CVE-2026-100080

A flaw was found in the Linux kernel's xen-netback driver. When handling a connection error caused by invalid guest configuration data, network queue statistics memory is freed without proper synchronization. If the statistics data is concurrently read through the system file system, a...

CVE-2026-100082

A flaw was found in the Linux kernel's Xen block backend xen-blkback driver. A race condition occurs when input/output I/O statistics are read through the sysfs interface while a frontend device is being disconnected. Because reading the statistics is not synchronized with freeing device memory, ...

CVE-2026-99275

A flaw was found in the Linux kernel's SMB Server Message Block client. A malicious SMB server can exploit this vulnerability to trigger an out-of-bounds memory read, leading to sensitive information disclosure. Due to missing packet length checks on truncated session setup responses, the client...

CVE-2026-100081

A flaw was found in the Linux kernel's Xen network backend xen-netback driver. A race condition occurs during network interface disconnection when multicast address memory is freed before active network packet processing has completely stopped. A malicious guest virtual machine can exploit this...

CVE-2026-99278

A flaw was found in the Linux kernel's ksmbd, an in-kernel SMB Server Message Block server. The session management mechanism only limited pending authentication attempts rather than enforcing a limit on established sessions per connection. A remote authenticated client could exploit this flaw by...

CVE-2026-99273

A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. When preparing file stream information, the server does not account for a terminating character during response buffer size checks, leading to a two-byte out-of-bounds write. A remote attacker could exploit this flaw by...

CVE-2026-99282

A flaw was found in the Linux kernel's Traffic Equalizer schteql network scheduler. This flaw allows an attacker to cause a Denial of Service DoS by transmitting network traffic through an affected network interface. During packet transmission, if a subordinate network device or lower queueing...

CVE-2026-99279

A flaw was found in the Linux kernel's ksmbd Server Message Block server. Expired sessions resulting from logoff or session replacement are not properly reclaimed when no further setup requests arrive on the connection. A remote attacker can exploit this flaw to retain allocated memory and...

CVE-2026-99281

A flaw was found in the Linux kernel's TUN/TAP virtual network device driver. Persistent network devices created without an assigned owner or group failed to enforce administrative privilege checks when users attached to them. A local unprivileged attacker could exploit this vulnerability by...

CVE-2026-99276

A flaw was found in the Linux kernel's ksmbd Server Message Block server. A remote client can cause a Denial of Service DoS by triggering a deadlock condition during concurrent session teardown and connection cleanup operations. Because the periodic connection cleanup worker and session terminati...

CVE-2026-99272

A flaw was found in the Linux kernel's Server Message Block SMB client. The SMB2 read handler does not properly validate whether the data range specified by the server fits within the boundaries of the received packet. A malicious SMB server could exploit this vulnerability by sending a crafted...

CVE-2026-99271

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Line 6 USB audio driver. When releasing audio capture buffers, the driver fails to clear an internal buffer pointer, leaving a stale reference to freed memory. A local user can exploit this issue by triggering audio...

CVE-2026-99274

A flaw was found in the Linux kernel's SMB client. When handling file extent mapping fiemap requests, the client improperly validates empty truncated responses from the server. A malicious SMB server can exploit this vulnerability by returning a specially crafted response, triggering an...

CVE-2026-99283

A flaw was found in the Linux kernel's Netfilter connection tracking subsystem. A remote attacker can cause a Denial of Service DoS by sending non-exact TCP reset RST packets to prematurely expire active connection tracking entries. When an in-window reset packet does not match the exact expected...

CVE-2026-99277

A flaw was found in the Linux kernel's ksmbd, an in-kernel Server Message Block SMB server. A remote attacker could exploit this flaw to cause a denial of service DoS or potentially corrupt kernel memory. The issue occurs due to improper reference counting during session channel management, where...

CVE-2026-99280

A flaw was found in the Linux kernel's ksmbd. Session registration failures and connection cleanups can drop internal session references while the per-session procfs process information pseudo-filesystem entry is still accessible. A local user reading these entries during concurrent session...

