CVE-2026-13002

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients. Mitigation Mitigation for this issue is either no...

CVE-2026-19879

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

CVE-2026-70631

A flaw was found in FFmpeg. An attacker can exploit an uninitialized heap memory disclosure vulnerability in the native TIFF decoder by providing a specially crafted TIFF file. This crafted file can cause the tiffunpackzlib function to include stale data from previous memory allocations in the...

CVE-2026-73428

A flaw was found in Trix, a what-you-see-is-what-you-get rich text editor. A remote attacker can exploit this stored cross-site scripting XSS vulnerability by pasting specially crafted HTML into the editor. This allows a malicious javascript: Uniform Resource Identifier URI to be embedded, which...

CVE-2026-22555

A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...

CVE-2026-65975

A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...

CVE-2026-62663

A flaw was found in Banks. An attacker who can control template variables processed by Banks can exploit a path traversal vulnerability in the media filters image, audio, video, document. This allows the attacker to read arbitrary files on the system where Banks is running, such as sensitive...

CVE-2026-73070

A flaw was found in Vim. The socket server backend accepts an unbounded number of client connections, causing file descriptors to overflow internal data structures. A local process able to connect to the server socket can exploit this to corrupt stack memory or terminate the Vim server. This can...

CVE-2026-73074

An integer overflow in Vim's propaddone function allows a local attacker to cause a denial of service or potentially execute arbitrary code by adding an excessive number of text properties to a single line. Mitigation Do not run untrusted Vim scripts or plugins that call propadd in an unbounded...

CVE-2026-73076

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...

CVE-2026-19157

A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outsid...

CVE-2026-19617

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-66909

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...

CVE-2026-73231

A flaw was found in Faker, a library for generating fake data. The faker.helpers.fake method allows an attacker to control fake templates, which can then access the Function constructor. This access, specifically through fakeEval.resolveProperty when a function returns another function, enables...

CVE-2026-19027

A flaw was found in HDF5, a widely used data management library. This vulnerability allows an attacker to craft a malicious HDF5 file that, when processed, can cause the application to read beyond its allocated memory. This out-of-bounds read could lead to the disclosure of sensitive information ...

CVE-2026-56657

A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...

CVE-2026-19028

A flaw was found in HDF5. An attacker can craft a malicious HDF5 file with a specially designed Fletcher32-filtered chunk. When this file is processed, an integer underflow occurs due to insufficient size validation, leading to a massive out-of-bounds read. This vulnerability can cause the...

CVE-2025-31936

A flaw was found in IntelR XeonR 6 processors when using IntelR TDX within System Management Mode SMM. Improper handling of overlap between protected memory ranges may allow a local attacker with privileged user access to escalate privileges. This vulnerability could lead to high impact on...

CVE-2026-19026

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...

CVE-2026-18370

A flaw was found in entr. A local attacker can exploit a heap-based buffer overflow in the runutility function by supplying specially crafted command-line arguments or using the / substitution feature. This can lead to memory corruption, causing a process abort and a denial of service DoS...

CVE-2026-19024

A flaw was found in HDF5. A local attacker could exploit a vulnerability in the H5Pgetfillvalue function by providing a specially crafted dataset. This could lead to a denial of service, making the system unavailable. Mitigation To reduce risk prior to patching, restrict processing HDF5 files fro...

CVE-2026-19025

A flaw was found in HDF5. An attacker can craft a malicious HDF5 file that, when opened and read by an application, exploits a validation bypass. This bypass, related to mismatched chunk-layout dimensionality and dataspace rank, leads to a divide-by-zero error, causing a denial of service DoS and...

CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

CVE-2026-33328

A flaw was found in libvips, an image processing library. On 32-bit systems, a vulnerability in the gifload operation could lead to an integer overflow due to incorrectly determined image dimensions. This could allow a local attacker to cause the application to crash, resulting in a denial of...

CVE-2025-35973

A flaw was found in IntelR Processors within Ring 0, affecting the kernel, hypervisor, and bare metal operating systems. Improper handling of values may allow an authorized adversary with privileged user access to perform a local, high-complexity attack. This can lead to an escalation of privileg...

CVE-2026-35590

A flaw was found in libvips. The EXIF decoder did not properly verify the range of EXIF tag groups, which could lead to a null pointer dereference. A local user could exploit this by providing specially crafted EXIF data, causing the application to crash and resulting in a denial of service...

CVE-2026-42500

A flaw was found in golang.org/x/image/bmp. A remote attacker could exploit this vulnerability by providing a specially crafted paletted BMP Bitmap file. Decoding this file with an out-of-range palette index causes the application to panic when accessing invalid image pixels, leading to a Denial ...

CVE-2026-41479

A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit the OAuth 2.0 authorization endpoint by providing an unsupported response type and a malicious redirect Uniform Resource Identifier URI. This allows the attacker to redirect...

CVE-2026-19113

A flaw was found in Consul. A remote, unauthenticated attacker could exploit several agent HTTP API endpoints by sending a request with an unbounded body. This could cause the agent to consume substantial memory, leading to a denial of service DoS condition...

