CVE-2026-82660

A flaw was found in Nodemailer, a module for sending emails. The jsonTransport component, responsible for handling message data, does not correctly enforce security options designed to prevent unauthorized file and URL access. A remote attacker could exploit this by sending specially crafted...

CVE-2026-82556

A flaw was found in Forgejo. A remote attacker could exploit a server-side request forgery SSRF vulnerability by manipulating the net.LookupIP function within the Repository Migration Handler. This could allow the attacker to force the server to make requests to arbitrary network resources,...

CVE-2026-82398

A flaw was found in pypdf. An attacker can craft a PDF that causes long runtimes when the readuntilwhitespace function processes a stream containing a long sequence of bytes without whitespace. This occurs due to inefficient algorithmic complexity, where the function repeatedly performs immutable...

CVE-2026-82267

A flaw was found in Komodo. Authenticated users can exploit this vulnerability by guessing resource names, which allows them to obtain internal resource identifiers. This issue also enables them to insert fraudulent audit log entries, misrepresenting privileged operations, due to insufficient...

CVE-2026-81523

A flaw was found in libmongocrypt. A missing input validation vulnerability in the automatic-encryption context setup allows a caller-supplied database identifier to be accepted without proper sanitization. This can lead to incorrect schema selection, potentially resulting in limited disclosure o...

CVE-2026-80717

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this by sending a specially crafted SCTP INIT message containing a malformed Adaptation Layer Indication parameter. The vulnerability causes the kernel to read beyond t...

CVE-2026-18654

A flaw was found in AWS CLI. This vulnerability, located in the Elastic MapReduce EMR Secure Shell SSH helper commands, involves a lack of entity authentication during key exchange. A remote attacker, positioned between the client and the EMR cluster, could exploit this to intercept SSH sessions...

CVE-2026-16206

A flaw was found in django-oauth-toolkit. A remote attacker can exploit a vulnerability in the loadidtoken function to manipulate session handling, leading to session expiration. This can result in a denial of service for affected users by prematurely ending their active sessions...

CVE-2026-15603

A flaw was found in morgan, an HTTP request logger middleware for Node.js. An unauthenticated remote client can inject specific Unicode line separator characters into log token values. This manipulation can cause downstream log processing systems to misinterpret a single log entry as multiple...

CVE-2026-15059

A flaw was found in systemd-oomd. Local unprivileged users can exploit a missing path traversal validation in the systemd-oomd Inter-Process Communication IPC Application Programming Interface API. This vulnerability allows them to terminate arbitrary local processes, leading to a denial of...

CVE-2026-13723

A flaw was found in electron-builder. An attacker can exploit a Unicode Normalization Collision, combined with symlink following behavior, within the zipx.Unzip extraction routine. By crafting a malicious ZIP archive, the attacker can cause the application to treat certain Unicode equivalent...

CVE-2026-71402

A flaw was found in wicked. An unauthenticated attacker on the same network who sends a crafted DHCP/UDP packet can trigger an out-of-bounds read vulnerability in the DHCPv4 option parser. This allows the client to parse adjacent heap memory as DHCP options, potentially leading to the disclosure ...

CVE-2026-55520

A flaw was found in Protego, a pure-Python robots.txt parser. A remote attacker could exploit this vulnerability by providing a crafted robots.txt file containing numerous asterisks in Allow or Disallow directives. This causes exponential backtracking during URL wildcard matching, leading to a...

CVE-2026-71401

A flaw was found in wicked, specifically in its DHCPv4 packet capture code. An integer underflow vulnerability exists where the nicaptureinspectudpheader function fails to validate the IP total length field against the IP header length before performing a subtraction. This oversight allows an...

CVE-2026-42391

A flaw was found in Dovecot. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in. This action causes the server to consume excessive memory and CPU resources, leading to the termination of login processes and other active connections...

CVE-2026-37237

A flaw was found in vLLM. Remote attackers can exploit this vulnerability by providing a URL to an excessively large media file. The AsyncMediaIO.fetchaudio and AsyncMediaIO.fetchimage functions, responsible for fetching user-supplied media, do not limit the response size. This oversight allows a...