CVE-2026-98915

A flaw was found in the Linux kernel's video-i2c driver. This vulnerability can lead to a denial of service DoS caused by memory corruption during driver unloading. The driver unregisters the video device without properly disconnecting the video buffer queue. A local user with administrative...

CVE-2026-98817

A flaw was found in the Linux kernel's SoundWire Device Class Architecture SDCA audio subsystem. When an error occurs during device initialization, the driver fails to properly balance runtime power management references. This improper resource handling can lead to power management inconsistencie...

CVE-2026-98436

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly...

CVE-2026-114366

A flaw was found in Qt. Improper authentication handling in the QWebSocket component of the Qt WebSockets module allows an attacker to cause an information disclosure. A remote attacker could exploit this vulnerability to gain unauthorized access to sensitive data. Mitigation Disable...

CVE-2026-85068

A flaw was found in Network UPS Tools NUT. When communicating with certain devices via the blazerusb driver, fixed-size data packets are transmitted across the USB bus without completely initializing the memory buffer. An attacker with physical access can connect a malicious USB device to capture...

CVE-2026-123119

A flaw was found in the Symfony HttpClient component. The client fails to properly pin verified IP addresses for cached hostnames across subsequent requests, causing the host to be re-resolved. A remote attacker controlling an external Domain Name System DNS server can exploit this behavior throu...

CVE-2026-116472

A flaw was found in ingress-nginx. An authenticated user with permission to create Ingress resources can leverage the mirror-target annotation to send write commands to an unauthenticated internal configuration interface. This action corrupts the controller configuration, resulting in a Denial of...

CVE-2026-61813

A flaw was found in ModSecurity. An attacker positioned in the communication path can bypass peer identity verification due to an improper Transport Layer Security TLS hostname validation setting in the internal HTTPS client. This issue allows the attacker to present a certificate issued for an...

CVE-2026-123206

A flaw was found in EdgeChat. A remote, unauthenticated attacker can exploit missing access controls in the file download route to download public-channel attachments without valid credentials or channel membership. By submitting a request with an attachment identifier and omitting or providing a...

CVE-2026-111062

A flaw was found in russh. The SSH server fails to verify that the cryptographic signature algorithm in a public-key authentication payload matches the algorithm named in the authentication request. An authenticated remote client can exploit this flaw by claiming an approved algorithm while...

CVE-2026-121749

A flaw was found in nvm. When processing version configuration files such as .nvmrc, input is passed to the search utility without proper option delimitation, allowing leading hyphens to be interpreted as command flags. An attacker who supplies a crafted configuration file can trick a user runnin...

CVE-2026-121748

A flaw was found in Node Version Manager nvm. When executing the prefix deletion command, nvm invokes the package manager without specifying a target configuration file, allowing settings from an untrusted project configuration to designate which file is edited. An attacker who convinces a user t...

CVE-2026-112907

A flaw was found in filelock. On Windows systems, soft lock implementations perform file operations that wait indefinitely when another process holds an opportunistic lock oplock on an unheld lock marker file. A local user with read access to the marker file can request an oplock and leave break...

CVE-2026-122131

A flaw was found in joi. Applications that pass untrusted input into custom message configuration functions allow an attacker to cause prototype pollution, where shared base object properties in the runtime environment are improperly altered. By supplying a specially crafted message configuration...

CVE-2026-122052

A flaw was found in laspy. When parsing a specially crafted LAS file, the file reading component fails to properly restrict memory usage, leading to uncontrolled memory allocation. A remote attacker could exploit this vulnerability by tricking a user or system into processing a malicious file,...

CVE-2026-122325

A flaw was found in eventyay-exhibition. An authorization bypass vulnerability in the lead creation Application Programming Interface API allows authenticated exhibitors with lead scanning permissions to access attendee records from other event organizers. By submitting another event's identifier...

CVE-2026-121750

A flaw was found in Node Version Manager nvm. When downloading release archives, nvm stores the file directly in the local cache before performing checksum verification, leaving rejected archives in place when a checksum mismatch occurs. If a user subsequently attempts an offline installation for...

CVE-2026-112913

A flaw was found in filelock. When a lock database is placed in a shared directory writable by other local users on Windows, an attacker can create crafted SQLite side files adjacent to the database. This manipulation causes subsequent lock acquisition attempts to fail immediately, resulting in a...

