CVE-2026-99187

A flaw was found in the Linux kernel. During Central Processing Unit CPU hotplug operations, the Performance Monitoring Unit PMU context migration prematurely stops processing event groups after removing a leader, leaving active events running on the departing processor. A local user running...

CVE-2026-99183

A flaw was found in the Linux kernel's Rocket accelerator driver. When unbinding an accelerator core while workloads are actively executing, the driver fails to properly search all remaining core slots during scheduler lookups, resulting in an unchecked null reference. A privileged local user cou...

CVE-2026-99181

A flaw was found in the Linux kernel's autofs automount file system subsystem. A local attacker can cause a Denial of Service DoS by initiating file system lookups while the automount daemon is restarting. Due to mishandled errors from an obsolete communication pipe, the kernel incorrectly shuts...

CVE-2026-119281

A flaw was found in MariaDB Connector/J. The database connector fails to properly validate changes to the result character set and incorrectly assumes all returned data is UTF-8 encoded. A malicious database server or an attacker intercepting network communication a machine-in-the-middle attacker...

CVE-2026-119277

A flaw was found in MariaDB Connector/J. This vulnerability can lead to a Denial of Service DoS because packet decoders do not verify that sufficient data remains in the receive buffer before reading server-specified lengths. A compromised database server or an attacker positioned between the...

CVE-2026-118761

A flaw was found in Kubeflow Pipelines. The API server does not properly restrict the size of decompressed data when processing uploaded archive files, performing decompression before authorization checks are completed. A remote, unauthenticated attacker could exploit this vulnerability by...

CVE-2026-118759

A flaw was found in Kubeflow Pipelines. An unauthenticated remote attacker with access to the API server can retrieve execution logs without proper authorization checks. By submitting requests with known workflow run and pod identifiers, an attacker can access live or archived logs from targeted...

CVE-2026-57199

A flaw was found in Asterisk. An attacker can trigger a Denial of Service DoS or memory corruption by supplying crafted Short Message Service SMS data to an affected system configured with the SMS dialplan application. This issue occurs because incoming message lengths are copied into fixed...

CVE-2026-57203

A flaw was found in Asterisk. The astloggrabber utility executes a script directly from the shared, world-writable temporary directory /tmp. A local attacker with shell access can place a malicious script in this location to achieve privilege escalation and execute arbitrary code when an...

CVE-2026-57194

A flaw was found in Asterisk. An out-of-bounds write vulnerability in the chanunistim channel driver allows a remote attacker to cause a Denial of Service DoS by crashing the Asterisk service. By sending a specially crafted network request to an exposed chanunistim port, an attacker can overflow ...

CVE-2026-57196

A flaw was found in Asterisk. When phone provisioning resphoneprov is enabled, reflected cross-site scripting in HTTP error pages allows an unauthenticated remote attacker to steal an authorized user's Asterisk Manager Interface AMI session cookie and impersonate that user. Exploitation requires...

CVE-2026-57193

A flaw was found in Asterisk's resconfigldap module. An unauthenticated remote attacker can exploit this flaw to cause information disclosure through Lightweight Directory Access Protocol LDAP filter injection. By sending specially crafted Session Initiation Protocol SIP packets with a manipulate...

CVE-2026-57192

A flaw was found in Asterisk. An authenticated remote attacker can cause a Denial of Service DoS via a heap-based buffer overflow in the Codec 2 audio decoder. Due to a sample-count calculation mismatch, an attacker can establish a call and transmit specially crafted audio packets to corrupt memo...

CVE-2026-57188

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by sending specially crafted network packets to the resxmpp module. When processing Extensible Messaging and Presence Protocol XMPP namespace prefixes from a local or federate...

CVE-2026-57187

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS through a heap use-after-free memory error in the PJSIP communication handling component. By sending a Session Initiation Protocol SIP INVITE request over a connection-oriente...

CVE-2026-57202

A flaw was found in Asterisk. An authenticated remote attacker with read-only permissions to the Asterisk REST Interface ARI can bypass access controls by invoking the setChannelVar function. This vulnerability allows the attacker to execute restricted write operations, such as modifying arbitrar...

CVE-2026-57201

A flaw was found in Asterisk. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted network packet to an Asterisk instance with the H.323 channel driver enabled. The trace-logging function fails to bound the input size when writing to an...

