Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
15ae058f by security tracker role at 2026-10-12T19:14:22+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,735 @@
+CVE-2026-9191 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-96618 (Improper Handling of Highly Compressed Data (Data
Amplification) vulne ...)
+ TODO: check
+CVE-2026-96612 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-94451 (Quarkus REST Data Panache provides a way to automatically
generate RES ...)
+ TODO: check
+CVE-2026-93695 (In Progress ShareFile Storage Zones Controller v5.12.6 and
below, File ...)
+ TODO: check
+CVE-2026-93694 (In Progress ShareFile Storage Zones Controller v5.12.6 and
below, proc ...)
+ TODO: check
+CVE-2026-93693 (In Progress ShareFile Storage Zones Controller v5.12.6 and
below, impr ...)
+ TODO: check
+CVE-2026-92877 (The JAXB factory methods historically relied solely on
`FEATURE_SECURE ...)
+ TODO: check
+CVE-2026-92682 (In @neo4j/graphql versions from 7.0.0 up to but not including
7.6.4, t ...)
+ TODO: check
+CVE-2026-92681 (In @neo4j/graphql versions up to and including 7.6.3,
@authentication ...)
+ TODO: check
+CVE-2026-89140 (Temporal Server does not bind internal completion callbacks to
the nam ...)
+ TODO: check
+CVE-2026-87744 (A flaw was found in Quarkus REST Data Panache. This
vulnerability allo ...)
+ TODO: check
+CVE-2026-85976 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85975 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85974 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85973 (Progress MarkLogic Server 12.x releases before 12.1.0 may use
cleartex ...)
+ TODO: check
+CVE-2026-85972 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85971 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85970 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85969 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85968 (Progress MarkLogic Server 12.x releases before 12.1.0 contain
an out-o ...)
+ TODO: check
+CVE-2026-85967 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85966 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85965 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85964 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85963 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85962 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85961 (On Azure deployments, Progress MarkLogic Server 12.x releases
before 1 ...)
+ TODO: check
+CVE-2026-85960 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85959 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85958 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85957 (Affected Progress MarkLogic Server 11.x releases before 11.3.7
use a S ...)
+ TODO: check
+CVE-2026-85956 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85955 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85954 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85953 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85952 (Affected Linux-based Progress MarkLogic Server 12.x releases
before 12 ...)
+ TODO: check
+CVE-2026-85951 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85950 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85949 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85948 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85947 (Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x
release ...)
+ TODO: check
+CVE-2026-85499 (Improper Authorization vulnerability in Apache SkyWalking
BanyanDB. ...)
+ TODO: check
+CVE-2026-85471 (A flaw was found in Quay. An authenticated repository
administrator co ...)
+ TODO: check
+CVE-2026-84286 (ExLlamaV3\u2019s EXL3 loader uses an untrusted, model-supplied
index t ...)
+ TODO: check
+CVE-2026-83536 (A flaw was found in openstack-network-exporter. The HTTP
server within ...)
+ TODO: check
+CVE-2026-83535 (A flaw was found in openstack-network-exporter. When an
operator confi ...)
+ TODO: check
+CVE-2026-81856 (Improper Neutralization of Escape, Meta, or Control Sequences
vulnerab ...)
+ TODO: check
+CVE-2026-78404 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5is
vulnerable ...)
+ TODO: check
+CVE-2026-77366 (obsidian-tc is a governed, agent-ready Model Context Protocol
server f ...)
+ TODO: check
+CVE-2026-77364 (obsidian-tc is a governed, agent-ready Model Context Protocol
server f ...)
+ TODO: check
+CVE-2026-77363 (obsidian-tc is a governed, agent-ready Model Context Protocol
server f ...)
+ TODO: check
+CVE-2026-75888 (A flaw was found in the OpenShift console. An authenticated
console us ...)
+ TODO: check
+CVE-2026-6232 (An out-of-bounds write vulnerability in the SPI host command
interface ...)
+ TODO: check
+CVE-2026-68764
+ REJECTED
+CVE-2026-65954 (PHPCSUtils is a suite of utility functions for use with
PHP_CodeSniffe ...)
+ TODO: check
+CVE-2026-61994 (Missing Authorization vulnerability in RocketGeek WP-Members
wp-member ...)
+ TODO: check
+CVE-2026-59977 (ConvertX is a self-hosted file conversion service. Prior to
0.18.0, th ...)
+ TODO: check
+CVE-2026-59976 (ConvertX is a self-hosted file conversion service. Prior to
0.18.0, th ...)
+ TODO: check
+CVE-2026-57143 (PraisonAI is a multi-agent teams system. Prior to
praisonaiagents 1.6. ...)
+ TODO: check
+CVE-2026-57118 (PraisonAI is a multi-agent teams system. Prior to
praisonaiagents 1.6. ...)
+ TODO: check
+CVE-2026-42689 (Concurrent Execution using Shared Resource with Improper
Synchronizati ...)
+ TODO: check
+CVE-2026-1907 (A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and
Open S ...)
+ TODO: check
+CVE-2026-18390 (Improper neutralization of special elements used in an OS
command ('OS ...)
+ TODO: check
+CVE-2026-18166 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for
Linux, UN ...)
+ TODO: check
+CVE-2026-12613 (Deserialization of untrusted data vulnerability in Ministry of
Justice ...)
+ TODO: check
+CVE-2026-109448 (Integer wraparound in psqlODBC SQLBindParameter allows an
application, ...)
+ TODO: check
+CVE-2026-109399 (SWUpdate through 2026.05.1 contains an improper certificate
validation ...)
+ TODO: check
+CVE-2026-109398 (Gumlet php-image-resize before 3.0.1 contains a denial of
service vuln ...)
+ TODO: check
+CVE-2026-109397 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an
unrestricted fi ...)
