[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93819 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan lock Hold the… | |
| CVE-2026-93820 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the… | |
| CVE-2026-93821 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the… | |
| CVE-2026-93822 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lock Hold the… | |
| CVE-2026-93823 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl… | |
| CVE-2026-93810 | 24 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput() in error handling in… | |
| CVE-2026-93811 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling 1. When… | |
| CVE-2026-93812 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr… | |
| CVE-2026-93813 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen [BUG] A crafted btrfs image can… | |
| CVE-2026-93814 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI… | |
| CVE-2026-93801 | 24 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated… | |
| CVE-2026-93802 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rsi: validate beacon length before fixed buffer copy rsi_prepare_beacon()… | |
| CVE-2026-93803 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index receive bound checks libipw_rx() reads… | |
| CVE-2026-93804 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: ibss: wait for in-flight TX on disconnect While leaving an IBSS… | |
| CVE-2026-93805 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access… | |
| CVE-2026-93806 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate assoc response length before status and IE access… | |
| CVE-2026-93807 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers rsi_hal_load_key()… | |
| CVE-2026-93808 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: caiaq: validate EP1 reply lengths… | |
| CVE-2026-93809 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcu_barrier() in… | |
| CVE-2026-93793 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX_CMD response layout TX_CMD parsing uses… | |
| CVE-2026-93794 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large… | |
| CVE-2026-93795 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix leaks and online flag on radix_tree_insert failure When… | |
| CVE-2026-93796 | 24 Sep 2026 | CVSS 7.0 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: null RX pointers after free When iwl_pcie_tx_init() fails… | |
| CVE-2026-93797 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix an off-by-1 boundary check Before looking at the 11th… | |
| CVE-2026-93798 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup in merge_reloc_roots() If the root we got has zero… | |
| CVE-2026-93799 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate sta_id in BA window status notif… | |
| CVE-2026-93800 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() If… | |
| CVE-2026-93784 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() The KASAN allocation… | |
| CVE-2026-93785 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its… | |
| CVE-2026-93786 | 24 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX… | |
| CVE-2026-93787 | 24 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir… | |
| CVE-2026-93788 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tbl_rev bounds… | |
| CVE-2026-93789 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: bound aligned TLV advance in FW parser Validate ALIGN(tlv_len, 4)… | |
| CVE-2026-93790 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif… | |
| CVE-2026-93791 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware ba_notif->tid… | |
| CVE-2026-93792 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix a possible underflow We shouldn't trust the firmware… | |
| CVE-2026-93288 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state… | |
| CVE-2026-93542 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to… | |
| CVE-2026-93543 | 24 Sep 2026 | CVSS 7.4 | x.org libXiAn out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | |
| CVE-2026-93544 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X… | |
| CVE-2026-93545 | 24 Sep 2026 | CVSS 6.5 | x.org libXiAn out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. | |
| CVE-2026-93781 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi_eh_lock_door()… | |
| CVE-2026-93782 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest… | |
| CVE-2026-93783 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame rfcomm_recv_frame()… | |
| CVE-2026-91134 | 24 Sep 2026 | CVSS 5.4 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the Discourse post sanitizer allowed a stored… | |
| CVE-2026-91160 | 24 Sep 2026 | CVSS 8.2 | rmyndharis OpenWAOpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the session.qr event to a… | |
| CVE-2026-91161 | 24 Sep 2026 | CVSS 6.4 | rmyndharis OpenWAOpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/{sessionId}/groups/{groupId}/invite-code… | |
| CVE-2026-93284 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors… | |
| CVE-2026-93285 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: f2fs: embed f2fs_gc_kthread in f2fs_sb_info Instead of allocating f2fs_gc_kthread… | |
| CVE-2026-93286 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp_send_ddp() aarp_send_ddp()… | |
| CVE-2026-93287 | 24 Sep 2026 | CVSS 7.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block… | |
| CVE-2026-88385 | 24 Sep 2026 | CVSS 6.5 | VulnerabilityMini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML parsing. Specially crafted XML input can cause text… | |
| CVE-2026-88390 | 24 Sep 2026 | CVSS 7.7 | VulnerabilityAn out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input containing an… | |
| CVE-2026-91122 | 24 Sep 2026 | CVSS 8.7 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the video placeholder component allowed crafted… | |
| CVE-2026-91123 | 24 Sep 2026 | CVSS 7.2 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the iframe src traversal guard did not treat… | |
