CVE-2026-80855

A flaw was found in the Linux kernel's Filesystem in Userspace FUSE component. A local user could exploit this by opening a file with the OTRUNC flag, which attempts to truncate the file. If a signal interrupts the Direct Access DAX page invalidation process during this operation, a lock can be...

CVE-2026-80843

A flaw was found in the Linux kernel's xfrm IPSec framework component. This vulnerability occurs when the xfrmstateconstruct function incorrectly manages memory allocations for authentication algorithms. Specifically, it can overwrite an existing allocation, leading to a memory leak. Over time,...

CVE-2026-80811

A flaw was found in the Linux kernel's iouring/cmd component. This vulnerability allows for a memory leak due to iovec arrays not being properly freed when asynchronous commands are not recycled. An attacker could potentially exploit this by triggering specific workloads, such as NVMe passthrough...

CVE-2026-93520

A flaw was found in xorg-x11-server. In the X Keyboard Extension XKB, key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-bas...

CVE-2026-93515

A flaw was found in xorg-x11-server. A use-after-free vulnerability, where the application accesses memory after it has already been released, occurs in the Present extension because window notification entries are not properly unlinked before cleaning up window resources. An authenticated local ...

CVE-2026-93519

A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow...

CVE-2026-93518

A flaw was found in xorg-x11-server. Due to an integer truncation issue during memory allocation calculations within the X Keyboard Extension XKB, the server allocates an undersized buffer when resizing key types. An authenticated local client can exploit this vulnerability by sending specially...

CVE-2026-93517

A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...

CVE-2026-86684

A flaw was found in Gitea. An improper authorization check in the push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When a repository owner has permission to use local paths, an administrator lacking that privilege can configure a pu...

CVE-2026-80821

A flaw was found in the Linux kernel's nvmet PCI Express Endpoint Function PCI-EPF component. A remote attacker can exploit this vulnerability by sending specially crafted Create IO Completion Queue CQ commands. This leads to a resource leak, as the system fails to properly release references to...

CVE-2026-80784

A flaw was found in the Linux kernel's Multipath TCP MPTCP component. A race condition exists during socket teardown and concurrent userspace Multipath TCP MPTCP general announce operations. This can allow a local attacker to trigger a memory leak by causing an allocation to occur after a list ha...

CVE-2026-80797

A flaw was found in the Near Field Communication NFC PN533 driver in the Linux kernel. When a PN533 device is removed while data fragments are still queued, the driver's cleanup process fails to properly release these fragments, resulting in a memory leak. This can lead to system instability or...

CVE-2026-106065

A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width height arithmetic while subsequent GEGL operations use the full extent, after integer overflow in size calculation Mitigation...

CVE-2026-84654

A flaw was found in Stapler, a web framework used by Jenkins. This vulnerability allows an attacker, who can submit configuration forms, to modify public static fields of configuration objects. This modification can lead to changes that apply globally across the entire Jenkins instance, potential...

CVE-2026-80902

A flaw was found in the Linux kernel's sun6i-dma component. When Direct Memory Access DMA transfers are terminated, active descriptors are not correctly reclaimed. This issue leads to a permanent memory leak and can also cause corruption of internal data structures within the kernel...

CVE-2026-80903

A flaw was found in the Linux kernel's Direct Rendering Manager DRM Xe output/audio OA module. When a specific configuration emission function fails, it does not properly release allocated memory for synchronization entries. This oversight leads to a memory leak, where system memory becomes...

CVE-2026-80885

A flaw was found in the Linux kernel's Andrew File System AFS component. The rxrpc Out-of-Band OOB message handler did not properly cancel its processing. This could lead to the handler continuing to process messages even when the network namespace is no longer active, or mishandling security...

CVE-2026-90711

A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this...

CVE-2026-77214

A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist ...

CVE-2026-105267

A flaw was found in Gitea. The web endpoint used for deleting repository tags shares request handling logic with release deletion without verifying if the target is an ordinary tag. An authenticated collaborator with code write permissions can exploit this flaw to bypass release access controls a...

CVE-2026-107174

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107169

A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This issue causes the application to crash unexpectedly, resulting in a Denial of Service DoS. Mitigation Mitigation for this...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-106064

A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted ...

CVE-2026-104633

A flaw was found in Gitea. This vulnerability can lead to a Denial of Service DoS due to memory exhaustion. When migrating a repository from an external instance, Gitea relies on the source server's reported settings to end paginated downloads. An authenticated user with migration permissions can...

CVE-2026-103435

A flaw was found in claude-code. An attacker with write access to a shared workspace can achieve arbitrary file modification and privilege escalation by exploiting a time-of-check to time-of-use TOCTOU race condition. By replacing a project file with a symbolic link between the permission check a...

CVE-2026-106509

A flaw was found in the Backstage plugin-techdocs-node package. When TechDocs is configured to build documentation locally or within a container, an authenticated user with write access to a registered repository can submit malicious configuration values within the MkDocs theme settings. This fla...

CVE-2026-77621

A flaw was found in Vector. A path traversal vulnerability in the file sink may allow a remote attacker who controls event fields referenced in the output path template to create or overwrite arbitrary files with the privileges of the Vector process. Depending on the files affected, this may resu...

