CVE-2026-23209 macvlan: fix error recovery in macvlan_common_newlink()

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlancommonnewlink valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link set up dev p1 ip link set up dev p2 ip lin...

EUVD-2026-5839

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlancommonnewlink valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link set up dev p1 ip link set up dev p2 ip lin...

CVE-2026-23209

CVE-2026-23209 is a Linux kernel macvlan bug. The issue occurs in macvlan when creating a new link with MACVLAN_MODE_SOURCE and MACVLAN_MACADDR_ADD/SET and the lower device already has a macvlan port, causing a use-after-free after a failed register_netdevice() in the create path. Upstream kernel...

CVE-2026-23209 macvlan: fix error recovery in macvlan_common_newlink()

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlancommonnewlink valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link set up dev p1 ip link set up dev p2 ip lin...

GHSA-7587-4WV6-M68M

creationtimestamp| type| source ---|---|--- 2026-02-14 12:10:27+00:00| seen| https://gist.github.com/alon710/f65205088d9ff964ef46286a174e62eb 2026-02-14 12:25:06+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3meszbueg452h...

CVE-2026-1843

creationtimestamp| type| source ---|---|--- 2026-02-14 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a 2026-02-14 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116068163886097864...

CVE-2026-26335

creationtimestamp| type| source ---|---|--- 2026-02-14 03:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116066748378844749 2026-02-14 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3merzqgk5s32h 2026-02-17 07:10:48+00:00| seen|...

CVE-2026-26333

creationtimestamp| type| source ---|---|--- 2026-02-14 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116066394394150139 2026-02-14 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meruphh3tp2f...

CVE-2026-26273

creationtimestamp| type| source ---|---|--- 2026-02-13 21:37:41+00:00| published-proof-of-concept| https://github.com/idno/idno/security/advisories/GHSA-78wq-6gcv-w28r 2026-02-14 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3merpow5z3f2s 2026-02-14 00:00:46+00:00| seen|...

CVE-2026-26020

creationtimestamp| type| source ---|---|--- 2026-02-13 03:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mepjbiid2y22 2026-02-13 03:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116061086026902002...

CVE-2026-26069

creationtimestamp| type| source ---|---|--- 2026-02-13 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mep77ylncm2m 2026-02-13 00:00:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/116060379050409593...

CVE-2025-41117

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117 XSS in Grafana Explore stack trace

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117 XSS in Grafana Explore stack trace

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2026-26215

creationtimestamp| type| source ---|---|--- 2026-02-12 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116056131573720038 2026-02-12 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mencuhqapk2y 2026-02-12 14:20:52+00:00| seen|...

CVE-2026-20617

creationtimestamp| type| source ---|---|--- 2026-02-12 04:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055777778769880 2026-02-12 04:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3men5tlbujs2b...

CVE-2026-1729

creationtimestamp| type| source ---|---|--- 2026-02-12 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3memyslhib72e 2026-02-12 03:00:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055423747881235 2026-02-12 07:00:35+00:00| seen|...

authentik 数据伪造问题漏洞

Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 2025.8.6, 2025.10.4, and 2025.12.4 had a data manipulation vulnerability. This vulnerability arises from the use of certain configured SAML sources, allowing attackers to inject...