ROOT-OS-DEBIAN-12-CVE-2026-64437 CVE-2026-64437 in linux - Patched by Root

Root has patched CVE-2026-64437 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46324 CVE-2026-46324 in linux - Patched by Root

Root has patched CVE-2026-46324 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-39931 CVE-2025-39931 in linux - Patched by Root

Root has patched CVE-2025-39931 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-3847 CVE-2021-3847 in linux - Patched by Root

Root has patched CVE-2021-3847 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in linux - Patched by Root

Root has patched CVE-2026-31655 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68371 CVE-2025-68371 in linux - Patched by Root

Root has patched CVE-2025-68371 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-43317 CVE-2026-43317 in linux - Patched by Root

Root has patched CVE-2026-43317 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53072 CVE-2026-53072 in linux - Patched by Root

Root has patched CVE-2026-53072 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37797 CVE-2025-37797 in linux - Patched by Root

Root has patched CVE-2025-37797 in the linux package for Root:Debian:12. Multiple fixed versions available...

EUVD-2026-53711

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack...

CVE-2026-15459

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that keys the WDP-AUTH request signature is empty, making the...

CVE-2026-18996

Technical details about CVE-2026-18996 are not publicly available in the provided documents. Monitor for updates from the project and authorities.

CVE-2026-18993 NousResearch hermes-agent Memory Toolset model_tools.py access control

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...

EUVD-2026-53704

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged Upload Record via Select Field in all versions up to, and including, 1.56.1 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-16636

The CVE concerns FluentSMTP

CVE-2026-18991

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component sendfile. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been...

CVE-2026-18991

Nanacoai NanoClaw

CVE-2026-18980

Affected software: nearai ironclaw (up to 0.29.1). Vulnerable component: function classify_command_risk in src/tools/builtin/shell.rs. Root cause: command injection due to manipulation of input handling. Impact: remote attack possibility; exploitation is publicly available (exploit maturity: PROO...

CVE-2026-18976 NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment

A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function gettooldefinitions of the file agent/agentinit.py of the component disabledtoolsets Handler. This manipulation causes incorrect privilege assignment. The attack may be initiated remotely. The explo...

CVE-2026-18973

A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...