CVE-2026-80793

A flaw was found in the Linux kernel's IPv4 fragmentation handling. When processing IPv4 packets, if the Maximum Transmission Unit MTU is set to an unusually small value, the kernel's fragmentation logic can enter an infinite loop. This loop causes the system to continuously allocate and transmit...

CVE-2026-67421

A flaw was found in rabbitmq-server. When the Open Authorization OAuth management interface is enabled, error messages fail to properly sanitize queue names and render them as raw HTML. An authenticated attacker with queue configuration permissions can create a queue name containing malicious HTM...

CVE-2026-67418

A flaw was found in rabbitmq-server. An authenticated user with message publishing permissions can transmit a specially crafted Message Queuing Telemetry Transport MQTT message containing an invalid property. When the broker forwards this message, an unhandled exception terminates the recipient's...

CVE-2026-67414

A flaw was found in rabbitmq-server. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by exhausting broker memory. When processing Advanced Message Queuing Protocol AMQP messages, the parser fails to limit the aggregate number of array elements across an...

CVE-2026-67416

A flaw was found in rabbitmq-server, where the Advanced Message Queuing Protocol AMQP parser fails to validate the length of message body descriptors. An authenticated remote attacker with write permissions can exploit this vulnerability by publishing a crafted message with an unrecognized...

CVE-2026-67415

A flaw was found in rabbitmq-server. An authenticated remote attacker with administrative privileges can cause a Denial of Service DoS by submitting crafted runtime parameters through the Shovel Management HTTP API. Because these parameters are converted into non-reclaimable memory identifiers...

CVE-2026-67411

A flaw was found in rabbitmq-server. When native Message Queuing Telemetry Transport MQTT or MQTT over WebSockets operates behind a trusted proxy utilizing the PROXY protocol, the broker may drop the client IP address before enforcing user restriction checks. This failure causes external...

CVE-2026-70197

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment...

CVE-2026-70035

A flaw was found in .NET. The vulnerability stems from insecure deserialization, where data transmitted over a network is reconstructed without adequate validation. A remote, unauthenticated attacker could exploit this issue by convincing a user to process specially crafted input. Successful...

CVE-2026-70190

A flaw was found in .NET. An authorized local attacker can exploit improper file link resolution before file access to achieve privilege escalation. By convincing a user to interact with a crafted file or link, the attacker can manipulate file paths to gain elevated privileges on the system...

CVE-2026-70161

A flaw was found in .NET. An authorized local attacker can achieve privilege escalation due to a path traversal vulnerability caused by improper file path restrictions. By manipulating file paths to access locations outside the intended directory, the attacker can gain elevated privileges on the...

CVE-2026-68498

A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit this flaw by submitting a crafted JSON payload containing ...

CVE-2026-94652

A flaw was found in Apache Thrift's C++ bindings. A remote attacker can cause a Denial of Service DoS by exploiting a memory leak where allocated system memory is not properly released after use. Over time, repeated requests can exhaust available memory and lead to service instability...

CVE-2026-97394

A flaw was found in kin-openapi's openapi3filter module. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by crashing the application. The issue occurs when processing OpenAPI 3.1 array schemas that lack an items definition, causing the parser to...

CVE-2026-95837

A flaw was found in containerd. This flaw allows privilege escalation when creating a container from a saved checkpoint because process security settings are restored directly from checkpoint data rather than enforcing the destination security policy. An attacker with permissions to create...

CVE-2026-107929

A flaw was found in curl. When connection pooling is used with forced local interface binding options, curl fails to include the source interface configuration in its connection reuse cache. An attacker able to initiate network requests in an application using pooled connections can cause...

CVE-2026-107928

A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expose sensitive data from neighboring memory buffers or crash...

CVE-2026-109938

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can trigger a Denial of Service DoS by sending crafted mapped video geometry updates to a connecting client with video redirection enabled. Due to an integer overflow during coordinate calculations, the...

CVE-2026-86409

A flaw was found in curl. When an application attempts to disable Amazon Web Services Signature Version 4 AWS SigV4 authentication on a reused connection handle, curl fails to clear the setting as expected. If the application subsequently directs a request to an untrusted or attacker-controlled...

CVE-2026-87866

A flaw was found in curl. This vulnerability allows a malicious server to bypass public key pinning when curl is built with the wolfSSL backend. By presenting a specially crafted certificate with a manipulated validity length field, the attacker can trick curl into improperly re-parsing the...

CVE-2026-87862

A flaw was found in curl. When importing HTTP Strict Transport Security HSTS cache records, loading a parent domain entry configured to include subdomains before a longer-lived subdomain entry silently drops the subdomain policy. Consequently, once the parent policy expires, curl fails to upgrade...

CVE-2026-86412

A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for --cookie and --cookie-jar, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies f...

CVE-2026-87863

A flaw was found in curl. When persistent HTTP Strict Transport Security HSTS caching is enabled, a remote HTTPS server can return an out-of-range expiration value that fails time serialization during cache saving. Because curl truncates the cache file prior to writing the update, this...

CVE-2026-86415

A flaw was found in curl. In builds configured with the Microsoft Schannel Transport Layer Security TLS backend, libcurl's connection cache fails to evaluate client certificate authentication settings when handling HTTP redirects. A malicious server can redirect a transfer to a different...

