[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97324 | 24 Sep 2026 | CVSS 7.3 | YunaiV ruoyi-vue-proA vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file… | |
| CVE-2026-97325 | 24 Sep 2026 | CVSS 4.3 | YunaiV ruoyi-vue-proA security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function… | |
| CVE-2026-97326 | 24 Sep 2026 | CVSS 7.3 | songxinjianqwe ChatA weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this issue is some unknown… | |
| CVE-2026-93289 | 24 Sep 2026 | CVSS 7.5 | Eufy Omni C20The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the… | |
| CVE-2026-93290 | 24 Sep 2026 | CVSS 5.5 | Eufy Omni C20Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data. | |
| CVE-2026-93291 | 24 Sep 2026 | CVSS 9.4 | Eufy Omni C20Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute… | |
| CVE-2026-93354 | 24 Sep 2026 | CVSS 8.1 | Gimanh taskview-communityTaskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth… | |
| CVE-2026-88761 | 24 Sep 2026 | CVSS 5.3 | Botslab G980HThe Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by… | |
| CVE-2026-88956 | 24 Sep 2026 | CVSS 6.8 | Botslab G980HThe Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The… | |
| CVE-2026-82164 | 24 Sep 2026 | CVSS 7.1 | Dell Trusted Device Client,Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low… | |
| CVE-2026-82372 | 24 Sep 2026 | CVSS 8.5 | Brocade SANnavImproper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys… | |
| CVE-2026-82566 | 24 Sep 2026 | CVSS 8.8 | Botslab G980HThe Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the… | |
| CVE-2026-84399 | 24 Sep 2026 | CVSS 8.8 | Botslab G980HThe Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not… | |
| CVE-2026-85496 | 24 Sep 2026 | CVSS 8.8 | Botslab G980HThe Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable… | |
| CVE-2026-77967 | 24 Sep 2026 | CVSS 8.1 | Botslab G980HThe Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the… | |
| CVE-2026-48540 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-48541 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-48542 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-48543 | 24 Sep 2026 | CVSS 5.4 | krayin laravel-crmKrayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary… | |
| CVE-2026-97320 | 24 Sep 2026 | CVSS 6.3 | YunaiV ruoyi-vue-proA flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function… | |
| CVE-2026-97321 | 24 Sep 2026 | CVSS 6.3 | YunaiV ruoyi-vue-proA vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function… | |
| CVE-2026-97322 | 24 Sep 2026 | CVSS 4.3 | YunaiV ruoyi-vue-proA vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This affects an unknown function of the file… | |
| CVE-2026-97323 | 24 Sep 2026 | CVSS 6.3 | YunaiV ruoyi-vue-proA vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file… | |
| CVE-2026-96747 | 24 Sep 2026 | CVSS 5.0 | PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionThe client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local… | Fix |
| CVE-2026-96748 | 24 Sep 2026 | CVSS 6.5 | PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimitersPyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When… | Fix |
| CVE-2026-96749 | 24 Sep 2026 | CVSS 8.4 | PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encodingAn integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document… | Fix |
| CVE-2026-89325 | 24 Sep 2026 | CVSS 7.8 | Rapid7 Insight AgentAn uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute… | |
| CVE-2026-82371 | 24 Sep 2026 | CVSS 8.5 | Brocade SANnavPlaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals with file read access to… | |
| CVE-2026-85738 | 24 Sep 2026 | CVSS 6.3 | liketrek TREKTREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or… | |
| CVE-2026-86857 | 24 Sep 2026 | CVSS 8.4 | ServiceNow AI PlatformServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if… | |
| CVE-2026-86858 | 24 Sep 2026 | CVSS 8.7 | ServiceNow AI PlatformServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could… | |
| CVE-2026-86859 | 24 Sep 2026 | CVSS 8.7 | ServiceNow AI PlatformServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if… | |
| CVE-2026-86860 | 24 Sep 2026 | CVSS 9.3 | ServiceNow AI PlatformServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an… | |
| CVE-2026-81455 | 24 Sep 2026 | CVSS 8.6 | Dell ThinOS 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An… | |
| CVE-2026-81473 | 24 Sep 2026 | CVSS 8.1 | Dell Rugged Control Center (RCC)Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local… | |
| CVE-2026-82157 | 24 Sep 2026 | CVSS 8.3 | Dell ThinOS 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated… | |