+ TODO: check
+CVE-2026-109396 (Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV
formula inje ...)
+ TODO: check
+CVE-2026-109394 (Thirty bees through 1.7.0 contains an authentication bypass
vulnerabil ...)
+ TODO: check
+CVE-2026-109393 (QloApps through 1.7.0 contains an insecure direct object
reference vul ...)
+ TODO: check
+CVE-2026-109392 (Pimcore through 2026.3.1 contains a stored cross-site
scripting vulner ...)
+ TODO: check
+CVE-2026-109391 (Square Squash through commit e73f280 contains an insecure
deserializat ...)
+ TODO: check
+CVE-2026-109390 (AnyDesk before 8.0.3 allows unauthenticated remote attackers
to execut ...)
+ TODO: check
+CVE-2026-109374 (ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation
vulnerabil ...)
+ TODO: check
+CVE-2026-109373 (ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass
vulnerab ...)
+ TODO: check
+CVE-2026-109372 (ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an
authentic ...)
+ TODO: check
+CVE-2026-109371 (ZITADEL 3.0.0 before 4.18.0 contains a missing authentication
vulnerab ...)
+ TODO: check
+CVE-2026-109366 (Zebra before 6.4.0 contains an improper integrity validation
vulnerabi ...)
+ TODO: check
+CVE-2026-109365 (Zebra before 6.4.0 contains an uncontrolled resource
consumption vulne ...)
+ TODO: check
+CVE-2026-109364 (Zebra 2.3.0 before 6.4.0 contains a protection mechanism
failure that ...)
+ TODO: check
+CVE-2026-109363 (ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6
transactions ...)
+ TODO: check
+CVE-2026-109362 (Heym v0.0.5 before v0.0.113 contains a broken access control
vulnerabi ...)
+ TODO: check
+CVE-2026-109361 (MONAI 1.2.0 before 1.6.1 contains an insecure deserialization
vulnerab ...)
+ TODO: check
+CVE-2026-109360 (MONAI 0.4.0 before 1.6.1 contains a remote code execution
vulnerabilit ...)
+ TODO: check
+CVE-2026-109359 (Contrast 1.8.0 before 1.24.1 contains an improper
verification vulnera ...)
+ TODO: check
+CVE-2026-109358 (Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an
incorrect pe ...)
+ TODO: check
+CVE-2026-109357 (LibreNMS before 26.9.0 contains an LDAP filter injection in
ldap-autho ...)
+ TODO: check
+CVE-2026-109356 (LibreNMS before 26.9.0 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-109355 (LibreNMS before 26.9.0 contains a stored cross-site scripting
vulnerab ...)
+ TODO: check
+CVE-2026-109354 (LibreNMS before 26.9.0 contains a path traversal
vulnerability in nfse ...)
+ TODO: check
+CVE-2026-109353 (LibreNMS before 26.9.0 contains an SQL injection
vulnerability that al ...)
+ TODO: check
+CVE-2026-109352 (LibreNMS before 26.9.0 contains a stored cross-site scripting
vulnerab ...)
+ TODO: check
+CVE-2026-109351 (Gitoxide gix-pack before 0.75.0 contains an uncontrolled
memory alloca ...)
+ TODO: check
+CVE-2026-109350 (Gitoxide gix-pack before 0.75.0 contains a denial of service
vulnerabi ...)
+ TODO: check
+CVE-2026-109349 (gitoxide gix-pack before 0.75.0 contains a reachable
assertion in Byte ...)
+ TODO: check
+CVE-2026-109348 (Gitoxide gix-mailmap before 0.35.0 contains a denial of
service vulner ...)
+ TODO: check
+CVE-2026-109347 (Adminer before 6.1.1 contains a remote code execution
vulnerability th ...)
+ TODO: check
+CVE-2026-109346 (better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI
misrepre ...)
+ TODO: check
+CVE-2026-109345 (DOMPurify before 3.4.16 contains a cross-site scripting
vulnerability ...)
+ TODO: check
+CVE-2026-109344 (DOMPurify from 3.4.13 before 3.4.16 contains a cross-site
scripting vu ...)
+ TODO: check
+CVE-2026-109343 (SurrealDB before 3.3.0 allows cross-tenant access because the
SurrealQ ...)
+ TODO: check
+CVE-2026-109342 (SurrealDB from 3.0.0 before 3.3.0 contains a missing
authentication vu ...)
+ TODO: check
+CVE-2026-109341 (SurrealDB before 3.3.0 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-109340 (SurrealDB from 3.1.0 before 3.3.0 contains an authorization
bypass vul ...)
+ TODO: check
+CVE-2026-109339 (SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust
server me ...)
+ TODO: check
+CVE-2026-109338 (SurrealDB before 3.3.0 contains a denial of service
vulnerability that ...)
+ TODO: check
+CVE-2026-109337 (SurrealDB before 3.3.0 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-109336 (SurrealDB before 3.3.0 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-109335 (SurrealDB from 3.0.0 before 3.3.0 contains an information
disclosure v ...)
+ TODO: check
+CVE-2026-109334 (SurrealDB before 3.3.0 does not check the caller-selected
namespace or ...)
+ TODO: check
+CVE-2026-109333 (SurrealDB from 3.0.0 before 3.3.0 contains an authorization
bypass vul ...)
+ TODO: check
+CVE-2026-109332 (Network-AI (npm network-ai) before 5.15.2 contains an origin
validatio ...)
+ TODO: check
+CVE-2026-109331 (Network-AI from 5.14.0 before 5.15.2 contains a security
control bypas ...)
+ TODO: check
+CVE-2026-109330 (Network-AI 5.0.0 before 5.15.2 contains a cross-site
WebSocket hijacki ...)
+ TODO: check
+CVE-2026-109329 (Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains
a broken ...)
