CVE-2026-6175

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

GHSA-5JV8-H7QH-RF5P vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

CVE-2026-6912

creationtimestamp| type| source ---|---|--- 2026-04-24 19:23:03+00:00| published-proof-of-concept| Telegram/KzwiN8QhKmj3TuqYtGeX9siiyoqjfAY8f7zipbEz0Wiqhk...

CVE-2026-33694

creationtimestamp| type| source ---|---|--- 2026-04-23 21:25:56+00:00| seen| Telegram/vObnyALXsyXLFJkccB0eoKwgfsCPRSJaAgpRRcRjZAUW0s 2026-04-24 10:30:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116459217864728311 2026-04-24 13:35:26+00:00| seen|...

CVE-2026-33694

This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYST...

CVE-2026-35351

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

CVE-2026-35363

A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the current directory. While the utility correctly refuses to delete . or .., it fails to recognize equivalent paths with trailing slashes, such as ./ or .///. An accidental or...

CVE-2026-35342

The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the...

CVE-2026-35346

The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::fromutf8lossy, which replaces invalid UTF-8 byte sequences with the Unicode replacement character U+FFFD. This behavior differs from GNU comm, whic...

CVE-2025-58226

creationtimestamp| type| source ---|---|--- 2026-04-23 11:38:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-58226.yaml 2026-04-25 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukgv3w2f...

CVE-2026-6903

creationtimestamp| type| source ---|---|--- 2026-04-23 11:16:50+00:00| seen| Telegram/ktjXxLVyV5R1pEh3LQjVpZ79M83Qn9HPDb5Pz3RQONWfCA 2026-04-23 21:45:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6ycevudf2t...

CVE-2026-42183

creationtimestamp| type| source ---|---|--- 2026-04-23 08:17:54+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-p4gq-3vxj-f4jq 2026-05-09 05:16:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfijpclhw2i...

GHSA-WG33-J3RV-JQ72

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng...

GHSA-M2CX-GPQF-QF74 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines, tekton-chains...

CVE-2026-41170

creationtimestamp| type| source ---|---|--- 2026-04-22 23:20:48+00:00| seen| Telegram/bXcnMEVg4MqmghIUy-Ivhp7SDQD9oC-u5oUbMXpQMRT1SlU...

CVE-2026-41167

creationtimestamp| type| source ---|---|--- 2026-04-22 21:24:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4gnbxyzv2q 2026-04-22 22:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116450723807217963 2026-04-22 22:30:33+00:00| seen|...

CVE-2026-34415

creationtimestamp| type| source ---|---|--- 2026-04-22 20:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4bzgzyko2r 2026-04-22 21:21:17+00:00| published-proof-of-concept| Telegram/he0Z1Xxb4PMjQ5eYVBKNYLHtJZg-G0d3XJmG72co7nWMuw 2026-04-23 07:30:28+00:00| seen|...

CVE-2026-41468

creationtimestamp| type| source ---|---|--- 2026-04-22 20:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4bz7iiyc2k 2026-04-22 21:21:17+00:00| published-proof-of-concept| Telegram/he0Z1Xxb4PMjQ5eYVBKNYLHtJZg-G0d3XJmG72co7nWMuw 2026-04-23 09:00:28+00:00| seen|...

CVE-2026-31508

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the Fixes tag below changed the teardown code for OVS ports to no longer unconditionally take the RTNL. After this change, the netdevdestroy...

CVE-2026-31488

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...