CVE-2026-80212

A flaw was found in the resolv gem. An attacker controlling DNS responses e.g., a spoofed response or a malicious upstream DNS server can exploit this by sending crafted DNS responses containing many distinct unknown DNS resource record pairs or SvcParamKeys. This leads to uncontrolled memory...

CVE-2024-58379

A flaw was found in Nodemailer. A remote attacker can exploit a regular expression denial of service ReDoS vulnerability by sending specially crafted emails containing malicious data URLs or embedded attachments. This can cause the email parsing process to hang, leading to a denial of service for...

CVE-2026-77358

A flaw was found in cpp-httplib. The TLS Transport Layer Security-enabled WebSocket client improperly frees a TLS session while the WebSocket connection is still active. This timing issue, which occurs during the normal shutdown of a secure WebSocket connection, leads to a use-after-free...

CVE-2026-82659

A flaw was found in nodemailer. Authenticated attackers can bypass security flags by crafting raw messages with specific file paths or URLs. This allows them to read arbitrary files from the system or perform Server-Side Request Forgery SSRF, potentially leading to information disclosure or...

CVE-2026-82392

A flaw was found in pnpm, a package manager. An attacker can craft a malicious pnpm-lock.yaml file that, when processed by a user running pnpm install, allows package contents to be written outside the intended nodemodules directory. If the system is configured to allow lifecycle scripts, this pa...

CVE-2026-82072

An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

CVE-2026-81727

A flaw was found in NLTK. This vulnerability, a filesystem containment bypass, allows a local attacker with write access to a shared downloader directory to create special links hardlinks that point to files outside the intended installation area. When a package is extracted, these hardlinks can...

CVE-2026-81726

A flaw was found in NLTK. This vulnerability, known as path traversal, allows an attacker to bypass security restrictions in the model-artifact APIs. By exploiting this, an attacker can perform unauthorized read or write operations on files outside the intended secure directories. This could lead...

CVE-2026-81725

A flaw was found in NLTK, specifically within the Pl196xCorpusReader component. A remote attacker can exploit this by supplying malformed Text Encoding Initiative TEI blocks containing numerous unmatched opening tags. This triggers a regular expression denial of service ReDoS vulnerability, causi...

CVE-2026-81724

A flaw was found in NLTK. This uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader allows unauthenticated attackers to cause a denial of service. Attackers can achieve this by supplying deeply nested feature-structure input, which can lead to applications crashing when parsin...

CVE-2026-81722

A flaw was found in the nltk PorterStemmer component. A remote attacker could exploit this vulnerability by providing a specially crafted, untrusted token. The inefficient algorithmic complexity in the stemming process, specifically within the isconsonant and measure helper functions, causes...

CVE-2026-42393

A flaw was found in dovecot. The comparison mechanism for doveadm passwords and API keys is not fully timing safe. A remote attacker, with network access to the doveadm service, could repeatedly make requests and accurately measure response timings. This could allow the attacker to learn the leng...

CVE-2026-40203

A flaw was found in dovecot where, when IMAP compression is enabled, the system reuses the same compression state across responses within a session. This allows a remote attacker, who can send mail to a user and monitor the sizes of their IMAP traffic, to potentially deduce the content of small...

CVE-2026-75421

A flaw was found in aria2. This stack-buffer-underflow vulnerability, located in the IOFile::getLine function, could allow an attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability arises when the application attempts to write data before the beginning of a...

CVE-2026-73209

A flaw was found in Dovecot. An authenticated attacker can send specially crafted compressed data, leading to the affected process exhausting its stack and crashing. This termination of the process can result in degradation or a complete denial of service for the IMAP Internet Message Access...

CVE-2026-52687

A flaw was found in dovecot. A remote attacker with valid credentials can exploit this vulnerability by selecting a compression algorithm for the IMAP connection that requires a large amount of memory for decompression. By opening several such connections, the attacker can exhaust the process's...

