-2025-0838 affecting package abseil-cpp for versions less than 20240116.0-3. A patched version of the package is available...

CVE-2025-11065 affecting package skopeo for versions less than 1.14.4-8

CVE-2025-11065 affecting package skopeo for versions less than 1.14.4-8. A patched version of the package is available...

CVE-2025-68114 affecting package rust for versions less than 1.90.0-4

CVE-2025-68114 affecting package rust for versions less than 1.90.0-4. A patched version of the package is available...

CVE-2025-38232 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-38232 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-40164 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-40164 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23060 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23060 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-28421 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28421 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-29174

Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, Craft Commerce is vulnerable to SQL Injection in the inventory levels table data endpoint. The sort0direction and sort0sortField parameters are concatenated directly into an addOrderBy clause without any validation or...

CVE-2026-29172

Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, Craft Commerce is vulnerable to SQL Injection in the purchasables table endpoint. The sort parameter is split by | and the first part column name is passed directly as an array key to orderBy without whitelist...

GO-2026-4617 Gogs: Release tag option injection in release deletion in gogs.io/gogs

Gogs: Release tag option injection in release deletion in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please sugge...

DHS Ousts CBP Privacy Officers Who Questioned ‘Illegal’ Orders

Department of Homeland Security leaders removed top privacy officers who objected to mislabeling government records to block their public release, WIRED has learned...

CVE-2026-22614

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has bee...

CVE-2026-31793 iccDEV has a SEGV in CIccCalculatorFunc::ApplySequence()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a segmentation fault due to invalid/wild pointer read in CIccCalculatorFunc::ApplySequence causing denial of service. This vulnerability is fixed in 2.3.1.5...