CVE-2026-80904 - In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tls_sw_splice_rea

CVE-2026-80903 - In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak

CVE-2026-80902 - In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix recla

CVE-2026-80901 - In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validati

CVE-2026-80900 - In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Make UMP message si

CVE-2026-80899 - In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend e

CVE-2026-80898 - In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on co

CVE-2026-80897 - In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios

CVE-2026-80896 - In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshv_irqfd_de

CVE-2026-80895 - In the Linux kernel, the following vulnerability has been resolved: mshv: Order pt_vp_array publish

CVE-2026-80894 - In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed

CVE-2026-80893 - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corr

CVE-2026-80892 - In the Linux kernel, the following vulnerability has been resolved: erofs: cap LZMA stream pool siz

CVE-2026-80891 - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV a

CVE-2026-80890 - In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with

CVE-2026-80889 - In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain ord

CVE-2026-80888 - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dma_buf refere

CVE-2026-80887 - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overf

CVE-2026-73848 - Emlog is an open source website building system. In versions 2.6.29 and prior, tag names in emlog ar

CVE-2026-61688 - SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can

CVE-2026-61686 - SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveCompon

CVE-2026-61614 - SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticato

CVE-2026-61608 - SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities

CVE-2026-57166 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a

CVE-2026-57165 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b7

CVE-2026-57164 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d595

CVE-2026-57163 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a15

CVE-2026-57162 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b70

CVE-2026-57161 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03

CVE-2026-57160 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e

CVE-2026-57159 - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b9

CVE-2026-53761 - Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there i

CVE-2026-53760 - Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugin

CVE-2026-53758 - Emlog is an open source website building system. In versions 2.6.29 and prior, article content is pr

CVE-2026-53757 - Emlog is an open source website building system. In versions 2.6.29 and prior, the emUnZip() functio

CVE-2026-53756 - Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a b

CVE-2026-50553 - Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates bo

CVE-2026-19534 - undici's WebSocket client crashes the whole Node.js process during the opening handshake when a serv

CVE-2026-18745 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-18540 - undici's retry interceptor can append the body of a ranged retry response to bytes already delivered

CVE-2026-18149 - undici's retry handler can leave an already-exposed response body pending forever. When a server ret

CVE-2021-44320 - Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (D

CVE-2021-44319 - Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform i

CVE-2026-85152 - undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the ca

CVE-2026-85024 - undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners

CVE-2026-85014 - undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer cl

CVE-2026-85008 - undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip c

CVE-2026-84961 - undici's BalancedPool constructor passes its entire options object through an internal deep-clone th

CVE-2026-84947 - undici's dump interceptor reads and discards a response body up to a configurable maximum size. When

CVE-2026-84933 - undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path

CVE-2026-80886 - In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for ke

CVE-2026-80885 - In the Linux kernel, the following vulnerability has been resolved: afs: Fix uncancelled rxrpc OOB

CVE-2026-80884 - In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address

CVE-2026-80883 - In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initializ

CVE-2026-80882 - In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM w

CVE-2026-80881 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head manageme

CVE-2026-80880 - In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support impli

CVE-2026-80879 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix circular locking dep

CVE-2026-80878 - In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume

CVE-2026-80877 - In the Linux kernel, the following vulnerability has been resolved: afs: Fix vllist leak Fix a lea

CVE-2026-80876 - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length w

CVE-2026-80875 - In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offs

CVE-2026-80874 - In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide:

CVE-2026-80873 - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR_EL2 f

CVE-2026-80872 - In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async

CVE-2026-80871 - In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cr

CVE-2026-80870 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-resto

CVE-2026-80869 - In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list

CVE-2026-80868 - In the Linux kernel, the following vulnerability has been resolved: ntfs3: Allocate iomap inline_da

CVE-2026-80867 - In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_

CVE-2026-80866 - In the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tip

CVE-2026-80865 - In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call

CVE-2026-78849 - Cross Site Scripting vulnerability in Netgate pfSense Plus software versions <= 26.03 pfSense CE sof