CVE-2026-93452

A flaw was found in snappy-java. An attacker can trigger a buffer overflow vulnerability in the Snappy.compressByteBuffer, ByteBuffer function by providing specially crafted, incompressible data. This vulnerability allows the attacker to write past the end of the destination buffer, corrupting...

CVE-2026-107170

A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null...

CVE-2026-107168

A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service DoS for the affected application...

CVE-2026-107159

A flaw was found in miniupnpd. An unauthenticated attacker on the adjacent network can exploit this vulnerability to cause a Denial of Service DoS by crashing the service. By sending a specially crafted Simple Service Discovery Protocol SSDP search request with an invalid delay value, the attacke...

CVE-2026-107151

Missing authentication has been found in remote-execution task updates in the smartproxydynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote...

CVE-2026-106462

A flaw was found in Backstage. An authenticated user can cause source-control actions in the scaffolder component to fall back to broader integration credentials due to improper credential boundary enforcement. This issue allows the user to achieve privilege escalation by performing unauthorized...

CVE-2026-106457

A flaw was found in the Backstage Cloudflare Access authentication provider module. This vulnerability allows an attacker to gain unauthorized access to the Backstage application. The provider verifies a token's signature and team issuer but fails to confirm that the token was issued for the...

CVE-2026-104848

A flaw was found in tinypool. When an attacker is able to modify base JavaScript object properties prototype pollution, tinypool inadvertently copies these inherited configuration values into newly spawned worker threads. An attacker can exploit this behavior by injecting malicious startup...

CVE-2026-106463

A flaw was found in Backstage's plugin-catalog-backend-module-gitlab. When GitLab organization event ingestion is enabled, improper authorization checks during user ingestion can allow unintended identities to be registered in the catalog. A remote attacker may exploit this flaw to bypass catalog...

CVE-2026-106486

A flaw was found in the Backstage Bitbucket Scaffolder backend modules. The Bitbucket pull request Scaffolder actions do not properly validate filesystem paths. An authenticated attacker who can execute an eligible template and influence an allowed repository can manipulate files outside the...

CVE-2026-105244

A flaw was found in the RemoteSyslogAppender component of log4net. Non-standard and invisible characters in log messages are stripped rather than safely escaped. An attacker who can supply data that is written to logs can exploit this behavior to falsify or obfuscate log entries, potentially maki...

CVE-2026-105838

A flaw was found in libmikmod. An out-of-bounds read vulnerability in the Impulse Tracker IT module loader can result in a Denial of Service DoS. By persuading a user to open a specially crafted IT audio file containing oversized pattern rows, an attacker can trigger a memory read past allocated...

CVE-2026-105242

A flaw was found in log4net. A remote attacker can exploit this issue by sending a crafted request containing content such as markup that triggers ASP.NET request validation. When log4net attempts to parse the request parameters, an unhandled exception occurs, causing the logging system to discar...

CVE-2026-105241

A flaw was found in Apache log4net. An attacker who can supply data that is recorded in system logs can submit unencodable Unicode characters, triggering an encoding error in the SmtpPickupDirAppender component. When this failure occurs, the application discards all buffered log messages in the...

CVE-2026-105839

A flaw was found in libmikmod. An integer overflow in the Oktalyzer music module loader can result in a heap-based buffer overflow when parsing manipulated track counts. By tricking a user or application into processing a specially crafted audio file, an attacker could achieve arbitrary code...

CVE-2026-105801

A flaw was found in openapi-python-client. The generator fails to properly sanitize input from OpenAPI specification documents before rendering code strings and docstrings into generated Python files. An attacker could supply a specially crafted specification to inject arbitrary Python code,...

CVE-2026-105837

A flaw was found in libmikmod. A local attacker can cause arbitrary code execution or a Denial of Service DoS by enticing a user to open a specially crafted DSM audio module. An integer overflow during track count processing in the DSM file loader leads to a heap-based buffer overflow that corrup...

CVE-2026-104073

A flaw was found in NetBox. An authenticated user with permission to create custom links can exploit a template injection vulnerability to access sensitive session information and Application Programming Interface API tokens. When a victim views an object containing the malicious link, their...

CVE-2026-26287

A flaw was found in external-secrets. An issue during webhook generator initialization incorrectly clears the label enforcement setting, bypassing provider-side validation. An authenticated user with permissions to create webhook generators can target arbitrary secrets lacking the required label...

CVE-2026-98361

A flaw was found in the Linux kernel's RDMA over Converged Ethernet rxe driver. This flaw allows a local attacker to achieve privilege escalation by overwriting arbitrary read-only files. Missing write permission checks during On-Demand Paging ODP operations allow an unprivileged user to map memo...

CVE-2026-98360

A flaw was found in the Linux kernel's Remote Direct Memory Access over Converged Ethernet RDMA/rxe driver. A local user can trigger a Denial of Service DoS or system crash by attempting to attach to a multicast group when network device operations fail. In this scenario, improper error handling...

CVE-2026-98172

A flaw was found in the Linux kernel's Server Message Block SMB client subsystem. When establishing a Remote Direct Memory Access RDMA session, an error during session initialization can cause the cleanup routine to release the session structure without first terminating the active RDMA connectio...