CVE-2026-65602

A flaw was found in Traefik. A low-privileged Kubernetes user can bypass the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references. By setting a forbidden cross-provider reference, Traefik may use a file-provider TCPServersTransport. This can lead to the exposu...

CVE-2026-54761

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the Kubernetes Gateway provider's crossProviderNamespaces allowlist. A remote attacker with the ability to create an accepted HTTPRoute and a matching ReferenceGrant can exploit this by misconfiguri...

CVE-2026-55737

A flaw was found in Erlang OTP. A remote attacker can exploit a vulnerability in the Erlang external term format ETF decoder by providing a specially crafted binary to the binarytoterm/1 function. This manipulation of data types during processing can corrupt the system's memory, leading to an...

CVE-2026-64492

A flaw was found in the Linux kernel's tmp006 temperature sensor driver. This vulnerability occurs because the driver incorrectly handles the registration and de-registration of a hardware trigger. When the module is unloaded, a pointer to freed memory remains active, creating a 'dangling pointer...

CVE-2026-64505

A flaw was found in the Linux kernel's USB RNDIS gadget function. A missing length check for the RNDIS header in the rndisrmhdr function could allow an attacker to read data beyond the intended buffer. This out-of-bounds read vulnerability could lead to information disclosure or potentially a...

CVE-2026-64306

A flaw was found in the Linux kernel's Cryptographic API, specifically within the Counter Mode Deterministic Random Bit Generator CTRDRBG. The drbgctrgenerate function can incorrectly indicate a successful operation even when it has failed. This issue results in the output buffer remaining...

CVE-2026-64834

A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtpasffixheader function does not properly validate the size of data chunks, preventing the processing loop...

CVE-2026-64263

A flaw was found in the Linux kernel's fuse-uring component. This vulnerability arises from the incorrect handling of cancelled entries, which are moved to a list where a subsequent operation unconditionally attempts to access a null pointer. A local attacker could exploit this flaw to trigger a...

CVE-2026-59948

A flaw was found in Composer, a dependency manager for the PHP language. A remote attacker could exploit this vulnerability by providing a maliciously crafted package from an untrusted source. During installation or update, Composer's improper validation of package names allows it to write...

CVE-2026-59946

A flaw was found in Composer, a dependency manager for PHP. A malicious package can exploit a vulnerability in Composer's binary installation process by using specially crafted path segments. This allows an existing file on the host system to have its permissions changed to be world-readable and...

CVE-2026-59732

A flaw was found in rclone, a command-line program for managing cloud storage. An attacker could craft a malicious archive that, when extracted by a user, allows files to be written outside the intended destination directory. This path traversal vulnerability could lead to the creation or overwri...

CVE-2026-59947

A flaw was found in Composer, a dependency manager for the PHP language. When Composer is executed with the -vvv debug verbosity option, it can inadvertently expose sensitive credentials, such as a GitHub Personal Access Token, by printing them in the debug output. This occurs because certain...

CVE-2026-64257

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker could exploit a vulnerability where the client improperly handles SMB2 responses containing overlapping data areas. This incorrect processing of malformed network data could lead to a denial of service DoS o...

CVE-2026-64506

A flaw was found in the Realtek 802.11ac wireless driver rtw89 within the Linux kernel. A remote attacker, within adjacent network range, could send specially crafted malformed Aggregated MAC Protocol Data Unit AMPDU frames. This incorrect handling of frames, particularly during rekey processes,...

CVE-2026-64522

A flaw was found in the Linux kernel's mlx5e network driver. When handling temporary Security Associations SAs for IPsec, the mlx5exfrmaddstate function incorrectly decrements a counter without a corresponding increment. This underflow in the eswitch mode block mechanism can lead to a denial of...

CVE-2026-64410

A flaw was found in the Linux kernel's netfilter component, specifically concerning the handling of IPIP IP-in-IP tunnel hardware offload. The system attempts to utilize hardware offload for IPIP tunnels, a feature not yet supported by existing drivers. A remote attacker could potentially exploit...

CVE-2026-16308

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...

