CVE-2026-14229 - The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when renderi

CVE-2026-18387 - The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to ge

CVE-2026-17090 - The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable t

CVE-2026-16586 - The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is

CVE-2026-16146 - The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vuln

CVE-2026-16145 - The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vuln

CVE-2026-16094 - The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vuln

CVE-2026-15993 - The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is v

CVE-2026-15948 - The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to

CVE-2026-15453 - The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generi

CVE-2026-13360 - The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored

CVE-2026-8840 - The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to authorization

CVE-2026-16080 - The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the '

CVE-2026-15965 - The MaxUpload – Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnera

CVE-2026-15341 - The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to

CVE-2026-15312 - The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege

CVE-2026-15303 - The 6Storage Rentals plugin for WordPress is vulnerable to authentication bypass in versions up to,

CVE-2026-15162 - The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpre

CVE-2026-15001 - The bLoyal: Loyalty & Promotions by bLoyal plugin for WordPress is vulnerable to Privilege Escalatio

CVE-2026-14484 - The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arb

CVE-2026-14433 - The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable t

CVE-2026-12128 - The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to Price Manipulation via

CVE-2026-74250 - In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediat

CVE-2026-74247 - A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write acc

CVE-2026-74245 - A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid f

CVE-2026-74244 - A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unau

CVE-2026-74243 - A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a re

CVE-2026-74242 - A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a targe

CVE-2026-74241 - A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authenticat

CVE-2026-74240 - A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and

CVE-2026-63650 - OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified

CVE-2026-63649 - The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows

CVE-2026-18932 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-73683 - Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows un

CVE-2026-69414 - Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros

CVE-2026-74248 - OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associ

CVE-2026-73682 - Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerabili

CVE-2026-71570 - Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A

CVE-2026-67366 - Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 -

CVE-2026-50523 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow

CVE-2026-73680 - Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration th

CVE-2026-71571 - Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCage

CVE-2026-67365 - Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthe

CVE-2026-64887 - Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic

CVE-2026-39925 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-34492 - External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipu

CVE-2026-27871 - Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 all

CVE-2026-19910 - PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnera

CVE-2026-19909 - PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnera

CVE-2026-19908 - PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows networ

CVE-2026-18554 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensiti

CVE-2026-18178 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitra

CVE-2026-17227 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass securit

CVE-2026-17209 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitr

CVE-2026-17186 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL command

CVE-2026-17184 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due t

CVE-2026-17182 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and ob

CVE-2026-17181 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary loc

CVE-2026-17179 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial

CVE-2026-17177 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service du

CVE-2026-17175 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensiti

CVE-2026-17173 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensiti

CVE-2026-17081 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to

CVE-2026-17079 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass securit

CVE-2026-16915 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensiti

CVE-2026-16905 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensiti

CVE-2026-16879 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass securit

CVE-2026-16708 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information

CVE-2026-73679 - ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module th

CVE-2026-73678 - MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution

CVE-2026-50029 - js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a ke

CVE-2026-50027 - mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes

CVE-2026-49457 - erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not au

CVE-2026-45699 - Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.

CVE-2026-19188 - A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gate

CVE-2026-18403 - LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Cent

CVE-2025-7639 - The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Opera

CVE-2026-73850 - Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vul

CVE-2026-73849 - Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=r

CVE-2026-73847 - Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on t

CVE-2026-72970 - Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe

CVE-2026-63361 - LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerab

CVE-2026-49282 - Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name(

CVE-2026-49263 - Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend a

CVE-2026-48528 - Metacat is data repository software that helps researchers preserve, share, and discover data. Metac

CVE-2026-19847 - A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the functi

CVE-2026-19846 - A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function s

CVE-2026-19682 - A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker

CVE-2026-19681 - An authenticated command injection vulnerability exists in Security Center related to file upload pr

CVE-2026-19680 - A SQL injection vulnerability exists in Security Center that could allow an attacker to access unaut

CVE-2026-19679 - An input validation vulnerability exists in Security Center's file upload handling, where insufficie

CVE-2026-19639 - An improper access control vulnerability exists where an authenticated non-administrative applicatio

CVE-2026-19636 - An issue was identified in which CSRF tokens were generated using a predictable method, potentially

CVE-2026-19635 - A local privilege escalation vulnerability exists in Security Center. An attacker with write access

CVE-2026-19631 - A SQL injection vulnerability exists in Security Center that could allow an authenticated administra

CVE-2026-19629 - A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Secu

CVE-2026-12366 - Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an

CVE-2026-12365 - A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling o

CVE-2026-12364 - The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was

CVE-2026-12363 - The LoRaWAN Fragmented Data Block Transport service (subsys/lorawan/services/frag_transport.c) does

CVE-2026-48926 - Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an

CVE-2026-48925 - A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and ear

CVE-2026-48924 - Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allo

CVE-2026-48923 - Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implemen

CVE-2026-48922 - Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file na

CVE-2026-48921 - Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbol

CVE-2026-48920 - Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in

CVE-2026-48919 - Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without valid

CVE-2026-48918 - Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.