+ TODO: check
+CVE-2026-109328 (Admidio 5.0.0 before 5.0.15 contains an unauthenticated
stored cross-s ...)
+ TODO: check
+CVE-2026-109327 (Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15
contains a refle ...)
+ TODO: check
+CVE-2026-109326 (Grav before 2.1.7 contains an information disclosure
vulnerability bec ...)
+ TODO: check
+CVE-2026-109325 (Grav from 2.0.22 before 2.1.7 contains an authentication
bypass vulner ...)
+ TODO: check
+CVE-2026-109324 (Grav before 2.1.7 contains a denial of service vulnerability
that allo ...)
+ TODO: check
+CVE-2026-109323 (Grav Star Ratings 2.0.1 through 2.0.3 contains a missing
authorization ...)
+ TODO: check
+CVE-2026-109322 (Grav Guestbook plugin before 0.5.2 contains a stored
cross-site script ...)
+ TODO: check
+CVE-2026-109321 (Grav Login OAuth plugin (grav-plugin-login-oauth) before
1.4.3 provisi ...)
+ TODO: check
+CVE-2026-109320 (The Grav API plugin (grav-plugin-api) before 1.0.36 contains
an improp ...)
+ TODO: check
+CVE-2026-109319 (Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing
authorization a ...)
+ TODO: check
+CVE-2026-109318 (Grav Git Sync 1.0.2 through 3.4.12 contains a command
injection vulner ...)
+ TODO: check
+CVE-2026-109317 (Grav grav-plugin-api before 1.0.36 contains a privilege
escalation vul ...)
+ TODO: check
+CVE-2026-109316 (Grav Data Manager plugin 1.4.0 through 1.4.5 contains a
missing author ...)
+ TODO: check
+CVE-2026-109315 (Grav from 2.0.22 before 2.1.7 contains an information
disclosure vulne ...)
+ TODO: check
+CVE-2026-109314 (Grav Login plugin 1.2.0 before 3.9.9 contains an information
disclosur ...)
+ TODO: check
+CVE-2026-109313 (Grav Login plugin 2.7.0 before 3.9.9 contains an
authentication bypass ...)
+ TODO: check
+CVE-2026-109312 (Grav Login plugin 2.7.0 before 3.9.9 contains an
authentication bypass ...)
+ TODO: check
+CVE-2026-109311 (vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg
av.open() ...)
+ TODO: check
+CVE-2026-109310 (SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig
template func ...)
+ TODO: check
+CVE-2026-109309 (SiYuan v3.7.0 before v3.8.6 contains an absolute path
traversal vulner ...)
+ TODO: check
+CVE-2026-109308 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes
the raw ...)
+ TODO: check
+CVE-2026-109307 (Craft CMS 5.0.0 before 5.10.14 contains a DOM-based
cross-site scripti ...)
+ TODO: check
+CVE-2026-109306 (Craft CMS from 5.0.0 before 5.10.14 contains a missing
authorization v ...)
+ TODO: check
+CVE-2026-109305 (Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox
bypass th ...)
+ TODO: check
+CVE-2026-109304 (Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14
contains an arb ...)
+ TODO: check
+CVE-2026-109303 (Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13
does not e ...)
+ TODO: check
+CVE-2026-109302 (Parse Server 8.2.2 before 8.6.94 and 9.0.0 before
9.10.1-alpha.14 appl ...)
+ TODO: check
+CVE-2026-109301 (Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3
does not re ...)
+ TODO: check
+CVE-2026-109300 (Open WebUI from 0.6.31 before 0.11.4 contains a stored
cross-site scri ...)
+ TODO: check
+CVE-2026-109299 (Open WebUI from 0.9.0 before 0.11.4 contains a denial of
service vulne ...)
+ TODO: check
+CVE-2026-109298 (Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep
patterns for ...)
+ TODO: check
+CVE-2026-109297 (Open WebUI 0.11.0 before 0.11.4 contains a denial of service
vulnerabi ...)
+ TODO: check
+CVE-2026-109296 (Open WebUI before 0.11.4 contains a missing authorization
vulnerabilit ...)
+ TODO: check
+CVE-2026-109295 (Open WebUI from 0.11.0 before 0.11.4 contains a regular
expression den ...)
+ TODO: check
+CVE-2026-109294 (Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled
resource ...)
+ TODO: check
+CVE-2026-109293 (Open WebUI from 0.11.0 before 0.11.4 contains an information
disclosur ...)
+ TODO: check
+CVE-2026-109292 (Open WebUI from 0.6.27 before 0.11.4 contains an information
disclosur ...)
+ TODO: check
+CVE-2026-109291 (Open WebUI from 0.6.33 before 0.11.4 contains a cross-site
scripting v ...)
+ TODO: check
+CVE-2026-109290 (Open WebUI from 0.11.1 before 0.11.4 contains a stored
cross-site scri ...)
+ TODO: check
+CVE-2026-109289 (Open WebUI from 0.8.8 before 0.11.4 contains an improper
authorization ...)
+ TODO: check
+CVE-2026-109288 (Open WebUI before 0.11.4 contains a stored cross-site
scripting vulner ...)
+ TODO: check
+CVE-2026-109287 (Open WebUI from 0.9.6 before 0.11.4 contains an authorization
flaw whe ...)
+ TODO: check
+CVE-2026-109286 (Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin
message ha ...)
+ TODO: check
+CVE-2026-109285 (Open WebUI from 0.6.0 before 0.11.4 contains an improper
access contro ...)
+ TODO: check
+CVE-2026-109284 (Open WebUI from 0.11.0 before 0.11.4 contains an improper
authorizatio ...)
+ TODO: check
+CVE-2026-109283 (Open WebUI from 0.11.1 before 0.11.4 contains an
authorization bypass ...)
+ TODO: check
+CVE-2026-109282 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a type c ...)