| CVE-2026-91132 | 24 Sep 2026 | CVSS 4.3 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, sites using wildcard patterns in the… | |
| CVE-2026-91133 | 24 Sep 2026 | CVSS 6.5 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, authenticated users could supply unescaped SQL… | |
| CVE-2026-88372 | 24 Sep 2026 | CVSS 7.5 | Vulnerabilitylibsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files. | |
| CVE-2026-88373 | 24 Sep 2026 | CVSS 7.5 | Vulnerabilitylibde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL() is called with a zero-length… | |
| CVE-2026-88376 | 24 Sep 2026 | CVSS 7.5 | VulnerabilityBento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create(). A specially crafted MP4 file… | |
| CVE-2026-88377 | 24 Sep 2026 | CVSS 6.2 | VulnerabilityBento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially crafted MP4 file containing… | |
| CVE-2026-88378 | 24 Sep 2026 | CVSS 9.8 | VulnerabilityQuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag(). | |
| CVE-2026-88382 | 24 Sep 2026 | CVSS 7.5 | Vulnerabilityhiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. | |
| CVE-2026-88383 | 24 Sep 2026 | CVSS 6.2 | Vulnerabilitylibical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data containing a parameterized… | |
| CVE-2026-88384 | 24 Sep 2026 | CVSS 5.5 | VulnerabilityOpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type… | |
| CVE-2026-79762 | 24 Sep 2026 | CVSS 5.5 | Termix-SSH TermixTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives… | |
| CVE-2026-79763 | 24 Sep 2026 | CVSS 5.3 | Termix-SSH TermixTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST… | |
| CVE-2026-79764 | 24 Sep 2026 | CVSS 7.7 | Termix-SSH TermixTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the… | |
| CVE-2026-79766 | 24 Sep 2026 | CVSS 9.1 | Termix-SSH TermixTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an… | |
| CVE-2026-84302 | 24 Sep 2026 | CVSS 4.2 | discourseDiscourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with… | |
| CVE-2026-88367 | 24 Sep 2026 | CVSS 6.5 | VulnerabilityNanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization. A specially crafted… | |
| CVE-2026-56744 | 24 Sep 2026 | CVSS 8.7 | `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction`@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, while `@bsv/wallet-toolbox-client` and `@bsv/wallet-toolbox-mobile`… | Fix |
| CVE-2026-62368 | 24 Sep 2026 | CVSS 8.4 | Snipe-IT: Stored XSS via Custom Field name in asset-list column headersSnipe-IT is an IT asset/license management system. Prior to 8.7.0, a user with the customfields.create permission can store markup in… | Fix |
| CVE-2026-63493 | 24 Sep 2026 | CVSS 8.1 | Snipe-IT: 2FA bypass via the API token flowSnipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission can reach… | Fix |
| CVE-2026-63498 | 24 Sep 2026 | CVSS 5.4 | Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files APISnipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_type}/{id}/files/{file_id}… | Fix |
| CVE-2026-26054 | 24 Sep 2026 | CVSS 6.8 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using… | |
| CVE-2026-47132 | 24 Sep 2026 | CVSS 5.4 | thorsten phpMyFAQphpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in… | |
| CVE-2026-56738 | 24 Sep 2026 | CVSS 8.5 | phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word InsertionphpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement using… | Fix |
| CVE-2026-97226 | 24 Sep 2026 | CVSS 6.3 | DbGateA vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file… | |
| CVE-2026-96873 | 24 Sep 2026 | CVSS 5.5 | The Wikimedia Foundation Mediawiki - CirrusSearch ExtensionImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Mediawiki - CirrusSearch extension allows… | |
| CVE-2026-97225 | 24 Sep 2026 | CVSS 6.3 | DbGateA flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the… | |
| CVE-2026-96744 | 24 Sep 2026 | CVSS 7.1 | MongoDB Laravel MongoDB (PHP)Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a… | |
| CVE-2026-96745 | 24 Sep 2026 | CVSS 5.6 | MongoDB PHP DriverDeserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to… | Fix |
| CVE-2026-96746 | 24 Sep 2026 | CVSS 6.5 | MongoDB C DriverAn out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and… | Fix |
| CVE-2026-96750 | 24 Sep 2026 | CVSS 7.1 | MongoDB CompassMongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell… | |
| CVE-2026-93541 | 24 Sep 2026 | CVSS 6.5 | X.org libXiAn out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a | |
| CVE-2026-93278 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown… | |
| CVE-2026-93279 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup… | |
| CVE-2026-93280 | 24 Sep 2026 | CVSS 8.8 | LinuxIn the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size… | |
| CVE-2026-93281 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix HE extended capability length check… | |
| CVE-2026-93282 | 24 Sep 2026 | CVSS 8.1 | LinuxIn the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an… | |
| CVE-2026-93283 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix device_register() error path When device_register() fails in… | |
| CVE-2026-93425 | 24 Sep 2026 | CVSS 9.9 | dokployDokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure passes the… | |
| CVE-2026-93270 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn The… | |
| CVE-2026-93271 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate ath11k can… | |
| CVE-2026-93272 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 The changes… | |
| CVE-2026-93273 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: regulator: tps6594: Fix device node reference leaks in multiphase loop In… | |
| CVE-2026-93274 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the… | |
| CVE-2026-93275 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pt_event_stop() is called… | |
| CVE-2026-93276 | 24 Sep 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS… |
Page 160 of 168