CVE-2026-89886

A flaw was found in the Intel IPU6 media driver within the Linux kernel. This vulnerability occurs when the driver fails to properly clean up resources during an error in processing device connections. An attacker could potentially exploit this by triggering a specific error condition, leading to...

CVE-2026-89872

A flaw was found in the Linux kernel's v4l2-fwnode media subsystem. A local attacker or a malicious application could exploit this by failing to properly release a fwnode reference in the v4l2fwnodeparselink function. This resource leak could lead to system instability or a denial of service DoS,...

CVE-2026-89862

A flaw was found in the Linux kernel's qla2xxx SCSI driver. A local attacker could exploit this vulnerability by triggering an error in the qla28xxvalidateflashimage function. Due to incorrect error handling, Block SCSI Generic BSG jobs are not properly completed, causing them to remain active an...

CVE-2026-89820

A flaw was found in the Linux kernel's drm/amd/display component. During a GPU reset, if certain functions fail after acquiring a dclock, the lock is not properly released. This can lead to a dclock leak, causing subsequent attempts to acquire the lock to hang, resulting in a Denial of Service Do...

CVE-2026-89816

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. This memory leak occurs when a signal is sent to a thread using DRMMODEPAGEFLIPEVENT, specifically when drmcrtccommit is not properly put in drmatomichelpercrtcdestroystate. A local attacker could potentially exploit...

CVE-2026-90407

A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability arises from insufficient validation of firmware input, specifically the numvdevs field, which is used as a loop bound without proper size checks. An attacker could exploit this to trigger an out-of-bounds read,...

CVE-2026-96543

An out-of-bounds heap write flaw was found in GIMP's PVR image loader. When loading a crafted non-square PVR texture, pvrdecodetwiddle can write attacker-controlled pixel data beyond the end of a correctly allocated heap buffer because the destination offset is not bounds-checked. A local attacke...

CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

CVE-2026-78253

A flaw was found in Qt. An attacker can exploit uncontrolled recursion in the QXmlStreamReader::readElementText function by providing a specially crafted XML document. This can lead to a denial of service DoS, causing the application to crash due to stack exhaustion...

CVE-2026-83602

A flaw was found in Netdata, an open-source observability tool. An unauthenticated remote attacker can bypass IP allowlist restrictions by sending PUT requests to the /api/v3/settings endpoint. This allows the attacker to write arbitrary data to a settings file, potentially leading to a Denial of...

CVE-2026-83601

A flaw was found in Netdata. An authenticated child agent can send an oversized DIMENSION SLOT value. This oversized value can lead to an integer overflow during memory allocation, causing a subsequent write operation to go beyond the allocated buffer. This out-of-bounds write can crash the paren...

CVE-2026-83600

A flaw was found in Netdata. An authenticated child agent can send an oversized chart slot value, leading to an attempt to allocate a very large memory array. This allocation failure causes the parent Netdata agent to crash, resulting in a Denial of Service DoS by repeatedly disabling centralized...

CVE-2026-83599

A flaw was found in Netdata. An unauthenticated remote attacker can exploit a vulnerability in the WebSocket server's decompression mechanism. By sending small, highly compressed messages, the attacker can cause the server to allocate excessive amounts of memory. This can lead to the exhaustion o...

CVE-2026-68493

A flaw was found in Nextcloud. A malicious logged-in user could potentially guess a highly complex unique identifier. This guessing could allow the user to retrieve a list of memberships for a circle they are not authorized to access, leading to information disclosure...

CVE-2026-76803

A flaw was found in Nuclei, a vulnerability scanner. The nuclei/mysql JavaScript library fails to enforce its local file access restrictions when processing a specific MySQL connection option. This allows a remote attacker, by controlling a malicious MySQL endpoint, to trick the scanner into...

CVE-2026-93337

A flaw was found in NetworkManager-l2tp. This improper input validation vulnerability allows local users with permissions to create VPN connections to inject arbitrary directives into the pppd Point-to-Point Protocol Daemon options file. By supplying specially crafted mru or mtu property values, ...

CVE-2026-84975

A flaw was found in PJSIP, a multimedia communication library, specifically within its OpenSSL and GnuTLS Transport Layer Security TLS backends. This vulnerability allows a remote attacker to bypass server identity verification by using a specially crafted TLS certificate containing an embedded...