CVE-2026-41710

A flaw was found in Spring Retry. A remote attacker can craft a large number of unique requests, leading to the exhaustion of the application-wide stateful retry cache. Once the cache is full, it permanently rejects further updates, causing all subsequent stateful retries and circuit breakers in...

CVE-2026-64428

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output SCH controller. When the PREEMPTRT Preemptible Real-Time feature is enabled, a locking mechanism intended for sleeping contexts is incorrectly used within a non-sleepable interrupt setup path. This can lead to a system crash...

CVE-2026-40990

A flaw was found in Spring Cloud Function. A local attacker with low privileges could exploit this vulnerability by repeatedly adding functions to the Function Registry, leading to an Out Of Memory OOM error. This resource exhaustion can cause a Denial of Service DoS for the affected application...

CVE-2026-64436

A flaw was found in the Linux kernel. An uninitialized variable in the IPComp IP Compression state handling could allow a local attacker to trigger an out-of-bounds read during state migration. This vulnerability could lead to the disclosure of sensitive kernel memory or cause a denial of service...

CVE-2026-41714

A flaw was found in Spring AMQP. Applications that configure their broker connection using RabbitConnectionFactoryBean.setUri"amqps://..." without explicitly enabling SSL via setUseSSLtrue may establish a TLS Transport Layer Security encrypted connection without proper certificate validation or...

CVE-2026-41701

A flaw was found in Spring AMQP. The system generates predictable correlation identifiers IDs for message replies due to an internal simple counter. This predictability could allow an attacker to potentially infer or manipulate message flows, leading to a low impact on the confidentiality and...

CVE-2026-59251

A flaw was found in Erlang/OTP's publickey application. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted X.509 certificate chain during a Transport Layer Security TLS handshake. This causes the certificate path validation process to consume excessiv...

CVE-2026-64445

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. During shared-key authentication, an attacker on an adjacent network could send a specially crafted frame. This could lead to an out-of-bounds read, potentially allowing for the disclosure of sensitive information or causing ...

CVE-2026-64518

A flaw was found in the Linux kernel's TCP implementation. An out-of-bounds access vulnerability exists when the lockdepsockisheld function is called with a tcptimewaitsock object. This occurs because the tcptimewaitsock object lacks the necessary sk-sklock, leading to an incorrect lockdep...

CVE-2026-64344

A flaw was found in the Linux kernel's USB idmouse driver. A local attacker could exploit a use-after-free vulnerability due to a race condition that occurs when a USB idmouse device is disconnected. This race condition allows mutexunlock to access freed memory, which can lead to a system crash a...

CVE-2026-54919

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions from 0.33.0 through 0.46.1, when cpp-httplib is built with CPPHTTPLIBMBEDTLSSUPPORT or CPPHTTPLIBWOLFSSLSUPPORT and a...

CVE-2026-41252

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices ar...

CVE-2026-64302

A flaw was found in the Linux kernel. A local user could exploit an issue in the pagetablefree function, which incorrectly handles vmemmap pages. This improper memory management leads to a memory leak, where only a portion of the allocated memory is freed. Consequently, this can result in a Denia...

CVE-2026-64375

A flaw was found in the Linux kernel's proc filesystem. A local attacker with low privileges could exploit a race condition within the ptracemayaccess function when handling file descriptor links. This vulnerability arises because the system performs multiple task lookups without proper...

CVE-2026-64461

A flaw was found in the Linux kernel's MediaTek PCIe driver. When a Peripheral Component Interconnect Express PCIe port fails to enable, the associated Interrupt Request IRQ domains are not properly released. This resource leak can accumulate over time, potentially leading to a denial of service...

CVE-2026-33930

A flaw was found in Apache Traffic Server. A remote attacker could exploit a buffer overflow vulnerability by sending an excessively long Host header during redirect handling, provided that redirect following is enabled. This could cause a fixed-size stack buffer to overflow, leading to a denial ...

CVE-2026-64404

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition exists in the isoconnbigsync function where a socket lock is temporarily released and re-acquired. During this window, the Bluetooth connection can be unexpectedly terminated. If the connection is torn down, the subseque...