+ TODO: check
+CVE-2026-109281 (ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer
over-read ...)
+ TODO: check
+CVE-2026-109280 (ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after
free vulnera ...)
+ TODO: check
+CVE-2026-109279 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks
proper sync ...)
+ TODO: check
+CVE-2026-109278 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ TODO: check
+CVE-2026-109277 (ImageMagick before 7.1.2-32 contains a policy bypass
vulnerability in ...)
+ TODO: check
+CVE-2026-109276 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an incom ...)
+ TODO: check
+CVE-2026-109275 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a code i ...)
+ TODO: check
+CVE-2026-109274 (ImageMagick before 7.1.2-32 contains a time-of-check
time-of-use symli ...)
+ TODO: check
+CVE-2026-109273 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
+ TODO: check
+CVE-2026-109272 (ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer
dereferen ...)
+ TODO: check
+CVE-2026-109271 (ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after
free vulnera ...)
+ TODO: check
+CVE-2026-109270 (ImageMagick before 7.1.2-32 contains a memory leak
vulnerability in th ...)
+ TODO: check
+CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
+ TODO: check
+CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a use af ...)
+ TODO: check
+CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a stack ...)
+ TODO: check
+CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an XML i ...)
+ TODO: check
+CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer
over-read v ...)
+ TODO: check
+CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
uncontro ...)
+ TODO: check
+CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ TODO: check
+CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ TODO: check
+CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ TODO: check
+CVE-2026-109260 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ TODO: check
+CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an unini ...)
+ TODO: check
+CVE-2026-109258 (ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid
memory free v ...)
+ TODO: check
+CVE-2026-109257 (FreeRDP before 3.32.0 contains a double-free vulnerability in
nsc_cont ...)
+ TODO: check
+CVE-2026-109256 (FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow
in the W ...)
+ TODO: check
+CVE-2026-109255 (FreeRDP 3.0.0 before 3.32.0 contains an integer truncation
vulnerabili ...)
+ TODO: check
+CVE-2026-109254 (FreeRDP 2.1.0 before 3.32.0 contains a use-after-free
vulnerability in ...)
+ TODO: check
+CVE-2026-109253 (FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds
read vulner ...)
+ TODO: check
+CVE-2026-109252 (FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer
dereference v ...)
+ TODO: check
+CVE-2026-109251 (FreeRDP before 3.32.0 stores the server-supplied signed
MS-RDPEGT geom ...)
+ TODO: check
+CVE-2026-109250 (FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow
vulnerabil ...)
+ TODO: check
+CVE-2026-109249 (FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds
read in free ...)
+ TODO: check
+CVE-2026-109248 (FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds
read in the ...)
+ TODO: check
+CVE-2026-109247 (FreeRDP before 3.32.0 contains a path traversal vulnerability
in conve ...)
+ TODO: check
+CVE-2026-109246 (FreeRDP before 3.32.0 contains a divide-by-zero vulnerability
in the f ...)
+ TODO: check
+CVE-2026-109245 (FreeRDP 3.0.0 before 3.32.0 contains an improper certificate
validatio ...)
+ TODO: check
+CVE-2026-109244 (FreeRDP from 2.0.0 before 3.32.0 contains an insecure
permission vulne ...)
+ TODO: check
+CVE-2026-109243 (FreeRDP from 3.0.0 before 3.32.0 contains an incorrect
permission assi ...)
+ TODO: check
+CVE-2026-109242 (FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders
uninitialized hea ...)
+ TODO: check
+CVE-2026-109241 (FreeRDP before 3.32.0 contains a NULL pointer dereference
vulnerabilit ...)
+ TODO: check
+CVE-2026-109240 (FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion
vulnerabil ...)
+ TODO: check
+CVE-2026-109239 (Crawl4AI before 0.9.4 contains a blind server-side request
forgery vul ...)
+ TODO: check
+CVE-2026-109238 (Crawl4AI 0.7.0 before 0.9.4 contains a server-side request
forgery vul ...)
+ TODO: check
+CVE-2026-109237 (Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config
gate byp ...)
+ TODO: check
+CVE-2026-109229 (SGLang through 0.5.21 contains a denial of service
vulnerability that ...)
+ TODO: check
+CVE-2026-109228 (SGLang through 0.5.21 contains a resource budget bypass
vulnerability ...)
+ TODO: check
+CVE-2026-109227 (SGLang through 0.5.21 contains an unbounded memory allocation
vulnerab ...)
+ TODO: check
+CVE-2026-109226 (SGLang through 0.5.21 contains a decompression amplification
vulnerabi ...)
+ TODO: check
+CVE-2026-109225 (SGLang through 0.5.21 contains an unbounded memory allocation
vulnerab ...)
+ TODO: check
+CVE-2026-109222
+ REJECTED
+CVE-2026-109206 (LogicalDOC Community Edition through 9.3 contains a username
enumerati ...)
+ TODO: check
+CVE-2026-109205 (LogicalDOC Community Edition through 9.3 contains an
unauthenticated f ...)
+ TODO: check
+CVE-2026-109204 (LogicalDOC Community Edition through 9.3 contains an improper
authoriz ...)
+ TODO: check
+CVE-2026-109203 (LogicalDOC Community Edition through 9.3 contains a missing
authorizat ...)
+ TODO: check
+CVE-2026-109202 (LogicalDOC Community Edition through 9.3 contains a missing
authorizat ...)
+ TODO: check
+CVE-2026-109201 (LogicalDOC Community Edition through 9.3 contains a missing
authorizat ...)
+ TODO: check
+CVE-2026-109200 (LogicalDOC Community Edition through 9.3 contains a
server-side reques ...)
+ TODO: check
+CVE-2026-109199 (LogicalDOC Community Edition through 9.3 contains a code
injection vul ...)