CVE-2026-54633

A flaw was found in PoDoFo, a C++ PDF manipulation library. Processing a specially crafted PDF file containing an Indexed color-space image can lead to a heap out-of-bounds read. This vulnerability occurs in the PdfColorSpaceFilterIndexed::FetchScanLine function due to insufficient validation of...

CVE-2026-77396

A flaw was found in PJSIP. A heap buffer overflow vulnerability exists in the AVI Audio Video Interleave parser. A remote attacker could exploit this by providing a specially crafted AVI file. When an application processes this file, it can lead to memory corruption, potentially allowing the...

CVE-2026-83603

A flaw was found in Netdata. The ndsudo helper command, which operates with root privileges, can be exploited by a low-privileged Netdata service account. This account can direct the root fail2ban-client to a malicious UNIX socket. Consequently, attacker-controlled code can be executed with root...

CVE-2026-71543

A flaw was found in OpenBao, an open-source identity-based secrets management system. Templated Access Control List ACL, Public Key Infrastructure PKI, and Secure Shell SSH policies could substitute attacker-controlled identity data without properly rejecting syntax-significant characters. This...

CVE-2026-48977

A flaw was found in OpenSlide, a C library for reading whole slide image files. A remote attacker could exploit a vulnerability in the parselevel0xml function by providing a specially crafted Ventana BIF file with nonpositive row or column tile counts. This manipulation leads to attacker-controll...

CVE-2026-62943

A flaw was found in btrbk. btrbk's sshfilterbtrbk.sh script, used for creating snapshots and remote backups of Btrfs subvolumes, constructs an allowlist with an incomplete command match. This allows a user, restricted through an authorizedkeys forced command, to append additional commands after a...

CVE-2026-54634

A flaw was found in Hamlib, a library for controlling ham radio equipment. A remote, unauthenticated attacker could exploit a vulnerability in the rigctld sendraw command. This flaw involves writing data beyond the intended memory boundary stack out-of-bounds write, which could cause the daemon t...

CVE-2026-53940

A flaw was found in Conda, a system-level binary package and environment manager. An unvalidated entry-point command in a noarch:python package's metadata allows a malicious package to use path traversal. This enables writing files outside the intended installation directory or overwriting existi...

CVE-2026-77164

A flaw was found in Nextcloud. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability in the Circles component. By sending a specially crafted request to the public endpoints, the attacker can force the server to make GET requests to internal network...

CVE-2026-87902

A flaw was found in WordPress. An unauthenticated attacker can exploit a vulnerability in the getpagetemplate function's page-template resolution. This allows the attacker to include a chosen readable local PHP file from outside the active theme directories. If specific server and active theme...

CVE-2026-95814

A flaw was found in Vaultwarden. This vulnerability allows revoked and not-yet-confirmed organization members to bypass authorization checks. By exploiting missing status filters in specific access-restriction queries, these unauthorized members can retain read, write, delete, and attachment acce...

CVE-2026-93987

A flaw was found in rclone. The rclone serve docker volume plugin contains a path traversal vulnerability. A highly privileged attacker, by submitting a crafted Docker VolumeDriver.Create request with a malicious volume name, can cause the rclone plugin process to create a directory and mount a...

CVE-2026-79079

A flaw was found in CrossWire Xiphos. A local attacker could exploit this vulnerability by manipulating specific components related to URL handling and menu popups. This could lead to arbitrary code execution on the affected system...

CVE-2026-91018

A flaw was found in lwIP Lightweight IP, a widely used open-source TCP/IP stack. This double free vulnerability allows an adjacent network attacker to potentially execute arbitrary code, corrupt memory, or cause a denial of service DoS on the affected system. The most severe impact is the...

CVE-2026-81884

A flaw was found in radare2. A remote attacker could exploit a heap out-of-bounds read vulnerability in the Mach-O LCDATAINCODE parser. This occurs when opening a specially crafted Mach-O file with the non-default bin.verbose option enabled, leading to a read beyond the allocated buffer. This...

CVE-2026-93986

A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to craft special names in server and third-party listing responses. These crafted names, containing directory traversal sequences, could potentially enable writing outside the intended destination directory...

