CVE-2026-61702

A flaw was found in CUPS. An information disclosure vulnerability allows an attacker to read files on the system by submitting a specially crafted print job containing directory traversal characters in the language attribute. Because the scheduler fails to validate path separators when processing...

CVE-2026-55480

A flaw was found in CUPS. Insecure temporary file handling allows a local attacker with print administrative privileges to overwrite arbitrary system files. When configuring a printer, the print service creates a temporary file with a predictable name in a shared directory without verifying wheth...

CVE-2026-112259

A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application. Mitigation Avoid importing untrusted SBZ palette files. If GIMP is unused, remove the gi...

CVE-2026-92707

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

CVE-2026-109597

A flaw was found in Hugo. An attacker with permissions to author Markdown content can exploit this stored cross-site scripting XSS vulnerability by supplying crafted heading identifiers. When Hugo generates a table of contents or heading fragments, the unescaped attributes allow arbitrary HTML an...

CVE-2026-88901

A flaw was found in the Apache Camel Smooks component camel-smooks. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by submitting a crafted XML message containing external entity references. Because the component processes incoming XML data without...

CVE-2026-67410

A flaw was found in rabbitmq-server. When OAuth2 authentication is enabled for the management interface, the server inadvertently exposes the configured client secret within an unauthenticated JavaScript file. A remote, unauthenticated attacker with access to the management interface can retrieve...

CVE-2026-109574

A flaw was found in Hugo. A path traversal vulnerability in the Sass stylesheet processing component allows malicious themes or modules to access files outside the intended project directory. By supplying crafted stylesheet import directives, an attacker can read sensitive local files and include...

CVE-2026-107324

A flaw was found in the MongoDB Go Driver. An unauthenticated attacker can cause a Denial of Service DoS by supplying a malformed Binary JSON BSON document to an affected application. Due to an integer overflow during BSON value-length processing, validating or accessing the malformed input...

CVE-2026-19029

A flaw was found in HDF5. When decompressing data using the scale-offset filter, the library fails to verify whether a compressed data chunk is large enough before reading from it. An attacker could exploit this vulnerability by enticing a user or service to process a specially crafted HDF5 file,...

CVE-2026-98465

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem for the RISC-V architecture. Due to missing synchronization between interrupt controller device operations and virtual CPU vCPU execution, a local user with access to the KVM interface can trigger a race condition...

CVE-2026-98466

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem on ARM64 platforms. During system initialization in protected virtualization modes, the hypervisor fails to revoke host stage-2 access permissions for per-CPU hypervisor stack memory pages. A privileged local host c...

CVE-2026-80229

A flaw was found in libcurl when performing transfers via its multi interface with OpenSSL 3 provider configurations. Pooled TLS connections can outlive their originating easy handles, causing an allocated library context to be prematurely freed. This leaves the active connection with a dangling...

CVE-2026-91781

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference vulnerability in the ELF Section Handler. This could lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-112283

A flaw was found in libbluray. By supplying a specially crafted Clip Information .clpi file with an excessively large point value, an attacker can trigger uncontrolled memory and processor consumption during parsing. This issue can lead to system or application resource exhaustion, resulting in a...

CVE-2026-112282

A flaw was found in libbluray. This vulnerability allows an attacker to cause a Denial of Service DoS through an application crash when processing a specially crafted ClipInfo .clpi file. By supplying a file with an empty entry point map fine table, an out-of-bounds read is triggered during...

CVE-2026-112279

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending specially crafted bitmap cache orders to a connecting client. Due to insufficient input validation when handling bitmap cache data, the client application can read memory past...

CVE-2026-112278

A flaw was found in rdesktop. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability by sending specially crafted bitmap cache orders specifying large image dimensions alongside an undersized data payload. This causes the client application to read beyond i...

CVE-2026-112276

A flaw was found in the rasttopnm utility of Netpbm. An attacker could exploit this by enticing a user to convert a specially crafted Sun rasterfile image with a truncated color palette, triggering an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service DoS by crashi...

CVE-2026-112271

A flaw was found in libdisplay-info. An out-of-bounds read vulnerability exists in the DisplayID parser when processing data blocks whose declared length exceeds section boundaries. An attacker can exploit this issue by supplying crafted Extended Display Identification Data EDID—such as through a...

CVE-2026-109596

A flaw was found in Hugo. An improper link resolution vulnerability allows an attacker who controls a malicious theme or module to disclose sensitive files outside the intended project root. By placing a symbolic link a pointer referencing another file location or filesystem junction within a...

CVE-2026-109595

A flaw was found in Hugo. This vulnerability allows an attacker to cause unauthorized information disclosure through path traversal when processing untrusted themes or modules. By supplying relative file paths or symbolic links that reference locations outside the project directory, an attacker c...

CVE-2026-105236

A flaw was found in Erlang/OTP. This issue allows a remote attacker to bypass authentication and gain unauthorized access to protected services. When multiple virtual hosts share a listener, the Transport Layer Security TLS session cache does not bind cached sessions to the specific Server Name...

CVE-2026-93326

A flaw was found in BuildKit. An attacker with the ability to define build steps can bypass policy validation rules by supplying a specially crafted Git source. During a clone operation, this issue allows the repository to spoof its remote URL, making untrusted source code appear to originate fro...

CVE-2026-93323

A flaw was found in BuildKit. A local user with build permissions can trigger a Denial of Service DoS by submitting a build context containing an oversized Dockerfile or .dockerignore file. Because the Dockerfile frontend loads these files directly into memory without enforcing a size limit, an...

CVE-2026-93315

A flaw was found in BuildKit. When proxy networking with Certificate Authority CA injection is enabled, a build can modify its CA certificate bundle before cleanup operations execute. A local user running a build can exploit this issue to cause the cleanup process to hang, resulting in a Denial o...