| CVE-2026-77293 | 24 Sep 2026 | CVSS 7.1 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an… | |
| CVE-2026-77294 | 24 Sep 2026 | CVSS 8.1 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the… | |
| CVE-2026-77320 | 24 Sep 2026 | CVSS 5.3 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes… | |
| CVE-2026-77321 | 24 Sep 2026 | CVSS 4.3 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP… | |
| CVE-2026-61823 | 24 Sep 2026 | CVSS 7.3 | code16 Sharp vulnerable to stored XSS via iframe srcdoc Attributecode16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored… | Fix |
| CVE-2026-61825 | 24 Sep 2026 | CVSS 8.7 | code16/sharp has a stored XSS via data-html-content Sanitizer Bypasscode16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored… | Fix |
| CVE-2026-62286 | 24 Sep 2026 | CVSS 4.3 | Dozzle label filters do not restrict container event and statistics streamsDozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label… | Fix |
| CVE-2026-65827 | 24 Sep 2026 | CVSS 6.5 | docmostDocmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0.95.0, any authenticated workspace member with edit rights… | |
| CVE-2026-52853 | 24 Sep 2026 | CVSS 5.2 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN can use the workspace… | |
| CVE-2026-56792 | 24 Sep 2026 | CVSS 4.4 | Dell Rugged Control Center (RCC)Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local… | |
| CVE-2026-57440 | 24 Sep 2026 | CVSS 7.5 | Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabledThe EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from… | Fix |
| CVE-2026-13249 | 24 Sep 2026 | CVSS 9.8 | Honeywell PD45 Industrial PrinterAn unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Honeywell PD45 Industrial Printer… | |
| CVE-2026-48070 | 24 Sep 2026 | CVSS 7.1 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl… | |
| CVE-2026-48072 | 24 Sep 2026 | CVSS 5.3 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts… | |
| CVE-2026-48073 | 24 Sep 2026 | CVSS 4.3 | docmostDocmost is open-source collaborative wiki and documentation software. From 0.70.0 until 0.80.1, a low-privileged authenticated user who can edit an… | |
| CVE-2026-52850 | 24 Sep 2026 | CVSS 4.3 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a… | |
| CVE-2026-13248 | 24 Sep 2026 | CVSS 8.8 | Honeywell PD45 Industrial PrinterAn Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerability in the web management… | |
| CVE-2026-13016 | 24 Sep 2026 | CVSS 9.3 | ServiceNow AI PlatformServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an… | |
| CVE-2026-97232 | 24 Sep 2026 | CVSS 6.3 | volotat AnagnorisisA vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function… | |
| CVE-2026-97233 | 24 Sep 2026 | CVSS 3.5 | volotat AnagnorisisA vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the… | |
| CVE-2026-95985 | 24 Sep 2026 | CVSS 8.8 | Amazon Kiro IDEThe file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the… | |
| CVE-2026-93405 | 24 Sep 2026 | CVSS 6.1 | Foundry376 MailspringMailspring is a fast, cross-platform, open-source email client. Prior to 1.17.0, attachment quick preview converts Markdown, DOCX, and XLSX… | |
| CVE-2026-91119 | 24 Sep 2026 | CVSS 6.4 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the topic small-action and nested-activity-log… | |
| CVE-2026-91120 | 24 Sep 2026 | CVSS 5.4 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, provider-controlled video titles in lazy video… | |
| CVE-2026-91121 | 24 Sep 2026 | CVSS 5.0 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, attacker-controlled upload filenames used in… | |
| CVE-2026-85056 | 24 Sep 2026 | CVSS 8.2 | ZITADEL: MFA bypass via session reuse in Login V2ZITADEL is an open source identity management platform. From 4.0.0 until 4.16.1, ZITADEL Login V2 creates a browser session after password… | Fix |
| CVE-2026-85057 | 24 Sep 2026 | CVSS 8.7 | ZITADEL: Actions V1 sandbox escape: host file read via require()ZITADEL is an open source identity management platform. From 3.0.0 until 3.4.13 and 4.16.1, ZITADEL Actions V1 enables the goja Node-compatible… | Fix |
| CVE-2026-81508 | 24 Sep 2026 | CVSS 4.3 | espressif esp-idfESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function… | |
| CVE-2026-71540 | 24 Sep 2026 | CVSS 7.5 | wazuhWazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.9.0 until 4.14.7… | |
| CVE-2026-63645 | 24 Sep 2026 | CVSS 7.5 | openobserveOpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and… | |
| CVE-2026-61815 | 24 Sep 2026 | CVSS 7.2 | zbateson/mail-mime-parser has CRLF header injection via attachment filenamezbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* functions and Pear libraries for reading messages in Internet Message… | Fix |