CVE-2026-87864

A flaw was found in curl. When curl is configured to perform carriage return and line feed CRLF conversion during an Internet Message Access Protocol IMAP append operation, it incorrectly reports the raw input size rather than the expanded byte count. Because the receiving server only reads the...

CVE-2026-86413

A flaw was found in curl. When curl is configured to follow HTTP redirects while performing Negotiate authentication using system-provided Kerberos credentials, it may forward authentication details to an unrelated destination. A malicious server can exploit this flaw by redirecting the client to...

CVE-2026-87865

A flaw was found in curl. When libcurl is built with the libssh2 backend and uses a hashed known-hosts file, host key verification can mistakenly report a key mismatch as a missing key to custom verification callbacks. A remote attacker who intercepts or controls the Secure Shell SSH connection c...

CVE-2026-86411

A flaw was found in curl that can allow unauthorized access through improper session reuse. When an unencrypted File Transfer Protocol FTP transfer reuses a pooled connection previously authenticated with a client certificate and upgraded using Transport Layer Security TLS, curl fails to perform ...

CVE-2026-87861

A flaw was found in curl. When ambient user credentials—where authentication is handled implicitly without providing a username—are used, curl may improperly reuse an existing connection authenticated via Negotiate for a different server origin. This improper connection reuse can cause requests...

CVE-2026-46472

A flaw was found in gstreamer1-plugins-good. When processing a crafted MP4 media file, the isomp4 plugin's qtdemuxparsechnl function can read past the boundary of a global array. A remote attacker could exploit this vulnerability by enticing a user or service to process a specially crafted file,...

CVE-2026-85985

A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...

CVE-2026-85977

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROCDUMP replies to a client application that uses the pmapgetmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation,...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-46471

A flaw was found in gstreamer1-plugins-good. An out-of-bounds read vulnerability exists in the isomp4 plugin when parsing custom metadata in MP4 files. By tricking a user or service into processing a specially crafted MP4 file, a remote attacker could cause the application to read past the end of...

CVE-2026-97712

A flaw was found in Sonatype Nexus Repository. This vulnerability allows an authenticated remote user with permissions to create or update roles to assign roles and privileges that their own account does not possess. By exploiting this issue, an attacker can achieve privilege escalation,...

CVE-2026-86047

A flaw was found in MariaDB, which can lead to SQL injection and privilege escalation. The SHOW CREATE SERVER and SHOW CREATE USER commands, as well as the mariadb-dump utility, do not properly quote identifiers and values when serializing SQL data. An authenticated, low-privileged attacker can...

CVE-2026-92389

A flaw was found in curl. When handling Trivial File Transfer Protocol TFTP transfers, a malicious server can trigger information disclosure by responding to a download request in a way that forces the client into transmit mode. Consequently, the client may unintentionally send leftover sensitive...

CVE-2026-92387

A flaw was found in curl. When communicating with a malicious server using protocols such as FTP, IMAP, POP3, or SMTP, the server can trigger an infinite loop by continuously transmitting data while omitting the final control response line. This behavior bypasses configured transfer timeouts,...

CVE-2026-92390

A flaw was found in curl. When the command-line tool is executed with the remote header name option to prevent overwriting existing files, a malicious server can bypass this protection by returning an intermediate HTTP 103 Early Hints response or through specific header ordering. This flaw allows...

CVE-2026-94265

A flaw was found in curl. When processing an HTTP redirect to an address containing user credentials, curl improperly retains and retransmits authentication state. A malicious server can exploit this behavior by redirecting curl to an untrusted destination, forcing the client to transmit sensitiv...

CVE-2026-94266

A flaw was found in curl. This vulnerability can lead to information disclosure by inadvertently revealing authentication credentials. When curl retrieves credentials from a local configuration file such as a .netrc file, requesting the effective URL metadata can cause the returned destination...

CVE-2026-92386

A flaw was found in curl. A remote malicious server can trigger a denial of service DoS in cookie handling by providing an overly long cookie name and value that exceeds curl's line-length limit when saved to a cookie file. Subsequent curl operations reading from this cookie file silently abort...

CVE-2026-92391

A flaw was found in curl. An attacker could supply deeply nested Multipurpose Internet Mail Extensions MIME structures to an application utilizing the libcurl library. During memory cleanup in the curlmimefree function, excessive recursive calls exhaust available stack memory, leading to an...

CVE-2026-97380

A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statemen...

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

CVE-2026-89778

A flaw was found in the Linux kernel's isofs ISO 9660 file system component, specifically within the zisofs decompression logic. A local attacker could exploit this vulnerability by mounting a specially crafted ISO9660 image. When a compressed file on such an image contains a malformed 'ZF' Rock...

CVE-2026-111581

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

CVE-2026-111270

A flaw was found in libmodplug. A local attacker could cause a Denial of Service DoS or memory corruption by tricking a user or service into processing a specially crafted Digital Sound Module DSM audio file. This issue occurs because the DSM file parser fails to properly validate pattern counts,...

CVE-2026-111271

A flaw was found in libmodplug. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing applications that rely on the library to process audio files. By enticing a user or automated system to load a specially crafted AMS audio tracker file, the decoder reads data past t...

CVE-2026-111156

A flaw was found in libtimidity. By providing a specially crafted SoundFont .sf2 file with unvalidated preset header values, an attacker can trigger out-of-bounds heap memory access in the initsoundfont function. This issue can lead to heap memory corruption or an application crash, resulting in ...