CVE-2026-97450

A flaw was found in the Linux kernel's ACPICA Advanced Configuration and Power Interface Component Architecture subsystem. The event handler routines fail to validate object types before reading handler fields in functions such as acpievhasdefaulthandler. A local user or environment with...

CVE-2026-98274

A flaw was found in the Linux kernel's networking subsystem. A local user could trigger a Denial of Service DoS or system instability by configuring a network socket to use both PSP encryption and a TCP Upper Layer Protocol ULP, such as TLS. Because these features conflict in how they track...

CVE-2026-97520

A flaw was found in the Linux kernel's GFS2 Global File System 2 file system. A local user could exploit this flaw by mounting a specially crafted filesystem image, causing an iterator progression error during quota initialization in the gfs2quotainit function. Successful exploitation could lead ...

CVE-2026-119561

A flaw was found in phpMyAdmin. This issue allows a remote attacker with valid database credentials to bypass two-factor authentication 2FA. The application fails to verify Web Authentication WebAuthn cryptographic assertion signatures against stored public keys during login. An attacker can...

CVE-2026-119591

A flaw was found in SQLite. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the host application. By supplying a specially crafted database file or SQL query that performs a count operation over a large multi-row VALUES clause, an attacker can trigger excessive...

CVE-2026-119601

A flaw was found in afflib. An attacker could exploit this vulnerability by supplying a specially crafted Advanced Forensic Format AFF image file containing mismatched page and sector sizes. When processed by an affected tool, this flaw causes a heap out-of-bounds write, resulting in memory...

CVE-2026-119563

A flaw was found in phpMyAdmin. This stored cross-site scripting XSS vulnerability allows an authenticated database user with table creation privileges to execute arbitrary script in another user's browser session. By creating a database table with a name containing malicious markup, the unescape...

CVE-2026-119554

A flaw was found in Moodle's External database enrolment plugin. This vulnerability allows an authenticated attacker with course editing privileges to inject malicious SQL Structured Query Language commands through the course identification number field. During scheduled synchronization with...

CVE-2026-119545

A flaw was found in Forgejo. A remote, unauthenticated attacker can conduct Server-Side Request Forgery SSRF by submitting an arbitrary OpenID identifier to the login endpoint. This issue forces the server to send unverified HTTP requests to internal addresses, loopback interfaces, or cloud...

CVE-2026-119562

A flaw was found in phpMyAdmin. An authenticated user can exploit a Structured Query Language SQL injection vulnerability by submitting unescaped parameters to the central columns interface. Because these inputs are processed into database queries executed with elevated control user privileges, a...

CVE-2026-119427

A flaw was found in phpMyAdmin. An authenticated remote attacker can exploit a Structured Query Language SQL injection vulnerability in the Designer component by submitting crafted parameters when saving configuration settings. This issue allows the attacker to execute unintended database queries...

CVE-2026-119378

A flaw was found in SQLite. A use-after-free vulnerability in the R-Tree extension allows an attacker to cause a Denial of Service DoS by convincing a user or service to process a specially crafted database. By manipulating internal shadow tables used by the extension, the application improperly...

CVE-2026-75880

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An authenticated client could exploit this vulnerability by attaching a consumer with a selector containing crafted wildcard usage. This action leads to excessive evaluation during message delivery attempts, occupying a shared broker...

CVE-2026-71575

A flaw was found in Apache CXF. The authentication freshness verification mechanism in the OpenID Connect OIDC client filter fails to properly evaluate session age due to a unit mismatch and flawed comparison logic. A remote attacker with a stale or expired session can exploit this issue to bypas...

CVE-2026-59386

A flaw was found in Cloud Foundry Controller CAPI. An authenticated user with SpaceSupporter permissions can improperly modify an application's start command or buildpack configuration, operations that should require elevated privileges. This privilege escalation can allow the unauthorized...

CVE-2026-85473

A flaw was found in auth0/java-jwt. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a JSON Web Token JWT containing an out-of-range timestamp claim. Because the issue occurs during token parsing before cryptographic signature verification, processing these malforme...

CVE-2026-119147

A flaw was found in ProFTPD. An authorization bypass vulnerability in the modsftp module fails to properly enforce write restrictions when handling file copy requests. An authenticated Secure File Transfer Protocol SFTP user can exploit this issue to copy readable files into write-restricted...

CVE-2026-119146

A flaw was found in ProFTPD. A remote, potentially unauthenticated attacker can trigger a buffer overflow in the modrewrite module by sending File Transfer Protocol FTP command arguments that exceed the internal buffer length. Successful exploitation corrupts session memory and terminates the...

CVE-2026-116127

A flaw was found in Starlet. The server improperly includes a message body when answering certain Hypertext Transfer Protocol HTTP requests, such as HEAD requests or responses that should have no body. A remote attacker could exploit this issue by sending pipelined requests over persistent...

CVE-2026-116130

A flaw was found in HTTP::Parser::XS. When processing HTTP request paths, the parser URL-decodes the path and terminates the string at decoded null bytes rather than using the full path length. A remote attacker can exploit this flaw by sending a crafted path containing an encoded null byte %00 t...