CVE-2026-57200

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker with read-only permissions to achieve arbitrary code execution by bypassing authorization controls. Under conditions where the HTTP service is enabled and accessible, an attacker can submit unauthorized write...

CVE-2026-57198

A flaw was found in Asterisk. In deployments where the chansip channel driver has text support enabled, an authenticated attacker can send specially crafted network packets to trigger a heap-based buffer overflow in the T.140 Redundant Data RED handling mechanism. This vulnerability could allow t...

CVE-2026-57197

A flaw was found in Asterisk. A heap buffer overflow in the formatoggspeex module allows an attacker to cause a Denial of Service DoS or potentially achieve arbitrary code execution. This issue occurs when Asterisk reads a corrupted Speex audio file, triggering an unbounded memory copy operation...

CVE-2026-57195

A flaw was found in Asterisk. An unauthenticated remote attacker can cause a Denial of Service DoS by exploiting a null pointer dereference within the Asterisk Manager Interface AMI. When HTTP digest authentication is configured, sending a specially crafted request crashes the Asterisk service,...

CVE-2026-57185

A flaw was found in Asterisk. An authenticated remote attacker can trigger a buffer over-read in the PJSIP Message Waiting Indication MWI body parser by sending a specially crafted Session Initiation Protocol SIP NOTIFY request. Successful exploitation causes Asterisk to crash, resulting in a...

CVE-2026-57186

A flaw was found in Asterisk. The Q.931 party-number parser within the chanooh323 channel driver fails to properly validate incoming data. A remote, unauthenticated attacker can exploit this flaw by sending malformed Q.931 elements in an OOH323 request, causing the application to crash and...

CVE-2026-57184

A flaw was found in Asterisk. An unauthenticated remote attacker could cause a Denial of Service DoS by sending specially crafted setup packets to the chanooh323 channel driver. Due to insufficient bounds checking in the Q.931 protocol parser, processing these malformed packets triggers an...

CVE-2026-57189

A flaw was found in Asterisk. In configurations where the chansip channel driver has text support enabled, an authenticated remote attacker can send specially crafted packets during real-time text processing to trigger an out-of-bounds memory write. This vulnerability may allow the attacker to...

CVE-2026-57190

A flaw was found in Asterisk. When the PostgreSQL or TDS Channel Event Logging CEL backends are enabled and custom event data is logged without proper validation, an attacker can supply malicious input to trigger SQL injection. This vulnerability allows an attacker to execute arbitrary SQL comman...

CVE-2026-119299

A flaw was found in gopacket. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted Stream Control Transmission Protocol SCTP packets. Due to missing validation of declared chunk lengths and field counts in the SCTP decoder, processing these...

CVE-2026-92162

A flaw was found in Flatpak. This vulnerability can lead to local privilege escalation when combined with other flaws. On systems configured with an Open Container Initiative OCI remote repository, an active local user can supply a crafted architecture name to trick the system helper service into...

CVE-2026-119210

A flaw was found in MariaDB Connector/J. This vulnerability can lead to information disclosure when client-side local file handling is enabled. A compromised database server or a machine-in-the-middle attacker can provide crafted database or table identifiers that bypass filename validation check...

CVE-2026-119279

A flaw was found in MariaDB Connector/J. A malicious or compromised database server, or an attacker intercepting network traffic, can cause a Denial of Service DoS by sending crafted responses containing excessively large length values. Because the connector converts these protocol values into...

CVE-2026-119276

A flaw was found in MariaDB Connector/J. When processing database response packets, the driver allocates memory based on server-declared lengths before verifying that sufficient data remains in the packet. A malicious database server or an attacker positioned in the middle of network communicatio...

CVE-2026-119278

A flaw was found in MariaDB Connector/J. A malicious server or an attacker intercepting network traffic can exploit this vulnerability by sending a malformed authentication response during the connection handshake. Because the driver does not properly validate the response structure, this issue c...

CVE-2026-119977

A flaw was found in WordPress. During core package upgrades, temporary files are placed into predictable, web-accessible staging directories. An unauthenticated remote attacker could exploit this condition during an upgrade window to access these staging paths and achieve arbitrary code execution...