| CVE-2026-61816 | 24 Sep 2026 | CVSS 7.5 | zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIMEzbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* functions and Pear libraries for reading messages in Internet Message… | Fix |
| CVE-2026-61741 | 24 Sep 2026 | CVSS 9.3 | http4s-scala-xml has an XML External Entity (XXE) processing issuehttp4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these… | Fix |
| CVE-2026-61742 | 24 Sep 2026 | CVSS 9.3 | DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL executionDBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP… | Fix |
| CVE-2026-61782 | 24 Sep 2026 | CVSS 7.5 | @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build MetadataRsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server started by… | Fix |
| CVE-2026-61784 | 24 Sep 2026 | CVSS 6.1 | xhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSSxhtml-purifier is a Node.js library to take in raw/unknown/untrusted HTML and output cleaned, purified, trusted HTML. Versions prior to 0.4.3 do not… | Fix |
| CVE-2026-61788 | 24 Sep 2026 | CVSS 7.4 | @bytebase/dbhub's read-only mode does not prevent database writesDBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly = true` on the… | Fix |
| CVE-2026-61811 | 24 Sep 2026 | CVSS 6.5 | wazuhWazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the… | |
| CVE-2026-57179 | 24 Sep 2026 | CVSS 4.2 | social-auth-core has a Session Fixation issuePython Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted… | Fix |
| CVE-2026-61604 | 24 Sep 2026 | CVSS 9.3 | ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypassThe ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an… | Fix |
| CVE-2026-61732 | 24 Sep 2026 | CVSS 10.0 | Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM contextDecepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against… | Fix |
| CVE-2026-57175 | 24 Sep 2026 | CVSS 6.4 | social-auth-core has an Improper Authentication issuePython Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the… | Fix |
| CVE-2026-57176 | 24 Sep 2026 | CVSS 6.8 | social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend BackendPython Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend… | Fix |
| CVE-2026-57177 | 24 Sep 2026 | CVSS 4.3 | social-auth-core has Login CSRF via Missing State Parameter in LoginRadius BackendPython Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state… | Fix |
| CVE-2026-57178 | 24 Sep 2026 | CVSS 7.4 | social-auth-core: VK App backend accepts unsigned callback data when auth_key is missingPython Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback… | Fix |
| CVE-2026-54461 | 24 Sep 2026 | CVSS 6.5 | HabitRPG habiticaHabitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query parameter on Habitica's… | |
| CVE-2026-97520 | 24 Sep 2026 | CVSS 7.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: gfs2: move quota_init qc iterator increment Move qc++ from the loop body into the… | |
| CVE-2026-97521 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2_quota_init() checks for duplicate… | |
| CVE-2026-97512 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM… | |
| CVE-2026-97513 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2m_ctx after Instance Removed from List… | |
| CVE-2026-97514 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator… | |
| CVE-2026-97515 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845… | |
| CVE-2026-97516 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() It… | |
| CVE-2026-97517 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not… | |
| CVE-2026-97518 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject duplicate wiphy cipher suite entries Duplicate entries in… | |
| CVE-2026-97519 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix null pointer dereference in devcoredump cleanup In… | |
| CVE-2026-97503 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers… | |
| CVE-2026-97504 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk Review by… | |
| CVE-2026-97505 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Currently, the… | |
| CVE-2026-97506 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: crypto: ixp4xx - fix buffer chain unwind on allocation failure chainup_buffers()… | |
| CVE-2026-97507 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: dm1105: fix missing error check for dma_alloc_coherent The return value of… | |
| CVE-2026-97508 | 24 Sep 2026 | CVSS 7.5 | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we… | |
| CVE-2026-97509 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is… | |
| CVE-2026-97510 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()… |
Page 158 of 168