CVE-2026-115804

A flaw was found in Consul. An authenticated user can bypass authorization controls during health check registration to modify health checks belonging to another service running on the same node. This improper access control may allow an attacker to alter service health statuses, potentially...

CVE-2026-119586

A flaw was found in the SQLite command-line interface. This vulnerability allows an attacker to achieve arbitrary command execution by convincing a user to run the recovery command on a specially crafted database. Because the recovery process fails to sanitize embedded shell instructions within t...

CVE-2026-119373

A flaw was found in SQLite. A heap-based buffer overflow exists in the Full-Text Search 5 FTS5 extension during the merging of prefix document lists. An attacker capable of inserting negative row identifiers into a configured table and executing a prefix search query can cause data to be written...

CVE-2026-119270

An improper input validation flaw was found in the CacheStorage component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/577333729...

CVE-2026-119268

An integer overflow flaw was found in the Editing component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576984708...

CVE-2026-119267

A memory corruption flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576203565...

CVE-2026-119265

A memory corruption flaw was found in the Quota component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575201795...

CVE-2026-119264

A memory corruption flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575150692...

CVE-2026-119263

A memory corruption flaw was found in the GarbageCollection component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575143870...

CVE-2026-119262

An improper input validation flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574660146...

CVE-2026-119261

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574213633...

CVE-2026-76030

A memory corruption flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572269631...

CVE-2026-76029

A memory corruption flaw was found in the Network component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572055997...

CVE-2026-76027

A memory corruption flaw was found in the CacheStorage component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568894475...

CVE-2026-76026

A memory corruption flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567673200...

CVE-2026-76024

A memory corruption flaw was found in the MediaStream component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576215540...

CVE-2026-118005

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component Mitigation --- CME Mitigation Guidance 2026-11-02 --- Disclaimer: The following mitigation solutions are provided as a courtesy,...

CVE-2026-115866

A flaw was found in Starlet. When decoding chunked request bodies, an inefficient regular expression can result in catastrophic backtracking when encountering malformed chunk-size lines. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request, causing excessiv...

CVE-2026-115865

A flaw was found in perl-starlet. When processing incoming HTTP requests, the server preallocates memory for the entire declared payload size before receiving the request body. A remote attacker can send an HTTP request with an excessively large Content-Length header, causing the application to...

CVE-2026-98232

A flaw was found in the Linux kernel's SCSI subsystem. This vulnerability allows a malicious USB storage device to achieve arbitrary code execution or disclose sensitive kernel memory. By returning malformed MODE SENSE length values for a device advertising Command Duration Limits CDL support, an...

CVE-2026-119547

A flaw was found in Forgejo. The GetPublicKey Application Programming Interface API handler does not enforce ownership checks during key lookups. An authenticated remote attacker with read access can exploit this flaw by enumerating sequential key identifiers, resulting in information disclosure ...

CVE-2026-119556

A flaw was found in Moodle. This vulnerability allows an authenticated course user to cause an information disclosure of hidden grade items due to a missing permission check in the gradebook web service. By querying the service, an enrolled student can retrieve identifiers, names, and categories...

CVE-2026-119546

A flaw was found in Forgejo. A path traversal vulnerability in the repository restore functionality allows an attacker to access files located outside the intended archive directory. By convincing an administrator to restore a repository from a crafted dump file containing directory traversal...

CVE-2026-119553

A flaw was found in Moodle. An authenticated user with question import or lesson editing permissions can access sensitive server files, resulting in unauthorized information disclosure. By uploading a specially crafted archive file containing path traversal sequences in image source paths during ...

CVE-2026-119555

A flaw was found in Moodle. The grade feedback web service coregradesgetfeedback fails to properly enforce group-membership and course enrolment checks. An authenticated remote user with a non-editing teacher role can exploit this vulnerability by querying arbitrary user identifiers. This can lea...

CVE-2026-119542

A flaw was found in the Ickle query parser in Infinispan. A query containing deeply nested predicates can cause recursive parsing to exhaust the Java thread stack and throw an uncaught StackOverflowError. An authenticated user with BULKREAD permission who can submit a cache query may trigger the...

CVE-2026-119429

A flaw was found in phpMyAdmin. An authenticated remote attacker can disable two-factor authentication 2FA on an account by submitting a configuration update request without being prompted for password re-verification. An attacker with access to an active session can exploit this issue to remove...

CVE-2026-100227

A flaw was found in Apache CXF's JAX-RS XML Security module. The XML signature interceptors fail to properly verify that all XML content forwarded to the application is covered by the cryptographic signature. An attacker possessing any document signed by a trusted key can wrap it in unsigned...

CVE-2026-79650

A flaw was found in Apache CXF's OpenID Connect OIDC relying-party component. This vulnerability allows a remote attacker to redirect authenticated users to arbitrary external websites by supplying manipulated state parameters. The issue occurs because the application preserves and reuses these...

CVE-2026-86463

A flaw was found in the Apache CXF Feed Item Query Language FIQL query parser, which can lead to a Denial of Service DoS. When evaluating query expressions, the parser attempts excessive combinations upon encountering long input strings lacking operators. A remote attacker can exploit this...