CVE-2026-78745 - An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute

CVE-2026-75430 - PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP

CVE-2026-38961 - Cross-Site Scripting (XSS) vulnerability in the RSS Widget of Netgate pfSense Plus (versions 26.03,

CVE-2026-31020 - In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to d

CVE-2026-18489 - IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote att

CVE-2026-18486 - IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker

CVE-2026-18341 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an

CVE-2026-18221 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improp

CVE-2026-18175 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due t

CVE-2026-18078 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of servic

CVE-2026-18076 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of servic

CVE-2026-18073 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a

CVE-2026-17631 - IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitiv

CVE-2026-17627 - IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitiv

CVE-2026-17622 - IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitiv

CVE-2026-17621 - IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the s

CVE-2026-17499 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to impro

CVE-2026-17483 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical fligh

CVE-2026-17470 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buf

CVE-2026-17469 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service

CVE-2026-17444 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-17443 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-17442 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-17440 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-17274 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrict

CVE-2026-17273 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of servic

CVE-2026-17270 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stac

CVE-2026-17259 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of servic

CVE-2026-17255 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to impro

CVE-2026-17207 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromi

CVE-2026-17057 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect d

CVE-2026-16941 - IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system message

CVE-2026-16892 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrict

CVE-2026-16826 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to impro

CVE-2026-16693 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive informa

CVE-2026-16689 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-16660 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service du

CVE-2026-16180 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-14470 - IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories

CVE-2026-14350 - IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to i

CVE-2026-13297 - IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure at

CVE-2026-85730 - smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can ente

CVE-2026-82911 - Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number}

CVE-2026-80864 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder UAF on

CVE-2026-80863 - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in free_rd_at

CVE-2026-80862 - In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_fra

CVE-2026-80861 - In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if

CVE-2026-80860 - In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrup

CVE-2026-80859 - In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when

CVE-2026-80858 - In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues w

CVE-2026-80857 - In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on a

CVE-2026-80856 - In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak

CVE-2026-80855 - In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak

CVE-2026-80854 - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: keep port c

CVE-2026-80853 - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages f

CVE-2026-80852 - In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds

CVE-2026-80851 - In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context upda

CVE-2026-80850 - In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free

CVE-2026-80849 - In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free

CVE-2026-80848 - In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during

CVE-2026-80847 - In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_

CVE-2026-80846 - In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets w

CVE-2026-80845 - In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in n

CVE-2026-80844 - In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing hea

CVE-2026-80843 - In the Linux kernel, the following vulnerability has been resolved: xfrm: fix xfrm_state_construct(

CVE-2026-80842 - In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-aft

CVE-2026-80841 - In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TX_RI

CVE-2026-80840 - In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control

CVE-2026-80839 - In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresenta

CVE-2026-80838 - In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote lin

CVE-2026-80837 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't que

CVE-2026-80836 - In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akci

CVE-2026-80835 - In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypt

CVE-2026-80834 - In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove crypt

CVE-2026-80833 - In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypt

CVE-2026-80832 - In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffe

CVE-2026-80831 - In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source sc

CVE-2026-80830 - In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wake

CVE-2026-80829 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write

CVE-2026-80828 - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete clean

CVE-2026-80827 - In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab O

CVE-2026-80826 - In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free

CVE-2026-80825 - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: ensure tx h

CVE-2026-80824 - In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free

CVE-2026-80823 - In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR_REQ

CVE-2026-80822 - In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null

CVE-2026-80821 - In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on c

CVE-2026-80820 - In the Linux kernel, the following vulnerability has been resolved: xfs: don't livelock in scrub on

CVE-2026-80819 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcomm_

CVE-2026-80818 - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix CMD_S

CVE-2026-80817 - In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix NULL pointer

CVE-2026-80816 - In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: Use a private URB fo

CVE-2026-80815 - In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private

CVE-2026-80814 - In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check

CVE-2026-80813 - In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer derefer

