ipv6: account for fraggap on the paged allocation path

...

SUSE CVE-2026-53362

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

MINI-X868-7GGM-6V54

Bulletin has no description...

CVE-2026-53362

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

CVE-2026-53362

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...

Exploit for Improper Input Validation in Apache Activemq

Apache ActiveMQ Classic — RCE Research Private research archi...

CVE-2026-13443

creationtimestamp| type| source ---|---|--- 2026-07-04 05:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpscjxubzp2j...

CVE-2026-58426

creationtimestamp| type| source ---|---|--- 2026-07-03 22:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprl4pas652r 2026-07-04 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116858764503193267 2026-07-04 00:01:05+00:00| seen|...

CVE-2026-57991

Microsoft Edge (Chromium-based) is affected by CVE-2026-57991 due to Improper link resolution before file access ("link following"). The issue could allow an unauthenticated attacker to disclose information over a network. The vulnerability affects the Edge Chromium rendering/file handling path a...

CVE-2026-14604

Technical details about CVE-2026-14604 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-14631

Vulnerability overview: CVE-2026-14631 affects webpack-dev-server up to version 5.2.5. An unauthenticated peer sending a normal HTTP request with a malformed Host header or a WebSocket upgrade to /ws with a malformed Origin header triggers an uncaught exception in the host-validation path, crashi...

CVE-2026-14631 webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or a WebSocket upgrade to the default /ws endpoint with a malformed Origin header. The malformed value causes an uncaught...

CVE-2026-14620 webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that perform state-changing actions on any GET request without verifying that the request originated from the dev server's own page. Any websi...

CVE-2026-46467

creationtimestamp| type| source ---|---|--- 2026-07-03 14:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqrgftbdq2x 2026-07-04 04:06:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mps6q2e5dk2c...

MINI-H4RG-6RXG-RCJM

Bulletin has no description...

CVE-2026-56015

CVE-2026-56015 affects Net::IP::LPM v1.10 and earlier for Perl, enabling a heap out-of-bounds read when adding prefixes with unbounded lengths. The bug arises in addPrefixToTrie() which walks the prefix buffer by prefix_length bits without verifying it against the address width (4 bytes IPv4, 16 ...

EUVD-2026-41541

Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length. add passes the prefix string to the trie builder addPrefixToTrie without checking it against the address width. addPrefixToTrie then walks the prefix buffer by prefixlength bits, reading...

CVE-2026-11398

creationtimestamp| type| source ---|---|--- 2026-07-03 10:06:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqcdlwd2t2n 2026-07-03 22:59:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprnl4atjl23 2026-07-04 00:16:07+00:00| seen|...

CVE-2026-11398 LatePoint <= 5.6.1 - Missing Authorization to Unauthenticated Arbitrary Customer Data Modification via process_step_customer() Booking Form Customer Step

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-9148

The Comments – wpDiscuz plugin for WordPress (affected: versions up to 7.6.56) is vulnerable to Stored XSS via the guest commenter field Website. The root cause is insufficient output escaping in getCommentAuthor(), which interpolates the stored comment_author_url directly into single-quoted HTML...