+ TODO: check
+CVE-2026-109195 (A flaw was found in Quay. An authenticated attacker can
access reposit ...)
+ TODO: check
+CVE-2026-109194 (A flaw was found in Red Hat Quay. The build trigger
management applica ...)
+ TODO: check
+CVE-2026-109188 (jshERP through 3.6 contains a missing authorization
vulnerability that ...)
+ TODO: check
+CVE-2026-109187 (jshERP through 3.6 contains an information disclosure
vulnerability th ...)
+ TODO: check
+CVE-2026-109186 (jshERP through 3.6 contains a mass assignment vulnerability
in the Use ...)
+ TODO: check
+CVE-2026-109185 (jshERP through 3.6 contains a missing authorization
vulnerability in t ...)
+ TODO: check
+CVE-2026-109184 (jshERP through 3.6 contains an improper authorization
vulnerability th ...)
+ TODO: check
+CVE-2026-109183 (jshERP through 3.6 contains an authorization bypass
vulnerability that ...)
+ TODO: check
+CVE-2026-109182 (jshERP through 3.6 contains an incorrect authorization
vulnerability i ...)
+ TODO: check
+CVE-2026-109181 (jshERP through 3.6 contains an authorization bypass
vulnerability that ...)
+ TODO: check
+CVE-2026-109180 (jshERP through 3.6 contains an authorization bypass
vulnerability that ...)
+ TODO: check
+CVE-2026-109179 (jshERP through 3.6 contains a missing authorization
vulnerability in L ...)
+ TODO: check
+CVE-2026-109178 (jshERP through 3.6 contains a missing authorization
vulnerability in L ...)
+ TODO: check
+CVE-2026-109177 (MoguBlog through 6.2 contains a broken access control
vulnerability th ...)
+ TODO: check
+CVE-2026-109176 (MoguBlog through 6.2 contains an insecure direct object
reference vuln ...)
+ TODO: check
+CVE-2026-109175 (MoguBlog through 6.2 contains an insecure direct object
reference vuln ...)
+ TODO: check
+CVE-2026-109174 (MoguBlog through 6.2 contains an information disclosure
vulnerability ...)
+ TODO: check
+CVE-2026-109173 (yshop-crm through 2.1.3 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-109172 (yshop-crm through 2.1.3 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-109171 (yshop-crm through 2.1.3 contains a missing authorization
vulnerability ...)
+ TODO: check
+CVE-2026-109170 (LogicalDOC Community Edition through 9.3 contains an HQL
injection vul ...)
+ TODO: check
+CVE-2026-109169 (LogicalDOC Community Edition through 9.3 contains a sql
injection vuln ...)
+ TODO: check
+CVE-2026-109168 (lamp-cloud through 5.10.1 contains an insecure direct object
reference ...)
+ TODO: check
+CVE-2026-109167 (TDuck survey form through 6.0 contains an insecure direct
object refer ...)
+ TODO: check
+CVE-2026-109166 (lamp-cloud through 5.10.1 contains an insecure direct object
reference ...)
+ TODO: check
+CVE-2026-109165 (TDuck survey form through 6.0 contains a broken access
control vulnera ...)
+ TODO: check
+CVE-2026-109164 (TDuck survey form through 6.0 contains an insecure direct
object refer ...)
+ TODO: check
+CVE-2026-108979
+ REJECTED
+CVE-2026-108953 (mac-shell-mcp before 2.0.0 contains an OS command injection
vulnerabil ...)
+ TODO: check
+CVE-2026-108952 (RT-Thread through 5.3.0 contains a memory corruption
vulnerability in ...)
+ TODO: check
+CVE-2026-108951 (LavaLite CMS through 10.1.2 contains an authorization bypass
vulnerabi ...)
+ TODO: check
+CVE-2026-108950 (Open Source Social Network (OSSN) through 10.1 contains a
missing auth ...)
+ TODO: check
+CVE-2026-108922 (A flaw has been found in KusalkaSilva
Learning-Management-System up to ...)
+ TODO: check
+CVE-2026-108921 (A vulnerability was detected in KusalkaSilva
Learning-Management-Syste ...)
+ TODO: check
+CVE-2026-108920 (A security vulnerability has been detected in SourceCodester
Drug Reco ...)
+ TODO: check
+CVE-2026-108919 (A weakness has been identified in SourceCodester Drug
Recommendation S ...)
+ TODO: check
+CVE-2026-108918 (A vulnerability was identified in Edimax BR-6208AC 1.32.
Impacted is a ...)
+ TODO: check
+CVE-2026-108917 (A vulnerability was determined in Edimax BR-6208AC 1.32. This
issue af ...)
+ TODO: check
+CVE-2026-108916 (A vulnerability was found in Edimax BR-6208AC 1.32. This
vulnerability ...)
+ TODO: check
+CVE-2026-108915 (A vulnerability has been found in Edimax BR-6208AC 1.32. This
affects ...)
+ TODO: check
+CVE-2026-108914 (A flaw has been found in Edimax BR-6208AC 1.32. Affected by
this issue ...)
+ TODO: check
+CVE-2026-108909 (A security flaw has been discovered in Netcore NR268
1.7.121109. Affec ...)
+ TODO: check
+CVE-2026-108908 (A vulnerability was identified in Netcore NR268 1.7.121109.
Affected b ...)
+ TODO: check
+CVE-2026-108907 (A vulnerability was determined in Netcore NR268 1.7.121109.
Affected i ...)
+ TODO: check
+CVE-2026-108906 (A vulnerability has been found in Netcore NR268 1.7.121109.
This affec ...)
+ TODO: check
+CVE-2026-108901 (A vulnerability was found in Shenzhen HCC Technology MPOS M6
PLUS 1.31 ...)
