[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97608 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: unregister loggers before per-net teardown nf_log_syslog and… | |
| CVE-2026-97609 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload nf_ct_set_timeout()… | |
| CVE-2026-97603 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: idpf: disable DIM work before freeing q_vectors idpf never drains the Tx/Rx DIM… | |
| CVE-2026-97597 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplicate leases per socket ipv6_flowlabel_get() allocates… | |
| CVE-2026-97598 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation fib_empty_table() probes every… | |
| CVE-2026-97599 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ieee802154: hwsim: serialize pib updates to fix double-free hwsim_update_pib()… | |
| CVE-2026-97600 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ieee802154: cc2520: fix FIFOP work use-after-free The FIFOP interrupt handler… | |
| CVE-2026-97601 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink TUNSETLINK allows a… | |
| CVE-2026-97602 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdir_pre_exit() flushes the… | |
| CVE-2026-97589 | 25 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix wrong return code to engine in asynch callbacks When… | |
| CVE-2026-97590 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function… | |
| CVE-2026-97591 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine… | |
| CVE-2026-97592 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In… | |
| CVE-2026-97593 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX When… | |
| CVE-2026-97594 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory… | |
| CVE-2026-97595 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: mac802154: fix use-after-free of sdata via queued RX frames The RX softirq… | |
| CVE-2026-97596 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records IPVS sync… | |
| CVE-2026-97582 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hwmon: (gpio-fan) Fix use-after-free in alarm work fan_alarm_irq_handler() queues… | |
| CVE-2026-97583 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: afs: Clear stale peer app data after address list changes… | |
| CVE-2026-97584 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix… | |
| CVE-2026-97585 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afs_edit_dir_remove() to use a… | |
| CVE-2026-97586 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: afs: Fix missing kunmap in afs_dir_search_bucket() Fix afs_dir_search_bucket() to… | |
| CVE-2026-97587 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask… | |
| CVE-2026-97588 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly When hardware… | |
| CVE-2026-97573 | 25 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()… | |
| CVE-2026-97574 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Don't free the live ring's TPA state on queue restart failure… | |
| CVE-2026-97575 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate AV1 tile counts The stateless AV1 decoders use… | |
| CVE-2026-97576 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC tile counts The stateless HEVC decoders read… | |
| CVE-2026-97577 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity… | |
| CVE-2026-97578 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer… | |
| CVE-2026-97579 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity… | |
| CVE-2026-97580 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity… | |
| CVE-2026-97581 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity… | |
| CVE-2026-97564 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.idmap descriptions cifs.idmap key descriptions… | |
| CVE-2026-97565 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead() CIFSSMBRead() reads… | |
| CVE-2026-97566 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 The in-kernel MPTCP… | |
| CVE-2026-97567 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect() and rtx Sashiko noted that the two event… | |
| CVE-2026-97568 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag Instead of using an… | |
| CVE-2026-97569 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Prevent queue stop with deferred completions When the driver receives a… | |
| CVE-2026-97570 | 25 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Bound SW TPA IDs to prevent crashes FW supports up to 1024 concurrent… | |
| CVE-2026-97571 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()… | |
| CVE-2026-97572 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() bnxt_init_rx_rings()… | |
| CVE-2026-97556 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount when cifs_sb_tlink() fails… | |
| CVE-2026-97557 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount in cifs_queue_oplock_break()… | |
| CVE-2026-97558 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix cifsFileInfo reference leak in deferred close When cifs_close()… | |
| CVE-2026-97559 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fail DACL rewrite when the new DACL exceeds 64K… | |
| CVE-2026-97560 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2_parse_native_symlink() When parsing a… | |
| CVE-2026-97561 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the… | |
| CVE-2026-97562 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tcon_super_cb() stores a raw… | |
| CVE-2026-97563 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() The SMB1… | |
| CVE-2026-97547 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN When… | |
| CVE-2026-97548 | 25 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions The… | |
