2026

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regul

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 lib

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.9

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.1

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToE

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/ingr

In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds i

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do privil

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix IS_CHECKPOINTED flag inconsistency issue

In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3_arb() A use

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in {rea

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("

In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count cha

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvme_f

In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failur

In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated iovec on ca

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before que

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setup_nic

In the Linux kernel, the following vulnerability has been resolved: net: add proper RCU protection to /proc/net/ptype

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO com

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ring

In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The x

In the Linux kernel, the following vulnerability has been resolved: xfs: only call xf{array,blob}_destroy if we have a

In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord

In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating tw

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable exception fixup for specific ADE

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback fro

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths whe

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, the Glances REST API web server

A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access con

A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitra

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclu

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin

Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, incre

Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins co

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validatio

Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar a

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due t

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in a

The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all ver

When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a

The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signatu

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.

MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content s

The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information

The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the tra