2026

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulner

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerabil

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resou

An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured wit

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative

Incomplete validation of the SOA record present in a catalog zone might lead to a crash.

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recur

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trust

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have

Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys

Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.

Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being se

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of bei

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a den

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause

A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. Users are recommended

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table walks

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix a use-after-free of the hci_con

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix use-after-free when processing MLD

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt(

In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client

In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompress

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lea

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear the svc scheduler ptr early on edit ip

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook refere

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack_irc: fix possible out-of-bound

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: bail out on template ct in get e

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writab

In the Linux kernel, the following vulnerability has been resolved: dm cache policy smq: check allocation under invalid

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred freeing f

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context addres

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2

In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free d

In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in reqsk

In the Linux kernel, the following vulnerability has been resolved: ipv6: anycast: insert aca into global hash under id

In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev-

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: hold listener socket in rfcomm_c

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before ty

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handl

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing