2026

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorize

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the rout

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosu

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information T

Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted s

A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, Fo

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privile

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote aut

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allow

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet Forti

Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts t

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software In

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change

In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of rep

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture remov

Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who c

Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attri

Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the

The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers with

In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive bu

In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This r

In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-b

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cp

In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The func

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page siz

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix() function in pw.c copies an attacker-co

A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_st

A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on t

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when comp

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before us

A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without

A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute

A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial st

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink

In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive()

In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one(

In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp()

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after

In the Linux kernel, the following vulnerability has been resolved: Revert "mm/hugetlbfs: update hugetlbfs to use mmap_

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array behind mmu_l

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache re

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a loc