2026

In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remove_n

In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early retur

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Fix error path in PTP IRQ setu

In the Linux kernel, the following vulnerability has been resolved: net: macb: Shuffle the tx ring before enabling tx

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cle

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatterli

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix a few more NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: check if target buffer list is still

In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized l_iclog_roundoff values If the

In the Linux kernel, the following vulnerability has been resolved: ublk: fix NULL pointer dereference in ublk_ctrl_set

In the Linux kernel, the following vulnerability has been resolved: x86/apic: Disable x2apic on resume if the kernel ex

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix in-place encryption corruption in

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting rece

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due t

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl

In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in try_

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050-core: fix pm_runtime error handl

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis: Fix NULL pointer dereference in adi

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error pa

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: hx9023s: Protect against division b

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue Th

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Eagerly init vgic dist/redist on vgic c

RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth

ZEBRA is a Zcash node written entirely in Rust. From zebrad versions 2.2.0 to before 4.3.1 and from zebra-rpc versions 1

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-chain version 6.0.2, Or

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, a

Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly accessible (no authentication req

In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was ident

Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incomin

PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child proce

Brave CMS is an open-source CMS. Prior to commit 6c56603, page and article body content entered through the CKEditor ric

Langfuse is an open source large language model engineering platform. From version 3.68.0 to before version 3.167.0, the

Password Pusher is an open source application to communicate sensitive information over the web. Prior to versions 1.69.

Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2. The chunked-u

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber paramete

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endp

PraisonAI is a multi-agent teams system. Prior to version 4.6.37, the _safe_extractall helper that all recipe pull, reci

PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.37 and praisonaiagents version 1.6.37, praisonai

PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API

PraisonAI is a multi-agent teams system. From version 2.4.1 to before version 4.6.34, PraisonAI exposes optional SQL/CQL

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (prais

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw

PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CVE-2026-40287's fix gated tools

SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new G

SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI be

SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the iden