CVE-2026-91779

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference within the Eh Frame Handler component by performing a specific manipulation. This vulnerability can lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-98530

A flaw was found in the Linux kernel's kprobes subsystem. A privileged local user could trigger improper synchronization when disabling or flushing probe optimization, causing the process to hang indefinitely while holding an internal lock. This issue can make administrative interfaces...

CVE-2026-98464

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine implementation for the RISC-V architecture. This vulnerability can lead to a Denial of Service DoS or host system crash due to a use-after-free memory issue during virtual machine teardown. A race condition allows a timer...

CVE-2026-91782

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference in the elfx86allocatedynrelocs function. This vulnerability could lead to a Denial of Service DoS condition, making the affected system or application unavailable...

CVE-2026-91780

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference by manipulating input to the 'elflinkaddobjectsymbols' function. This can lead to a denial of service DoS condition, making the affected component unavailable...

CVE-2026-88900

A flaw was found in Apache Camel's camel-jgroups component. This vulnerability allows an unauthenticated attacker on an adjacent network to achieve arbitrary code execution on the target system. By default, the component joins cluster communication channels without authentication or encryption an...

CVE-2026-79985

A flaw was found in the Apache Camel Server Message Block SMB component, leading to information disclosure and unauthorized file tampering. When retrieving files from a remote share, the component fails to properly validate and restrict file paths returned in directory listings. A compromised or...

CVE-2026-80344

A flaw was found in Apache Camel's AS2 Applicability Statement 2 component. A remote attacker can trigger Server-Side Request Forgery SSRF by sending a message that specifies an arbitrary destination address for asynchronous delivery receipts. Because the application sends receipts to the...

CVE-2026-80343

A flaw was found in Apache Camel's Netty HTTP component. Due to inconsistent case-sensitivity handling, security constraint checks evaluate requested URL paths using case-sensitive matching while endpoint dispatch does not. A remote, unauthenticated attacker can exploit this discrepancy by alteri...

CVE-2026-78164

A flaw was found in Apache Camel HTTP producer components. When processing messages that override destination addresses, the service improperly evaluates user-controlled header values through its internal configuration resolver. A remote attacker can exploit this vulnerability by submitting...

CVE-2026-71253

A flaw was found in Apache Johnzon. This vulnerability allows a remote attacker to potentially execute arbitrary code by submitting a specially crafted JSON payload. Due to unsafe class loading in the ClassConverter component, the application loads and statically initializes an attacker-specified...

CVE-2026-67409

A flaw was found in rabbitmq-server. When retrieving cryptographic signing keys from an identity provider's JSON Web Key Set JWKS endpoint, the server fails to validate HTTP response status codes. If an error response is returned with valid JSON lacking key data, all previously cached signing key...

CVE-2026-93450

A flaw was found in the go-openapi/swag library's jsonutils component. This vulnerability, caused by uncontrolled recursion during ordered JSON JavaScript Object Notation parsing and serialization, allows remote unauthenticated attackers to submit deeply nested JSON documents. This can lead to a...

CVE-2026-98528

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output character device interface. This vulnerability allows a local user to cause an information disclosure of sensitive kernel stack data. When an error occurs while querying GPIO line details, the kernel fails to clear the data...

CVE-2026-98458

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS through a reference count leak during Bluetooth Isochronous ISO channel attachment. When a socket attempts to attach to a channel that is already connected or in use by another socket, t...

CVE-2026-95838

A flaw was found in containerd. When unpacking image layers with specific file configurations such as opaque whiteout markers, the unpack handler performs repeated directory traversals. An attacker can exploit this by providing a maliciously crafted container image, leading to a Denial of Service...

CVE-2026-98529

A flaw was found in the Linux kernel's Arizona General Purpose Input/Output GPIO driver. This issue allows a local user to cause a resource leak by triggering an error during persistent GPIO line configuration. Specifically, if an internal register update fails while changing pin direction from...

CVE-2026-98527

A flaw was found in the Linux kernel's Zynq General Purpose Input/Output GPIO driver. A local user could cause a Denial of Service DoS when requesting a GPIO line fails due to improper reference count handling in the runtime power management subsystem. The error path fails to decrement the usage...

CVE-2026-106589

A flaw was found in OpenSSH. This vulnerability may allow privilege escalation on operating systems that lack support for file-descriptor passing and unprivileged terminal device allocation. In these environments, the session process unexpectedly retains administrative root privileges after user...

CVE-2026-98516

A flaw was found in the Linux kernel's Nouveau graphics driver. The driver fails to properly release a reference to a PCI Peripheral Component Interconnect bridge device after querying its configuration space during initialization. A local user could exploit this flaw during device setup or bindi...

CVE-2026-98451

A flaw was found in the Linux kernel's SMB client. A local user can trigger this issue by opening an existing symbolic link or non-regular file on an SMB mount using file creation flags. Because the client improperly handles non-regular files during open operations, it fails to release directory...

CVE-2026-98519

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. A local user with access to the debugfs interface can trigger an interrupted lock operation during device testing, which prevents the driver from releasing an acquired runtime power management reference. Consequently, the graphics...

CVE-2026-98461

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability can lead to a Denial of Service DoS due to an out-of-bounds memory read. The issue occurs when the Host Controller Interface HCI socket implementation filters event packets without verifying that the packet buffer is...

CVE-2026-98526

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. This flaw allows an adjacent attacker to cause a Denial of Service DoS via a kernel crash. When transmitting an LLC response over stacked network interfaces, such as Virtual Local Area Networks VLANs, the kernel allocates...