+ TODO: check
+CVE-2026-108900 (A vulnerability has been found in Exponent CMS up to
3.0.2patch2. Affe ...)
+ TODO: check
+CVE-2026-108899 (A flaw has been found in tobychui zoraxy up to 3.3.4. This
impacts the ...)
+ TODO: check
+CVE-2026-108898 (A vulnerability was detected in Netis WF2409E 3.3.42541. This
affects ...)
+ TODO: check
+CVE-2026-108897 (A security vulnerability has been detected in Smart Media4U
Technology ...)
+ TODO: check
+CVE-2026-108896 (A vulnerability was found in Linksys E1700 1.0.0.4.003. This
affects t ...)
+ TODO: check
+CVE-2026-108895 (A weakness has been identified in Linksys E1700 1.0.0.4.003.
The affec ...)
+ TODO: check
+CVE-2026-108894 (A security flaw has been discovered in Linksys E1700
1.0.0.4.003. Impa ...)
+ TODO: check
+CVE-2026-108893 (A vulnerability was identified in Linksys E1700 up to
1.0.0.4.003. Thi ...)
+ TODO: check
+CVE-2026-108892 (A vulnerability was determined in Linksys E1700 1.0.0.4.003.
This vuln ...)
+ TODO: check
+CVE-2026-108890 (A vulnerability has been found in BlackBeltTechnology
pi-agent-dashboa ...)
+ TODO: check
+CVE-2026-108889 (A flaw has been found in Yungengxin Cloud Billing
2024.11.28.11. Affec ...)
+ TODO: check
+CVE-2026-108836 (A vulnerability has been found in Ollama up to 0.34.1. The
affected el ...)
+ TODO: check
+CVE-2026-108835 (A flaw has been found in Yungengxin Yun Jia Security Guard up
to 2.7.1 ...)
+ TODO: check
+CVE-2026-108834 (A vulnerability was detected in Cairo-dock Glx-Dock up to
3.4.0. This ...)
+ TODO: check
+CVE-2026-108831 (A security vulnerability has been detected in meetecho
janus-gateway u ...)
+ TODO: check
+CVE-2026-108830 (A weakness has been identified in meetecho janus-gateway up
to 1.4.2. ...)
+ TODO: check
+CVE-2026-108829 (A security flaw has been discovered in Zen Cart up to 2.2.2.
Affected ...)
+ TODO: check
+CVE-2026-108828 (A vulnerability was identified in Zen Cart 2.2.2. Affected by
this vul ...)
+ TODO: check
+CVE-2026-108827 (A vulnerability was determined in Zen Cart up to 2.2.2.
Affected is th ...)
+ TODO: check
+CVE-2026-108826 (A vulnerability was found in Zen Cart up to 2.2.2. This
impacts the fu ...)
+ TODO: check
+CVE-2026-108825 (A vulnerability has been found in yangzongzhuan RuoYi up to
4.8.3. Thi ...)
+ TODO: check
+CVE-2026-108824 (A flaw has been found in DataEase up to 3.0.0. The impacted
element is ...)
+ TODO: check
+CVE-2026-108822 (A vulnerability was detected in Kamailio up to 6.0.7/6.1.3.
The affect ...)
+ TODO: check
+CVE-2026-108821 (A security vulnerability has been detected in Tencent WeKnora
up to 0. ...)
+ TODO: check
+CVE-2026-108820 (A weakness has been identified in agno-agi agno up to
3.0.6/3.1.1. Thi ...)
+ TODO: check
+CVE-2026-108819 (A security flaw has been discovered in agno-agi agno up to
3.0.6/3.1.1 ...)
+ TODO: check
+CVE-2026-108818 (A vulnerability was identified in agno-agi agno up to
2.7.3/3.0.6. Thi ...)
+ TODO: check
+CVE-2026-108817 (A vulnerability was determined in agno-agi agno up to 3.0.9.
Affected ...)
+ TODO: check
+CVE-2026-108816 (A vulnerability was found in agno-agi agno up to 3.0.6.
Affected by th ...)
+ TODO: check
+CVE-2026-108815 (A vulnerability has been found in idcCMS 1.70. Affected is an
unknown ...)
+ TODO: check
+CVE-2026-108814 (A flaw has been found in SEMCMS up to 5.0. This impacts an
unknown fun ...)
+ TODO: check
+CVE-2026-108813 (A vulnerability was detected in SEMCMS up to 5.0. This
affects an unkn ...)
+ TODO: check
+CVE-2026-108812 (A security vulnerability has been detected in SEMCMS up to
5.0. The im ...)
+ TODO: check
+CVE-2026-108811 (A weakness has been identified in WMCMS 4.446.1257. The
affected eleme ...)
+ TODO: check
+CVE-2026-108810 (A security flaw has been discovered in tsi-coop tsi-dpdp-cms
0.5.0/0.5 ...)
+ TODO: check
+CVE-2026-108486 (Missing Authorization vulnerability in WPMU DEV Forminator
forminator ...)
+ TODO: check
+CVE-2026-108482 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-108481 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon
Patreon Wor ...)
+ TODO: check
+CVE-2026-108479 (Cross-Site Request Forgery (CSRF) vulnerability in Patreon
Patreon Wor ...)
+ TODO: check
+CVE-2026-108478 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-108477 (Missing Authorization vulnerability in Arraytics Booktics
booktics all ...)
+ TODO: check
+CVE-2026-108476 (Missing Authorization vulnerability in VideoWhisper.com Paid
Videochat ...)
+ TODO: check
+CVE-2026-108475 (Missing Authorization vulnerability in VideoWhisper.com
Broadcast Live ...)
+ TODO: check
+CVE-2026-108168 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-108094 (A use-after-free flaw was found in mutter in the Wayland
color-managem ...)