CVE-2026-84449

A flaw was found in libheif, a HEIF and AVIF file format decoder and encoder. An integer overflow can occur when processing extremely large RGB images, specifically during the calculation of image-plane strides. This overflow leads to an invalid memory access during the RGB-to-YCbCr color...

CVE-2026-81882

A flaw was found in radare2. The binary property-list Unicode parser did not properly terminate strings, leading to an underallocation of memory. A local attacker could exploit this by providing specially crafted binary property-list data and executing specific commands pFB or pFBj. This could...

CVE-2026-76805

A flaw was found in Nuclei, a vulnerability scanner. A malicious scan target can exploit a vulnerability in the Dynamic Application Security Testing DAST/fuzz mode where response content is evaluated twice and reinterpreted as template syntax. This allows the scan target to disclose sensitive...

CVE-2026-76804

A flaw was found in Nuclei, a vulnerability scanner. An untrusted workflow, which is a set of instructions for the scanner, could bypass a security control designed to restrict file access. This bypass allows the workflow to load templates that read local files from the scanner host, even when fi...

CVE-2026-76802

A flaw was found in Nuclei, a vulnerability scanner. The Dynamic Application Security Testing DAST template loading process fails to enforce signature checks for code templates. This allows an attacker to craft a malicious template containing unsigned code, which, when processed by an operator...

CVE-2026-61570

A flaw was found in MPXJ. The MerlinReader component, when processing XML from a Merlin project SQLite database, is vulnerable to an XML External Entity XXE attack due to default settings that enable doctype declarations and external entities. A remote attacker could exploit this by providing a...

CVE-2026-96446

A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the authorization process to skip certain steps if a user is already logged in. Due to this bypass, the security rule that...

CVE-2026-94057

A flaw was found in Exim. A remote attacker could exploit a vulnerability known as SMTP smuggling by sending crafted data after a rejection during the DATA processing phase. This manipulation could lead to a mismatch between the intended sent message and the actual received message, potentially...

CVE-2026-84448

A flaw was found in libheif, a library for decoding and encoding HEIF and AVIF image files. An application that uses the libheif writer API to construct region metadata may be vulnerable to a heap out-of-bounds read. This occurs because the heifregionitemaddregioninlinemaskdata function accepts...

CVE-2026-84451

A flaw was found in libheif. A remote attacker could exploit an integer overflow vulnerability when processing a crafted uncompressed image tile. This overflow leads to an out-of-bounds read, which can cause tile-processing applications to crash, resulting in a denial of service. Mitigation...

CVE-2026-81885

A flaw was found in radare2, a reverse engineering framework. By opening a specially crafted NE executable file, an attacker could trigger an an infinite loop within the application's relocation parser. This continuous processing would consume excessive CPU and memory, leading to a denial of...

CVE-2026-81880

A flaw was found in radare2. The Apple Preferred Executable Format PEF loader in radare2 is vulnerable to uncontrolled resource consumption. A remote attacker could exploit this by providing a specially crafted Apple PEF file. The PEF loader accepts relocSecCount values that are not properly...

CVE-2026-81883

A flaw was found in radare2, a reverse engineering framework. The Lua 5.3 bytecode function parser did not properly validate the length of function-metadata fields after a function-name string. By opening or inspecting a specially crafted Lua 5.3 bytecode file, a local user could trigger an...

CVE-2026-96445

A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates specific HTTP headers to determine if a one-time password OTP should be skipped, but fails to verify if those headers came from a trusted sourc...

CVE-2026-94054

A flaw was found in Exim. When the Proxy-Protocol is used with an attacker-controlled proxy, a remote attacker could exploit an out-of-bounds write vulnerability. This could lead to data corruption, denial of service, or potentially arbitrary code execution, allowing the attacker to execute...

CVE-2026-84450

A flaw was found in libheif. A remote attacker could provide a specially crafted image file that, when processed by the libheif library, can lead to an integer overflow during crop calculations. This issue can cause assert-enabled builds to abort, resulting in a denial of service DoS. In release...

CVE-2026-81886

A flaw was found in radare2. The Windows 64-bit crash-dump dmp64 parser in radare2 is vulnerable to uncontrolled memory allocation. A local user could exploit this by opening a specially crafted full-memory Windows crash dump, leading to the parser repeatedly allocating memory without proper...