CVE-2026-15972

A flaw was found in Consul. A remote attacker can exploit this vulnerability by sending numerous incomplete connection requests to the external gRPC gRPC Remote Procedure Call listeners. This unbounded connection acceptance can exhaust agent resources, such as file descriptors, goroutines, and...

CVE-2026-19015

A flaw was found in Consul. A remote attacker can exploit an uncontrolled resource consumption vulnerability in the Connect CA roots endpoint. This allows the attacker to continuously grow the agent's Connect CA roots cache, bypassing configured cache limits. The consequence is a denial of servic...

CVE-2026-25589

A flaw was found in RedisBloom. An authenticated attacker with permission to execute the RESTORE command on a Redis server with the RedisBloom module loaded can supply a crafted serialized payload that causes an invalid memory access due to an improper validation of serialized values processed...

CVE-2026-33327

A flaw was found in libvips, an image processing library. The vipsload operation, responsible for loading images, could incorrectly calculate image dimensions. This error leads to an integer overflow, which subsequently causes a heap-based buffer overflow. A local attacker with low privileges cou...

CVE-2026-35591

A flaw was found in libvips, an image processing library. The tiffload operation, which handles loading TIFF images, could incorrectly identify the number of channels in embedded JPEG or JPEG2000 tiles. This vulnerability may allow a local attacker with low privileges to trigger a buffer overflow...

CVE-2026-48931

A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure. Mitigation Limit outbound HTTP/1.1 from Node.js clients to...

CVE-2026-48937

A flaw in the Node.js HTTP/2 API allows remote attackers to cause a Denial of Service DoS by sending data after a GOAWAY frame, exhausting server resources. Mitigation Restrict Node.js HTTP/2 servers to trusted clients with host firewall or network segmentation. If HTTP/2 is not required, disable...

CVE-2026-48809

A flaw was found in python-engineio. In specific configurations using ASGI with long polling or Aiohttp with WebSocket transport, the server does not properly validate the size of incoming messages before loading them into memory. A remote attacker can exploit this by sending oversized messages,...

CVE-2026-46382

A flaw was found in the Meeting Room Booking System MRBS. This vulnerability, known as Server-Side Request Forgery SSRF, allows a remote attacker to trick the server into making requests to internal or local network resources. By exploiting this, an attacker could potentially gain unauthorized...

CVE-2026-68451

A flaw was found in the Linux kernel's s390 zcrypt module. The ccaecc2protkey function, responsible for handling Common Cryptographic Architecture CCA Elliptic Curve Cryptography ECC private key requests, does not properly validate the length of the key token. This allows a local attacker to...

CVE-2026-68454

A flaw was found in the KVM Kernel-based Virtual Machine subsystem of the Linux kernel, affecting the s390 PCI implementation. When a guest operating system registers interrupt requests IRQs without a specific summary bit, the system incorrectly stores an invalid memory address. This improper...

CVE-2026-68452

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of the length of CCA AES cipher key requests. A local attacker could exploit this by providing a specially crafted key token, which may lead to a buffer overflow. This could result...

CVE-2026-68453

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of user-controlled length fields within the Common Cryptographic Architecture CCA token structures. An attacker could manipulate these fields to cause a buffer over-read or...

CVE-2026-59196

A flaw was found in pnpm, a package manager. This vulnerability allows a remote attacker to manipulate the package installation process by using a specially crafted lockfile alias. This could lead to path traversal, enabling the attacker to write files outside the designated installation director...

CVE-2026-66804

A flaw was found in the console component. An authenticated user can exploit a Server-Side Request Forgery SSRF vulnerability by manipulating the towerHost parameter when accessing the /ansibletower handler. This allows the user to bypass pathname validation and access arbitrary internal or...

CVE-2026-73266

A flaw was found in the clusterclaims-controller component of Multicluster Engine MCE. An authenticated tenant can exploit this vulnerability by manipulating ClusterClaim labels. This allows the tenant to force a cluster to join a ManagedClusterSet belonging to another tenant. Such unauthorized...

CVE-2026-67986

A flaw was found in amazingprint. This vulnerability allows an attacker to inject and execute arbitrary Ruby code within the host process. The flaw occurs when the grep method is called with a block, and a specially crafted method name containing Ruby interpolation syntax is processed. Successful...

CVE-2026-71287

A flaw was found in Cacti. An authenticated user, regardless of their privilege level, can exploit a vulnerability where user-supplied input for sorting database columns is not properly sanitized. This allows for the injection of malicious SQL commands, leading to time-based blind SQL injection...

CVE-2026-60075

A flaw was found in Date::Manip for Perl. An attacker could exploit a vulnerability in the parsetime function by providing a specially crafted input string containing long sequences of whitespace. This could lead to excessive CPU consumption due to inefficient processing, resulting in a Denial of...

CVE-2026-64597

A flaw was found in the Linux kernel's Server Message Block SMB client. A vulnerability exists in the SMB2close replay mechanism where a response buffer can be freed twice. This double-free condition can lead to memory corruption, potentially resulting in a denial of service or the execution of...

CVE-2026-73584

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the /tmp directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. Th...