CVE-2026-114116

A flaw was found in Vyper. An attacker contributing source code can manipulate constant values in compiled contracts by embedding non-standard line-break characters into comments, strings, or indentation. Because the compiler interprets these line breaks differently from the underlying language...

CVE-2026-114115

A flaw was found in Vyper. The compiler improperly calculates memory offsets when handling conditional ternary expressions that select between nested arrays with mismatched dimensions. A remote user interacting with an affected smart contract can trigger this condition, causing the contract to re...

CVE-2020-37289

A flaw was found in Vyper. The compiler does not validate the upper bounds of smaller integer types returned from external contract interfaces, allowing 8-bit values to be stored in larger 256-bit variables without range verification. A malicious smart contract can exploit this flaw by returning...

CVE-2021-48019

A flaw was found in Vyper. Forwarder proxies created using the built-in createforwarderto function report a fixed return data size instead of the actual data length returned by the target contract. A remote caller or interacting smart contract can encounter data corruption when returned payloads...

CVE-2020-37287

A flaw was found in vyper. An attacker interacting with an affected smart contract can cause data corruption and incorrect execution when functions process complex data types, such as multi-dimensional arrays or nested structures. The compiler incorrectly calculates the memory size of these compl...

CVE-2020-37286

A flaw was found in vyper. An incorrect stack pointer calculation occurs when internal function calls are evaluated within tuples or nested calls, leading to memory corruption in compiled contracts. A remote caller interacting with an affected smart contract can exploit this issue to produce...

CVE-2026-120325

A flaw was found in Knip. An attacker could exploit a path traversal vulnerability by providing a manipulated workspaces configuration during file writing operations. This flaw allows unauthorized modification or overwriting of files outside the intended project directory...

CVE-2026-111816

A flaw was found in Apache Traffic Server. Malformed HTTP 302 redirect responses containing chunked transfer encoding are improperly forwarded instead of being rejected as parse errors. A remote attacker can exploit this condition to cause HTTP response desynchronization and cache poisoning,...

CVE-2026-111814

A flaw was found in Apache Traffic Server. Its default outbound session-sharing policy can reuse an existing Transport Layer Security TLS connection authenticated with one client certificate for a transaction configured to present a different certificate. A remote attacker could exploit this flaw...

CVE-2026-111812

A flaw was found in Apache Traffic Server's originserverauth plugin. An unauthenticated remote attacker can exploit this vulnerability to force the proxy into signing attacker-controlled Amazon Web Services AWS request headers using the proxy server's own credentials. This allows the attacker to...

CVE-2026-111813

A flaw was found in Apache Traffic Server. When the experimental magick plugin is enabled without argument signing, an unauthenticated remote attacker can control command-line parameters passed to the underlying ImageMagick conversion utility. An attacker could exploit this argument injection fla...

CVE-2026-111809

A flaw was found in Apache Traffic Server. An unauthenticated remote attacker can exploit this vulnerability by sending specially crafted HEAD requests containing Content-Length or Transfer-Encoding headers. This flaw enables HTTP request smuggling, where intermediate proxies and backend servers...

CVE-2026-111811

A flaw was found in Apache Traffic Server. When the experimental tsmemcache plugin is enabled, it fails to enforce authentication on incoming network connections. An unauthenticated remote attacker can exploit this flaw to inspect, modify, or delete entries in the shared proxy cache, leading to...

CVE-2025-31699

A flaw was found in Apache Traffic Server. An unauthenticated remote attacker can send a request with an incomplete body, causing an origin connection to be prematurely returned to the shared pool while the backend is still awaiting data. When a subsequent request is processed over that reused...

CVE-2026-49442

A flaw was found in Cacti. This vulnerability allows an unauthenticated remote attacker to perform user enumeration by observing subtle discrepancies in login failure responses. Because the application returns slightly different error messages depending on whether a submitted username exists in t...

CVE-2026-46531

A flaw was found in Cacti. An authenticated attacker with automation administration privileges can trigger information disclosure by injecting malicious Structured Query Language SQL commands into the automation tree rule item handler. Because these commands are stored and later concatenated...

CVE-2026-39902

A flaw was found in Cacti. This vulnerability allows an authenticated attacker with administrative privileges to execute arbitrary commands on the underlying host system. An incomplete character blocklist fails to properly restrict shell metacharacters—such as quotes, redirect operators, and...