CVE-2026-51106

A flaw was found in TokTok qTox. A local attacker can exploit this vulnerability by interacting with the src/persistence/serialize.cpp component, leading to a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2026-42395

A flaw was found in Dovecot. A remote attacker, if able to send forwarding information from a host configured as a trusted proxy, could send a NUL byte that crashes the login process. This termination of the login process can lead to a denial of service for user logins. Mitigation To mitigate thi...

CVE-2026-42392

A flaw was found in Dovecot. An attacker with valid credentials can send an invalid IMAP URLFETCH command, leading to the inclusion of uninitialized memory in the error response. This can disclose process memory contents to the client, potentially revealing sensitive data. Mitigation To mitigate...

CVE-2026-42008

A flaw was found in Dovecot. Forwarded information from a host listed as a trusted proxy is not properly separated from Dovecot's internal authentication fields. This allows a malicious host configured as a trusted proxy to inject values as internal authentication fields, enabling it to...

CVE-2026-40205

A flaw was found in Dovecot. An attacker with a partially valid OAuth2 token can bypass authorization checks in remote token validation paths. This allows the attacker to authenticate with insufficient permissions, leading to a breach of integrity where the configured authorization policy is not...

CVE-2026-40017

A flaw was found in Dovecot. A remote attacker who can send mail to a user can craft a message header designed to cause collisions in an internal hash table. This manipulation forces the IMAP THREAD command to consume excessive CPU resources, leading to degradation or a complete denial of service...

CVE-2026-15534

A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression...

CVE-2026-40019

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...

CVE-2026-80704

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from the improper use of an uninitialized logging context, which can lead to a NULL pointer dereference. A local attacker could potentially trigger this flaw, causing the system to crash and resulting in a...

CVE-2026-80698

A flaw was found in the dmaengine: idxd component of the Linux kernel. This vulnerability is caused by a double free error where memory allocated for work queue wq, engine, and group structures is freed twice. This occurs because kfree is explicitly called in error handling and cleanup routines, ...

CVE-2026-80708

A flaw was found in the Linux kernel's s390/zcrypt module. During the clear key to secure key token import process, an internal buffer used by the ipcprbhelper function was not properly scrubbed after use. This oversight could leave sensitive clear key material in memory. A local attacker could...

CVE-2026-80716

A flaw was found in the Linux kernel. Specifically, in the Advanced Linux Sound Architecture ALSA Pulse-Code Modulation PCM subsystem, a use-after-free vulnerability exists. This occurs when a linked stream is unlinked, and a wait entry is not properly removed from the drained peer's sleep list. ...

CVE-2026-80715

A flaw was found in the Linux kernel's igc network driver. When an application using AFXDP, a high-performance network data path, is abruptly terminated, a synchronization issue can occur. This prevents the network interface from properly shutting down. A local attacker could exploit this to caus...

CVE-2026-40204

A flaw was found in Dovecot. This vulnerability allows an attacker to bypass Access Control List ACL restrictions through the ldamailboxautocreate feature. This could potentially grant unauthorized access to mailboxes or other restricted resources. Mitigation Mitigation for this issue is either n...

CVE-2026-33604

A flaw was found in Dovecot. A remote attacker can exploit this by crafting a message with a specific line ending. If Dovecot relays this message, it can bypass security protections, allowing the attacker to inject spoofed email into a vulnerable downstream mail server. This vulnerability is...

CVE-2026-80709

A flaw was found in the Linux kernel's s390/zcrypt component. An incorrect upper limit check for the domain value when processing an EP11 Cryptographic Coprocessor Request Block CPRB can allow a local user on custom device nodes to access heap memory. This could lead to information disclosure or...

CVE-2026-80699

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. This vulnerability, specifically affecting AmpereOne processors, occurs when a physical interrupt is double-deactivated in a nested virtualization context. An attacker could potentially...

CVE-2026-80686

A flaw was found in the Linux kernel's memory management component. Specifically, the migratedevice functionality may attempt to access memory page table entries PTEs that are not present. This incorrect handling can lead to system instability, potentially causing a system crash Denial of Service...