CVE-2026-48917 - Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without vali

CVE-2026-48916 - Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.

CVE-2026-48545 - Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers

CVE-2026-48544 - Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.

CVE-2026-47119 - Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows atta

CVE-2026-47118 - Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated a

CVE-2026-45571 - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alp

CVE-2026-45570 - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alp

CVE-2026-45022 - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alp

CVE-2026-44988 - LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClie

CVE-2026-44972 - GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes a

CVE-2026-44971 - GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic re

CVE-2026-44902 - opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP r

CVE-2026-44839 - RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerabi

CVE-2026-44838 - RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin all

CVE-2026-44830 - Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. P

CVE-2026-42280 - Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific precon

CVE-2026-42184 - Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a fl

CVE-2026-37713 - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker t

CVE-2026-37712 - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker t

CVE-2026-37711 - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker t

CVE-2026-31266 - Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (

CVE-2026-30498 - A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason

CVE-2026-1248 - IBM Business Automation Workflow containers and traditional may leak information about its database

CVE-2025-70103 - Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::Decod

CVE-2026-9704 - A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerabili

CVE-2026-9617 - PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by cr

CVE-2026-9035 - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Tra

CVE-2026-8405 - IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named

CVE-2026-8180 - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Tra

CVE-2026-8179 - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Tra

CVE-2026-8175 - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Tra

CVE-2026-7876 - IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.

CVE-2026-7528 - IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource co

CVE-2026-7524 - IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of

CVE-2026-7365 - IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default pa

CVE-2026-7254 - IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticate

CVE-2026-6938 - IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote objec

CVE-2026-6936 - IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursio

CVE-2026-6053 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a

CVE-2026-6052 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when

CVE-2026-6051 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when e

CVE-2026-5516 - IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Serv

CVE-2026-5515 - IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log

CVE-2026-5065 - IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a passwor

CVE-2026-4410 - IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application S

CVE-2026-48972 - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio

CVE-2026-48971 - Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploi

CVE-2026-47104 - libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array

CVE-2026-46103 - In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime

CVE-2026-46102 - In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head le

CVE-2026-46101 - In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in

CVE-2026-46100 - In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare()

CVE-2026-46099 - In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix NOREF dst use in

CVE-2026-46098 - In the Linux kernel, the following vulnerability has been resolved: net: caif: clear client service

CVE-2026-46097 - In the Linux kernel, the following vulnerability has been resolved: Input: edt-ft5x06 - fix use-aft

CVE-2026-46096 - In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpm_

CVE-2026-46095 - In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier b

CVE-2026-46094 - In the Linux kernel, the following vulnerability has been resolved: ext4: fix bounds check in check

CVE-2026-46093 - In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_loc

CVE-2026-46092 - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upst

CVE-2026-46091 - In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: heed co

CVE-2026-46090 - In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime U

CVE-2026-46089 - In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio fo

CVE-2026-46088 - In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len

CVE-2026-46087 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak

CVE-2026-46086 - In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB d

CVE-2026-46085 - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalign

CVE-2026-46084 - In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: Disable RX steeri

CVE-2026-46083 - In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on devi

CVE-2026-46082 - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Inject #UD for INVLPG

CVE-2026-46081 - In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - fix wrong point

CVE-2026-46080 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: split transactions in di

CVE-2026-46079 - In the Linux kernel, the following vulnerability has been resolved: rbd: fix null-ptr-deref when de

CVE-2026-46078 - In the Linux kernel, the following vulnerability has been resolved: erofs: fix the out-of-bounds na

CVE-2026-46077 - In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-tdes - fix DMA sy

CVE-2026-46076 - In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Raise #UD if unhandl

CVE-2026-46075 - In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix pot

CVE-2026-46074 - In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix memory leaks on

