CVE-2026-101283

iperf3 3.20–3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22...

CVE-2026-101276

iperf3 3.21 esnet/iperf contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog servertimerproc frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperfstream; fixed in 3.22...

CVE-2026-103399

A flaw was found in SoupServer libsoup. When an HTTP/1.x client send...

CVE-2026-19553

ssl.SSLContext.wrapbio didn't require the serverhostname argument...

CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call t...

CVE-2026-103436

apcupsd through 3.14.14 discloses uninitialized stack memory in getups...

CVE-2026-103432

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in g...

CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. A...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allo...

CVE-2026-92899

Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so...

CVE-2026-92121

In the WSS4J streaming StAX code, a signature reference using the WS...

CVE-2026-89238

WSS4J EncryptedHeader child confusion could promote an attacker-contro...

CVE-2026-88920

An authentication bypass in the DOM security processor in Apache WSS4J...

CVE-2026-87830

In the StAX streaming WS-SecurityPolicy validator, certain relative or...

CVE-2026-85532

Apache WSS4J accepted attacker-controlled derived-key lengths and offs...

CVE-2026-77185

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0...

CVE-2026-93994

Apache MINA SSHD is a Java library for client-side and server-side SSH...

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apa...

CVE-2026-93995

Improper input validation in sshd-git in Apache MINA SSHD, versions up...

CVE-2026-93996

Uncontrolled resource consumption in component ssd-scp in Apache MINA...

CVE-2026-94002

Possible memory exhaustion in SFTP clients DefaultSftpClient in comp...

CVE-2026-94029

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and...

CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in...

CVE-2026-92873

Pgpool-II contains an incorrect implementation of an authentication al...

CVE-2026-92872

Pgpool-II inserts sensitive information into log file, which may allow...

CVE-2026-92871

A NULL pointer dereference vulnerability exists in Pgpool-II, which ma...

CVE-2026-92870

A stack-based buffer overflow vulnerability exists in Pgpool-II, which...

CVE-2026-92869

An out-of-bounds write vulnerability exists in Pgpool-II, which may al...

CVE-2026-92868

An improper certificate validation vulnerability exists in Pgpool-II,...

CVE-2026-92867

An out-of-bounds write vulnerability exists in Pgpool-II , which may a...

CVE-2026-103111

GHSA-r9hj-j2rw-4q3m: PCRE2: out-of-bounds write in JIT matching with large stack allocations...

CVE-2026-102621

A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and migh...

CVE-2026-74225

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6parseoptions that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6 ADVERTISE or REPLY packets during netboot to corrupt memory and crash the...

CVE-2026-74221

U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadlinkreply function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader...

CVE-2026-74222

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpcrecvcb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERRBUF instead of ERRABRT, causing the TCP input path to access released memory and...

CVE-2026-74220

U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadreply function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-102620

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be...

CVE-2026-102253

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102305

UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102314

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102330

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102321

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102310

Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102302

Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102320

Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...