| CVE-2026-97549 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix under-reservation of blocks when repairing sf directories Whilst running… | |
| CVE-2026-97550 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix unit conversions in per_binval computation LOLLM noticed that we're… | |
| CVE-2026-97551 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: initialise args->total for parent pointer updates xfs_parent_da_args_init()… | |
| CVE-2026-97552 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: initialise error in xfs_defer_finish_one() xfs_defer_finish_one() declares… | |
| CVE-2026-97553 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when inserting unmount event LOLLM complains that… | |
| CVE-2026-97554 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()… | |
| CVE-2026-97555 | 25 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite When… | |
| CVE-2026-97538 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Validate HID report lengths rog_ryujin_raw_event()… | |
| CVE-2026-97539 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithmetic The current code is… | |
| CVE-2026-97540 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rely on id table pointer arithmetic The current code is… | |
| CVE-2026-97541 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: don't store usb_device_id usb_device_id is not guaranteed to… | |
| CVE-2026-97542 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrep_agfl_fill LOLLM also points out that the… | |
| CVE-2026-97543 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: destroy seen inode bitmap when we fail to add a dirpath LOLLM observes a… | |
| CVE-2026-97544 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't leak dqacct if rhashtable insertion fails LOLLM observes that… | |
| CVE-2026-97545 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails LOLLM observes that in… | |
| CVE-2026-97546 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed… | |
| CVE-2026-97529 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] The FC BSG… | |
| CVE-2026-97530 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature… | |
| CVE-2026-97531 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip vport under deletion in report ID acquisition… | |
| CVE-2026-97532 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path When… | |
| CVE-2026-97533 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF A… | |
| CVE-2026-97534 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust free_sections during free_segment_range In… | |
| CVE-2026-97535 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size The VP control… | |
| CVE-2026-97536 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response… | |
| CVE-2026-97537 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking… | |
| CVE-2026-97228 | 25 Sep 2026 | CVSS 2.7 | Rapid7 PlatformRapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status component (`get_export_status`… | |
| CVE-2026-97522 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in __mptcp_subflow_push_pending() If… | |
| CVE-2026-97523 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race… | |
| CVE-2026-97524 | 25 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Once in a blue moon, the mptcp… | |
| CVE-2026-97525 | 25 Sep 2026 | CVSS 8.2 | LinuxIn the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated… | |
| CVE-2026-97526 | 25 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e… | |
| CVE-2026-97527 | 25 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock The… | |
| CVE-2026-97528 | 25 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error… | |
| CVE-2026-27867 | 25 Sep 2026 | CVSS 4.8 | Teldat Regesta Smart HD-PLC - TLDPH16D2An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration action is required) who has the… | |
| CVE-2026-92106 | 25 Sep 2026 | CVSS 2.3 | dashbitco lazy_htmlImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dashbitco lazy_html allows mutation XSS via a… | |
| CVE-2026-97898 | 25 Sep 2026 | CVSS 8.4 | akiaInsecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a… | |
| CVE-2026-97863 | 25 Sep 2026 | CVSS 6.3 | misp-modulesThe cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh) that authenticates to and calls the Cisco fireSIGHT… | |
| CVE-2026-80514 | 25 Sep 2026 | CVSS 5.3 | Unknown wpForo ForumThe wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address headers before using them to key… | |
| CVE-2026-86837 | 25 Sep 2026 | CVSS 5.3 | Unknown BooklyThe Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated… | |
| CVE-2026-88848 | 25 Sep 2026 | CVSS 4.2 | Unknown MasterStudy LMSThe MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership… | |
| CVE-2026-92550 | 25 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache Qpid Broker-JA pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This… | |
| CVE-2026-92560 | 25 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache Qpid Broker-JA pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This… | |
| CVE-2026-92564 | 25 Sep 2026 | CVSS 7.5 | Apache Software Foundation Apache Qpid Broker-JA pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects… | |
| CVE-2026-92573 | 25 Sep 2026 | CVSS 6.5 | Apache Software Foundation Apache Qpid Broker-JImproper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message delivery, message conversion… | |
| CVE-2026-6082 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… | |
| CVE-2026-6083 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… | |
| CVE-2026-6084 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… | |
| CVE-2026-6085 | 25 Sep 2026 | CVSS 5.1 | Novadigits technologies StockAgileStored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST… |
Page 156 of 168