+ TODO: check
+CVE-2026-107869 (Missing Authorization vulnerability in WP Desk Flexible
Subscriptions ...)
+ TODO: check
+CVE-2026-107866 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-107865 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-107864 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-107863 (Missing Authorization vulnerability in Codection Products
Restricted U ...)
+ TODO: check
+CVE-2026-107862 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-107432 (Missing Authorization vulnerability in NOUS Ouvert Utile et
Simple Eve ...)
+ TODO: check
+CVE-2026-107430 (Missing Authorization vulnerability in VideoWhisper.com
VideoWhisper S ...)
+ TODO: check
+CVE-2026-107429 (Improper Validation of Specified Quantity in Input
vulnerability in Vi ...)
+ TODO: check
+CVE-2026-107427 (Authorization Bypass Through User-Controlled Key
vulnerability in NOUS ...)
+ TODO: check
+CVE-2026-107423 (Missing Authorization vulnerability in WP User Manager WP
User Manager ...)
+ TODO: check
+CVE-2026-107418 (Missing Authorization vulnerability in Arraytics Booktics
booktics all ...)
+ TODO: check
+CVE-2026-107248 (Thelia 3.0.0's back-office Email/Messages feature contains a
server\u2 ...)
+ TODO: check
+CVE-2026-107226 (The AsyncHttpClient (AHC) library allows Java applications to
easily e ...)
+ TODO: check
+CVE-2026-106605 (Improper Validation of Specified Quantity in Input
vulnerability in WP ...)
+ TODO: check
+CVE-2026-105668 (Protection Mechanism Failure vulnerability in hexpm hex
allows the own ...)
+ TODO: check
+CVE-2026-105466 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is
vulnerable ...)
+ TODO: check
+CVE-2026-105465 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5
isvulnerable ...)
+ TODO: check
+CVE-2026-105464 (IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for
Linux, UN ...)
+ TODO: check
+CVE-2026-105412 (An SQL Injection vulnerability affecting Tuleap Enterprise
Edition 17. ...)
+ TODO: check
+CVE-2026-105411 (An Authorization Bypass Through User-Controlled Key
vulnerability affe ...)
+ TODO: check
+CVE-2026-105410 (A Stored Cross-site Scripting (XSS) vulnerability affecting
Tuleap Ent ...)
+ TODO: check
+CVE-2026-105409 (A Stored Cross-site Scripting (XSS) vulnerability affecting
Tuleap Ent ...)
+ TODO: check
+CVE-2026-105408 (A Stored Cross-site Scripting (XSS) vulnerability affecting
Tuleap Ent ...)
+ TODO: check
+CVE-2026-105407 (An OS Command Injection vulnerability affecting Tuleap
Enterprise Edit ...)
+ TODO: check
+CVE-2026-105283 (Generation of Error Message Containing Sensitive Information
vulnerabi ...)
+ TODO: check
+CVE-2026-105280 (Improper Validation of Integrity Check Value vulnerability in
hexpm he ...)
+ TODO: check
+CVE-2026-105274 (Improper Handling of Highly Compressed Data (Data
Amplification) vulne ...)
+ TODO: check
+CVE-2026-105081 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not
properly ...)
+ TODO: check
+CVE-2026-104710
+ REJECTED
+CVE-2026-104355 (A connected peer cluster can modify a Temporal Server
cluster's local ...)
+ TODO: check
+CVE-2026-104102 (copyparty is a portable file server. Prior to 1.20.19, FTP
upload path ...)
+ TODO: check
+CVE-2026-103903 (An incorrect authorization vulnerability in the WinBox
authentication ...)
+ TODO: check
+CVE-2026-103902 (Improper verification of cryptographic signature
vulnerability in Digi ...)
+ TODO: check
+CVE-2026-103537 (Thelia 2.6.1 contains an absolute path traversal
vulnerability in its ...)
+ TODO: check
+CVE-2026-103535 (Thelia v2.6.1 contains path traversal and PHP code injection
vulnerabi ...)
+ TODO: check
+CVE-2026-103529 (Thelia v2.6.0 permits authenticated administrators to upload
and insta ...)
+ TODO: check
+CVE-2026-103528 (Thelia 2.6.0 uses Smarty for email templates without properly
restrict ...)
+ TODO: check
+CVE-2026-103527 (Thelia v2.6.0's Smarty templates (address.html and
address-update.html ...)
+ TODO: check
+CVE-2026-103526 (In Thelia v2.6.0, both the administrative login and forgotten
password ...)
+ TODO: check
+CVE-2026-103524 (Thelia v2.6.0 is vulnerable to multiple stored XSS
vulnerabilities wit ...)
+ TODO: check
+CVE-2026-103523 (Thelia v2.6.0 contains an open redirect vulnerability in its
address c ...)
+ TODO: check
+CVE-2026-103522 (In Thelia v2.6.0, the store banner upload feature performs
insufficien ...)
+ TODO: check
+CVE-2026-103521 (In Thelia v2.6.0, the document upload endpoint properly
blocks the upl ...)
+ TODO: check
+CVE-2026-103503 (Improper Certificate Validation vulnerability in hexpm hex
allows an a ...)
+ TODO: check
+CVE-2026-103502 (Improper Certificate Validation vulnerability in hexpm
hex_core allows ...)
+ TODO: check
+CVE-2026-103356 (Missing Authorization vulnerability in VillaTheme TMDS
tmds-dropshippi ...)
+ TODO: check
+CVE-2026-103080 (External Control of Assumed-Immutable Web Parameter
vulnerability in V ...)
+ TODO: check
+CVE-2026-103061 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-103060 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-102663 (OpenList is a file list program that supports multiple
storage backend ...)