CVE-2026-64425

A flaw was found in the Linux kernel's iouring subsystem. This vulnerability allows linked work items to continue executing even after a system exit process has begun. This can lead to a denial of service by prolonging the exit sequence and potentially consuming system resources unexpectedly...

CVE-2026-64491

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture usx2y us144mkii driver. This vulnerability, a Use-After-Free UAF, occurs when a USB device is disconnected, leading to a race condition where the system attempts to access memory that has already been released. This cou...

CVE-2026-64348

A flaw was found in the Linux kernel's Universal Serial Bus USB subsystem. When an isochronous USB request block URB submission fails, the associated schedule is not properly freed. This memory leak can accumulate over time, potentially leading to memory exhaustion and a denial of service DoS for...

CVE-2026-64519

A flaw was found in the Linux kernel's Network File System Daemon NFSD. This vulnerability allows a remote attacker to cause a Denial of Service DoS by triggering an infinite loop during layout state revocation. The issue occurs because the system repeatedly attempts to revoke a layout state...

CVE-2026-64376

A flaw was found in the Linux kernel's firmware loader component. This vulnerability occurs in the firmwareuploadregister function when an allocation failure happens after a device instance is created. The system fails to properly release a device reference, leading to an unbalanced reference...

CVE-2026-64454

A flaw was found in the Linux kernel's USB dwc3 driver. A local attacker could trigger a condition where a sleeping function is called from an invalid context during a USB gadget suspend operation. This can lead to system instability or a kernel panic, resulting in a Denial of Service DoS...

CVE-2026-64472

A flaw was found in the Linux kernel's vfio/mlx5 subsystem. This vulnerability arises from non-atomic bitfield operations, where multiple updates to shared data structures can occur concurrently. This race condition may lead to unexpected behavior or data corruption due to inconsistent state,...

CVE-2026-64338

A flaw was found in the Linux kernel's uss720 driver. When the uss720probe function attempts to initialize a USB parallel port parport device, it registers the parport but may fail to unregister it if a subsequent hardware register read operation fails. This improper resource management leaves a...

CVE-2026-64334

A flaw was found in the Linux kernel's digiacceleport USB serial driver. This vulnerability occurs when a USB device using the driver is disconnected, and operations such as opening or closing the device are happening concurrently. Persistent errors in sending out-of-band OOB write Universal Seri...

CVE-2026-64298

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

CVE-2026-64423

A flaw was found in the Linux kernel's Internet Group Management Protocol IGMP multicast group handling. When a network device is destroyed, its associated multicast groups are not properly removed from the device's hash table before their memory is reclaimed. This creates a race condition where ...

CVE-2026-64511

A flaw was found in the Linux kernel's ACPI NFIT core component. This vulnerability allows a local attacker to cause a system crash by triggering a specific notification related to Non-Volatile Memory NVM before the NVM table is fully set up. This improper handling of NVM notifications can lead t...

CVE-2026-42792

A flaw was found in Erlang OTP's Erlang Port Mapper Daemon epmd. An unauthenticated remote attacker can exploit an improper handling of exceptional conditions in the doaccept function. By exhausting connection slots through holding numerous TCP connections open and periodically sending data, the...

CVE-2026-56407

An integer overflow exists in libexpat's doProlog function due to improper handling of entity value lengths. A local attacker could exploit this to execute arbitrary code or access sensitive system data. Mitigation To prevent exploitation explicitly disable all internal and external XML entity...

CVE-2026-64478

A flaw was found in the Linux kernel's ALSA USB audio driver, specifically affecting DualSense controllers. A local attacker with physical access to a DualSense controller could exploit this by rapidly disconnecting and reconnecting the device due to a weak physical connection. This action can...

CVE-2026-64372

A flaw was found in the Linux kernel's cpufreq subsystem. This vulnerability, a use-after-free and double-free error, occurs during the two-phase OSC negotiation in the pcccpufreqdoosc function. A local attacker could exploit this memory corruption to cause a denial of service DoS or potentially...