2026

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the com

A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the componen

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/com

A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vuln

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-man

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerabil

A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable

A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissio

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root in

In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag c

In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with sr

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pc

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_si

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming w

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_part

In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split

In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module E

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mod

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the cor

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec comm

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer derefer

In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front le

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns fo

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requ

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's

In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer

calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{librar

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/cor

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kest

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's cli/src/main/resources/appli

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from int

The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match aga

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range

The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the d

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, witho

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shel

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointe

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code ins

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code insi