CVE-2026-80812 - In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index v

CVE-2026-80811 - In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: fix iovec leak wh

CVE-2026-80810 - In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio size o

CVE-2026-80809 - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata res

CVE-2026-80808 - In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated x

CVE-2026-80807 - In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block in

CVE-2026-80806 - In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new e

CVE-2026-80805 - In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointe

CVE-2026-80804 - In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context uncon

CVE-2026-80803 - In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES l

CVE-2026-80802 - In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-repo

CVE-2026-80801 - In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target

CVE-2026-80800 - In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connect_sn

CVE-2026-80799 - In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8

CVE-2026-80798 - In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: reject PDUs shorter

CVE-2026-80797 - In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented sk

CVE-2026-80796 - In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add data_len bound ch

CVE-2026-80795 - In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix out-of-bounds wri

CVE-2026-80794 - In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in t

CVE-2026-80793 - In the Linux kernel, the following vulnerability has been resolved: ipv4: reject undersized MTUs in

CVE-2026-80792 - In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6

CVE-2026-80791 - In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTH_RECEI

CVE-2026-80790 - In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: fix invalid free in L

CVE-2026-80789 - In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data lengt

CVE-2026-80788 - In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remot

CVE-2026-80787 - In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-f

CVE-2026-80786 - In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls

CVE-2026-80785 - In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs acc

CVE-2026-80784 - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix memory leak from

CVE-2026-80783 - In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unboun

CVE-2026-80782 - In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: do not keep a

CVE-2026-80781 - In the Linux kernel, the following vulnerability has been resolved: HID: core: fix OOB read of fiel

CVE-2026-80780 - In the Linux kernel, the following vulnerability has been resolved: HID: pidff: fix OOB write when

CVE-2026-80779 - In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner

CVE-2026-80778 - In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm priva

CVE-2026-80777 - In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex ex

CVE-2026-80776 - In the Linux kernel, the following vulnerability has been resolved: futex: Fix race in futex_pivot_

CVE-2026-80775 - In the Linux kernel, the following vulnerability has been resolved: futex: Fix race on the initial

CVE-2026-80774 - In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hid_is_u

CVE-2026-80773 - In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hid_is

CVE-2026-80772 - In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bound

CVE-2026-80771 - In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: register input d

CVE-2026-80770 - In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO b

CVE-2026-80769 - In the Linux kernel, the following vulnerability has been resolved: HID: rapoo: fix missing hid_is_

CVE-2026-80768 - In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after

CVE-2026-80767 - In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix use-af

CVE-2026-80766 - In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-fre

CVE-2026-80765 - In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial d

CVE-2026-80764 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix LE li

CVE-2026-80763 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate

CVE-2026-80762 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix accept

CVE-2026-80761 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockad

CVE-2026-80760 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI_CMD

CVE-2026-80759 - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate fi

CVE-2026-80758 - In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-a

CVE-2026-79419 - A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suit

CVE-2026-79418 - EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in

CVE-2026-78970 - JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiControlle

CVE-2026-78658 - IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevO

CVE-2026-78543 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-77822 - IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive informa

CVE-2026-75431 - PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-base

CVE-2026-75429 - PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability i

CVE-2026-75171 - An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID sessi

CVE-2026-75170 - Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore pla

CVE-2026-75169 - An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway fi

CVE-2026-75168 - An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware

CVE-2026-75167 - A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solut

CVE-2026-75166 - Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-

CVE-2026-75165 - An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote a

CVE-2026-75164 - An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway fi

CVE-2026-75163 - An information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in MBS-S

CVE-2026-75162 - An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in

CVE-2026-75161 - An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware

CVE-2026-75160 - An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via th

CVE-2026-5522 - IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a passw

CVE-2026-44402 - Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in

CVE-2026-19649 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integr

CVE-2026-19645 - IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie ca

CVE-2026-19306 - IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from

CVE-2026-19305 - IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information

CVE-2026-19304 - IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitiv