CVE-2026-88265

crun (a container runtime) is affected by a flaw where, after pivot_root , reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, allowing the container to change that file's ownership (chown). This effectively permits a host bind-mount write and chown from ...

CVE-2026-42804

A stack-based buffer overflow exists in the Bosch Sensortec BHI360 SensorAPI (C-Library) , affecting versions up to and including commit d6b200416a. The flaw is in bhi360_parse_debug_message() (bhi360_parse.c, lines 1852–1875), where the first payload byte of a debug frame is used as a length and...

CVE-2026-8323

An open redirect vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (versions before Version 2 ) allows an attacker to redirect users to an untrusted site, thereby faking the source of data . The CNA-assigned CVSS 3.1 score is 9.3 (CRITICAL) with vector CVSS:3.1/AV:N/...

CVE-2026-82791

This CVE is currently in reserved status with no public technical details available beyond a JVN sighting reference. Monitor for updates once the details are publicized.

CVE-2026-82792

CVE-2026-82792 has been reserved with no public technical details yet. A sighting link to a JVN advisory exists, but no component, root cause, or impact is provided. Action: monitor for updates as details are expected upon publication.

CVE-2026-82793

This CVE candidate is reserved and lacks public technical details in the provided documents. The only related source is a JVN sighting. Monitor for updates once the organization publishes details.

CVE-2026-82790

CVE-2026-82790 is currently reserved with no publicly available technical details in the provided documents. A JVN sighting exists but does not disclose specifics. Monitor for updates as details are expected to be published when the vulnerability is announced.

CVE-2026-82786

CVE-2026-82786 has been reserved and no technical details (affected product, root cause, or impact) are publicly available in the provided documents. A sighting on the JVN feed has been recorded. Action: monitor for updates as the reserving organization publishes the vulnerability.

CVE-2026-82784

Technical details for CVE-2026-82784 have not yet been publicized. The entry is in a reserved state, with only a JVN sighting recorded. Monitor for updates when the candidate is announced.

CVE-2026-82783

This CVE has been reserved but no technical details are publicly available in the provided documents. A sighting referencing a JVN advisory exists, but product, impact, and remediation details remain unpublished. Monitor for updates.

CVE-2026-82782

CVE-2026-82782 is a reserved candidate with no public technical details yet. A JVN sighting is noted, but no product, component, or impact information is available in the provided documents. Monitor for updates as the disclosing organization publicizes the issue.

CVE-2026-82781

This CVE is currently in a reserved state, meaning an organization or individual has claimed the identifier but has not yet publicized details. No concrete information about the affected product, root cause, or impact is available. Monitor for updates.

CVE-2026-82780

This CVE entry is reserved with no public technical details available in the provided documents. A linked JVN advisory (JVNVU96551518) is referenced. Monitor for further updates once details are published.

CVE-2026-82778

Technical details for CVE-2026-82778 are not yet publicly available; it remains a reserved candidate. A sighting reference to JVN (Japan Vulnerability Notes) has been recorded. Action: monitor for updates as the disclosing organization publishes details.

CVE-2026-82779

CVE-2026-82779 is a reserved candidate with no public technical details yet. A JVN sighting exists, but the affected product, root cause, and impact are not disclosed. Monitor for updates as the reserving organization announces the vulnerability.

CVE-2026-82777

Technical details for CVE-2026-82777 are not yet publicly available; the entry is currently reserved pending announcement. A sighting was observed via JVN , but no product, impact, or fix information has been published. Monitor for updates.

CVE-2026-82788

This CVE has been reserved but not yet publicized. A sighting on JVN indicates an associated advisory exists, but no concrete technical details (product, root cause, impact) are provided in the current documents. Monitor for updates.

CVE-2026-82776

This CVE candidate is currently reserved with no public technical details available. A sighting from JVN (Japan Vulnerability Notes) confirms it is being tracked, but the affected product, root cause, and impact are not yet disclosed. Monitor for updates.

CVE-2026-82775

CVE-2026-82775 is currently reserved; no technical details are publicly available in the provided documents. The only connected record is a CIRCL sighting referencing a JVN source. Monitor for updates when the candidate is publicized.

CVE-2026-82774

Technical details for CVE-2026-82774 are not yet publicly available; the candidate remains in reserved status. A sighting references JVN (JVNVU96551518), but no concrete product, cause, or impact is provided. Monitor for updates.

CVE-2026-82773

The CVE entry for CVE-2026-82773 is currently a reserved candidate with no public technical details available in the provided documents. A sighting at JVN has been recorded, but no product, component, or impact information is yet disclosed. Action: monitor for updates.

CVE-2026-82785

This CVE has been reserved and no concrete technical details (affected product, root cause, or impact) are publicly available yet. A JVN sighting was recorded on 2026-09-10. Monitor for further updates.

CVE-2026-82789

Technical details for CVE-2026-82789 are not yet publicly available; the entry is currently reserved. A sighting from JVN (Japan Vulnerability Notes) has been recorded. Action: monitor for updates as details are published.

CVE-2026-82787

CVE-2026-82787 is a reserved candidate with no publicly available technical details. A JVN sighting exists, but no product, impact, or fix information has been published yet. Action: monitor for vendor disclosure.

CVE-2026-82762

CVE-2026-82762 is currently a reserved candidate with no public technical details. A sighting from JVN (JVNVU99009004) confirms an announcement is pending. Monitor for updates as details are expected once publicized.

CVE-2026-82772

CVE-2026-82772 is currently a reserved placeholder with no publicly disclosed technical details. A sighting from JVN (Japan Vulnerability Notes) has been recorded, but no product, component, or impact information is available yet. Monitor for updates.