CVE-2026-46073 - In the Linux kernel, the following vulnerability has been resolved: hwmon: (powerz) Fix missing usb

CVE-2026-46072 - In the Linux kernel, the following vulnerability has been resolved: ntfs3: add buffer boundary chec

CVE-2026-46071 - In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Avoid clearing VMCB_

CVE-2026-46070 - In the Linux kernel, the following vulnerability has been resolved: md/raid5: validate payload size

CVE-2026-46069 - In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix use-after-fr

CVE-2026-46068 - In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix bounce buffer

CVE-2026-46067 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate damos_q

CVE-2026-46066 - In the Linux kernel, the following vulnerability has been resolved: ceph: fix num_ops off-by-one wh

CVE-2026-46065 - In the Linux kernel, the following vulnerability has been resolved: fbdev: defio: Disconnect deferr

CVE-2026-46064 - In the Linux kernel, the following vulnerability has been resolved: ibmasm: fix heap over-read in i

CVE-2026-46063 - In the Linux kernel, the following vulnerability has been resolved: x86/shstk: Prevent deadlock dur

CVE-2026-46062 - In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix integer overflow in

CVE-2026-46061 - In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2_jour

CVE-2026-46060 - In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix IRQ cleanup o

CVE-2026-46059 - In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use NextRIP a

CVE-2026-46058 - In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race betwee

CVE-2026-46057 - In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OF

CVE-2026-46056 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix poten

CVE-2026-46055 - In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun du

CVE-2026-46054 - In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() a

CVE-2026-46053 - In the Linux kernel, the following vulnerability has been resolved: net: rds: fix MR cleanup on cop

CVE-2026-46052 - In the Linux kernel, the following vulnerability has been resolved: ceph: only d_add() negative den

CVE-2026-46051 - In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix soft lockup in re

CVE-2026-46050 - In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix deadlock with ch

CVE-2026-46049 - In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Add fallback to de

CVE-2026-46048 - In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix usb_dev refcou

CVE-2026-46047 - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Fix use-after-fr

CVE-2026-46046 - In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in e

CVE-2026-46045 - In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: skip reading rd

CVE-2026-46044 - In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on

CVE-2026-46043 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC

CVE-2026-46042 - In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix memory leaks

CVE-2026-46041 - In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: fix sle

CVE-2026-46040 - In the Linux kernel, the following vulnerability has been resolved: inotify: fix watch count leak w

CVE-2026-46039 - In the Linux kernel, the following vulnerability has been resolved: rxgk: Fix potential integer ove

CVE-2026-46038 - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node du

CVE-2026-46037 - In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: validate reply type

CVE-2026-46036 - In the Linux kernel, the following vulnerability has been resolved: vfio/cdx: Serialize VFIO_DEVICE

CVE-2026-46035 - In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: return NULL earl

CVE-2026-46034 - In the Linux kernel, the following vulnerability has been resolved: vfio/cdx: Fix NULL pointer dere

CVE-2026-46033 - In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject sho

CVE-2026-46032 - In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Triple fault if rest

CVE-2026-46031 - In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Reinstate disablin

CVE-2026-46030 - In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device_node

CVE-2026-46029 - In the Linux kernel, the following vulnerability has been resolved: mm/slab: return NULL early from

CVE-2026-46028 - In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot I

CVE-2026-46027 - In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid early lgr access

CVE-2026-46026 - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximu

CVE-2026-46025 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damon_call()

CVE-2026-46024 - In the Linux kernel, the following vulnerability has been resolved: libceph: Prevent potential null

CVE-2026-46023 - In the Linux kernel, the following vulnerability has been resolved: dm mirror: fix integer overflow

CVE-2026-46022 - In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read

CVE-2026-46021 - In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone

CVE-2026-46020 - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate damos_q

CVE-2026-46019 - In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-aes - Fix 3-page

CVE-2026-46018 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: stop parsing U

CVE-2026-46017 - In the Linux kernel, the following vulnerability has been resolved: mm: fix deferred split queue ra

CVE-2026-46016 - In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access b

CVE-2026-46015 - In the Linux kernel, the following vulnerability has been resolved: tcp: call sk_data_ready() after

CVE-2026-46014 - In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Add missing save/rest

CVE-2026-46013 - In the Linux kernel, the following vulnerability has been resolved: mm/memfd_luo: fix physical addr

CVE-2026-46012 - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix memory leaks in rxka