CVE-2026-123207

A flaw was found in LibreTV. This flaw allows an authenticated remote attacker to bypass Server-Side Request Forgery SSRF protections, potentially leading to unauthorized access to internal services or information disclosure. By exploiting unpinned Domain Name System DNS resolution, an attacker...

CVE-2026-121745

A flaw was found in Node Version Manager nvm. When downloading files or querying remote resources using custom authentication headers, authorization credentials are passed directly as command-line arguments to external download utilities. A local attacker on a shared system can observe running...

CVE-2026-55458

A flaw was found in Caddy's reverse proxy module. When processing protocol upgrade responses, the proxy fails to properly remove hop-by-hop headers intended only for intermediate connections. A malicious or compromised upstream server can exploit this flaw to forward restricted connection headers...

CVE-2026-103866

A flaw was found in Apache Sling Engine. A remote attacker could perform HTTP request smuggling by sending specially crafted requests containing non-standard percent-encoded characters or invalid character sets. Because the query and form parser continues processing requests despite encountering...

CVE-2026-119377

A flaw was found in SQLite. When processing queries that use a RIGHT or FULL JOIN with a USING clause, SQLite fails to validate authorization restrictions on all joined tables. An attacker capable of submitting SQL queries can exploit this flaw to bypass access control restrictions and read...

CVE-2026-118781

A flaw was found in node-forge. The bundled mathematical library enters an infinite loop when calculating a modular inverse with a negative value or modulus. If an application allows an attacker to supply untrusted parameters, such as a negative RSA public exponent during cryptographic key...

CVE-2026-118780

A flaw was found in node-forge. When verifying certificate chains against a Certificate Authority CA store containing multiple certificates with identical subject names, the verification process can inadvertently remove those trusted certificates from the store. A remote attacker can exploit this...

CVE-2026-118776

A flaw was found in node-forge. The library fails to properly validate Public-Key Cryptography Standards 7 PKCS7 padding during Cipher Block Chaining CBC and Electronic Codebook ECB decryption modes by inspecting only the final byte. A remote attacker could exploit this issue by supplying malform...

CVE-2026-118775

A flaw was found in node-forge. A remote attacker can potentially bypass authorization controls by supplying specially crafted Object Identifier OID strings to an application. Due to missing range checks during data encoding, out-of-range values can wrap into valid Distinguished Encoding Rules DE...

CVE-2026-118774

A flaw was found in node-forge. When verifying a digital certificate, the library improperly inspects signature algorithm parameters from the issuing certificate rather than from the certificate being validated. A remote attacker can exploit this issue to present a certificate that bypasses...

CVE-2026-85499

A flaw was found in Apache SkyWalking BanyanDB. In non-default configurations, the Canopy monitoring proxy fails to properly enforce role-based access restrictions. An authenticated user with read-only permissions can exploit this issue to send non-read requests through the monitoring proxy to...

CVE-2026-83495

A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting valueFrom.secretKeyRef into environment variable definitions. This allows them to read and exfiltrate sensitive information secrets from the namespace, leading to a privilege...

CVE-2026-77572

A flaw was found in VeraCrypt. The Windows driver accepts caller-supplied device and object paths that are broader than necessary for normal operations. A local user can exploit this vulnerability by sending specific control requests to the driver, causing it to perform privileged system lookups...

CVE-2026-93571

A flaw was found in Szafir. A man-in-the-middle attacker who can intercept and reroute software update traffic can exploit a path traversal vulnerability in filename processing. By supplying a crafted update response containing manipulated file paths, the attacker can write arbitrary XML files to...

CVE-2026-92612

A flaw was found in Eclipse iceoryx2, specifically within the iceoryx2-bb-container component. The StaticString functionality exposes its contents as mutable bytes through safe programming interfaces. However, the String::asstr method converts these bytes into a Rust string slice without proper...

CVE-2026-13303

A flaw was found in Boundary. A Server-Side Request Forgery SSRF, a vulnerability where a server is induced into making unintended network requests flaw in the Vault credential store integration allows an authenticated user with permission to manage project credential stores to force the Boundary...