CVE-2026-82770

CVE-2026-82770 is currently in a reserved state with no publicly available technical details. The only known reference is a JVN (Japan Vulnerability Notes) listing. Action: monitor for updates as the candidate is published.

CVE-2026-82767

CVE-2026-82767 is currently a reserved candidate with no public technical details. A sighting has been logged via JVN (Japan Vulnerability Notes), indicating an associated advisory exists, but no affected product, root cause, or impact is yet disclosed. Action: monitor for updates as details are ...

CVE-2026-82768

CVE-2026-82768 is currently a reserved candidate with no public technical details provided. A sighting referencing JVN exists, but no affected product, root cause, or impact is yet disclosed. Monitor for updates as the entry is published.

CVE-2026-82771

CVE-2026-82771 is currently a reserved candidate with no public technical details yet. A sighting on the Japan Vulnerability Notes (JVN) indicates it is being tracked, but affected products, root cause, and impact are not provided. Action: monitor for updates as details are published.

CVE-2026-82769

CVE-2026-82769 is currently in reserved status with no publicly available technical details. A JVN sighting exists, but the affected product, root cause, and impact are not yet disclosed. Monitor for updates as details are expected upon public announcement.

CVE-2026-82766

CVE-2026-82766 is currently a reserved candidate with no publicly disclosed technical details. The only connected data is a JVN sighting. Action: monitor for updates when details are published.

CVE-2026-82765

CVE-2026-82765 is currently a reserved candidate with no public technical details available. The only linked reference points to a JVN entry. Monitor for updates when the candidate is publicized.

CVE-2026-82764

CVE-2026-82764 is currently a reserved candidate with no public technical details. JVN sightings exist but lack product or impact specifics. Monitor for updates as the candidate is finalized.

CVE-2026-82763

CVE-2026-82763 is currently reserved with no publicly available technical details. A JVN sighting has been recorded, but no product, root cause, or impact information is yet provided. Monitor for future updates.

CVE-2026-82796

CVE-2026-82796 is currently a reserved candidate with no public technical details. A sighting from JVN (JVNVU97753461) has been recorded, but no product, root cause, or impact information is yet available. Action: monitor for updates.

CVE-2026-82795

CVE-2026-82795 is currently reserved with no public technical details yet. A JVN sighting exists, but no affected product, component, or impact is described. Monitor for updates when the vendor publishes the full advisory.

CVE-2026-82794

CVE-2026-82794 is currently a reserved candidate with no public technical details available in the provided documents. A sighting reference to JVN (JVNVU97753461) exists but no product, root cause, or impact information is yet published. Action: monitor for updates once the reserving organization...

CVE-2026-88264

crun , a container runtime, is affected by a /dev/console symlink-follow flaw (CVE-2026-88264). When the container configuration does not assign a dedicated mount to /dev, terminal setup can redirect /dev/console onto an attacker-controlled path, including via the read-only-rootfs bind-mount fall...

CVE-2026-13745

CVE-2026-13745 is an arbitrary code execution vulnerability in Gemini CLI and its associated GitHub Action (google-github-actions/run-gemini-cli). An unprivileged attacker can exploit untrusted local .env files that override the GEMINI_CLI_HOME environment variable to gain code execution within t...

CVE-2026-88290

GeoVision GV-LPC2211 V1.14 (260903) is affected by an unauthenticated resource-exhaustion vulnerability in its VLSVR service. Remote clients can declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, leading to exhaustion of memory, connection, and worker resources . The ...

CVE-2026-88289

GeoVision GV-LPC2211 V1.14 (260903) (also referenced as GV-LPC2011) is affected by multiple pre-authentication stack buffer overflows in its VLSVR request handlers . The root cause is a failure to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffer...

CVE-2026-88288

GeoVision GV-LPC2211 (also listed as GV-LPC2011) version V1.13 is affected by an arbitrary file read vulnerability in the BKDownloadLink.cgi endpoint. The root cause is a failure to restrict the filename parameter supplied to the CGI script, which allows a remote user with valid web credentials t...

CVE-2026-88287

GeoVision GV-LPC2211 V1.13 (also affecting GV-LPC2011 per the title) is vulnerable to a stack-frame overflow in its ONVIF WS-Discovery implementation. The root cause is a failure to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker ...

CVE-2026-84042

crun is a lightweight OCI container runtime. This flaw affects builds that include libkrun with passt networking enabled (krun.use_passt). When a container is started rootful , crun can execute an attacker-controlled payload embedded in the container image with host root privileges , effectively ...

CVE-2026-88286

GeoVision GV-LPC2211 V1.13 (also referenced as GV-LPC2011) contains a denial of service vulnerability in its PTZ connection-state management . An unauthenticated remote client can exploit improper handling of PTZ connection state to block the accept loop , preventing new PTZ connections and effec...

CVE-2026-88285

GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service that requires no authentication, allowing remote clients to retrieve PTZ information and issue PTZ or raw serial commands. The underlying cause is the lack of an authentication mechanism on the service itself. The CVSS v3...

CVE-2026-88284

GeoVision GV-LPC2211 version 1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker, resulting in a denial of service. The vulnerability is scored CVSS 4.9 (Medium) with an attack ve...

CVE-2026-88283

GeoVision GV-LPC2211 V1.13 (and GV-LPC2011) is affected by a stack-frame overflow in the ONVIF CreateUsers service. The vulnerability is caused by a failure to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and ...

CVE-2026-88282

GeoVision GV-LPC2211 (LPC series) V1.13 contains a stored command injection vulnerability in its FTP username field. An administrator who sets an FTP username containing shell metacharacters can trigger arbitrary root command execution during a subsequent FTP-account update operation. The vulnera...