+ TODO: check
CVE-2026-XXXX [GHSA-4g67-jhpc-q5xp]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
@@ -5144,7 +5876,7 @@ CVE-2026-97308 (Unauthenticated Bypass Vulnerability in
Login Lockdown <= 2.17 v
NOT-FOR-US: WordPress plugin or theme
CVE-2026-96890 (A Server-Side Request Forgery (SSRF) vulnerability was
identified in G ...)
NOT-FOR-US: Github Enterprise Server
-CVE-2026-95594 (Unauthenticated Privilege Escalation in SMS Alert Order
Notifications ...)
+CVE-2026-95594 (Incorrect Privilege Assignment vulnerability in Cozy Vision
Technologi ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95526 (Unauthenticated Broken Access Control in BEAR <= 1.2.2
versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -5476,504 +6208,750 @@ CVE-2026-106440 (Hydra is a framework for elegantly
configuring complex applicat
CVE-2026-106439 (Hydra is a framework for elegantly configuring complex
applications. F ...)
NOT-FOR-US: Hydra (different from src:hydra)
CVE-2026-106427 (Confused deputy in Mobile in Google Chrome on on iOS prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106426 (Race condition in Fonts in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106425 (Missing authorization in BrowserTag in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106424 (Information leak in Audio in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106423 (Use after free in Media in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106422 (Incorrect authorization in API in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106421 (Use after free in PDF in Google Chrome prior to 155.0.8059.39
allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106420 (Incorrect calculation in API in Google Chrome on on Windows
prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106419 (Use after free in ANGLE in Google Chrome on on Android prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106418 (Missing authorization in Network in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106417 (Integer overflow in Media in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106416 (Code injection in Extensions in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106415 (Information leak in Enterprise in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106414 (Improper input validation in Mobile in Google Chrome on on
iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106413 (Race condition in Browser in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106412 (Race condition in Core in Google Chrome on on Mac prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106411 (Use after free in Parser in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106410 (Missing authorization in Permissions in Google Chrome prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106409 (Incorrect reference resolution in WebAppInstalls in Google
Chrome on o ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106408 (Protection mechanism failure in Mobile in Google Chrome on on
iOS prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106407 (Incorrect authorization in GetUserMedia in Google Chrome
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106406 (Missing authorization in Mobile in Google Chrome on on iOS
prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106405 (Race condition in CustomTabs in Google Chrome on on Android
prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106404 (Incorrect authorization in FontAccess in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106403 (Incorrect authorization in Accessibility in Google Chrome
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106402 (Incorrect authorization in Extensions in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106401 (Out of bounds write in Media in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106400 (Clickjacking in Messages in Google Chrome on on Android prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106399 (Out of bounds read in Skia in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-106398 (Incorrect authorization in Media in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106397 (Incorrect authorization in Mobile in Google Chrome on on iOS
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106396 (Improper input validation in Omnibox in Google Chrome on on
Android pr ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106395 (Uninitialized resource in Dawn in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106394 (Incomplete cleanup in Glic in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106393 (Use after free in Storage in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106392 (Information leak in WebAudio in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106391 (Incorrect authorization in WebShare in Google Chrome on on
Android pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106390 (Incorrect provision of specified functionality in
SanitizerAPI in Goog ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106389 (Incorrect authorization in USB in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106388 (Missing authorization in DataTransfer in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106387 (Missing authorization in Mobile in Google Chrome on on iOS
prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106386 (Uninitialized resource in WebAudio in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106385 (Race condition in Chromoting in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106384 (Missing authorization in SiteIsolation in Google Chrome prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106383 (Use after free in Media in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106382 (Use after free in Chromecast in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106381 (Incorrect authorization in Passwords in Google Chrome on on
iOS prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106380 (UI misrepresentation in UI in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106379 (Uninitialized resource in Skia in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-106378 (Privilege elevation in Sandbox in Google Chrome on on Mac
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106377 (Race condition in Fonts in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106376 (Uninitialized resource in ANGLE in Google Chrome on on
Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106375 (Incomplete cleanup in Dawn in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106374 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106373 (Use after free in Fonts in Google Chrome on on Windows prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106372 (Incorrect authorization in UI in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106371 (Incorrect authorization in Transactions Platform in Google
Chrome on o ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106370 (Uninitialized resource in GPU in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106369 (Missing authorization in Translate in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106368 (UI misrepresentation in UI in Google Chrome on on Android
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106367 (Missing authorization in Mobile in Google Chrome on on
Android prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106366 (Incomplete cleanup in CustomTabs in Google Chrome on on
Android prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106365 (Missing authorization in Animation in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106364 (Incorrect authorization in Omnibox in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106363 (Missing authorization in FullScreen in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106362 (Missing authorization in DevTools in Google Chrome prior to
155.0.8059 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106361 (Incorrect provision of specified functionality in Mobile in
Google Chr ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106360 (Information leak in Payments in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106359 (Confused deputy in DeviceBoundSessionCredentials in Google
Chrome prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106358 (Use after free in Navigation in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106357 (Use after free in WebRTC in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106356 (Clickjacking in EVP in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106355 (Missing authorization in Media in Google Chrome on on Windows
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106354 (Improper resource exposure in Extensions in Google Chrome
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106353 (Improper input validation in Mobile in Google Chrome on on
iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106352 (Incorrect authorization in WebProtect in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106351 (Observable discrepancy in Safebrowsing in Google Chrome on on
iOS prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106350 (Incorrect authorization in Browser in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106349 (Use after free in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106348 (Information leak in Animation in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106347 (Use after free in Track in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106346 (Improper state validation in DevTools in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106345 (Use of released resource in Session in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106344 (Missing authorization in Permissions in Google Chrome prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106343 (Improper state validation in Autofill AI in Google Chrome on
on Androi ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106342 (Information leak in Autofill in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106341 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106340 (Missing authorization in CredentialProvider in Google Chrome
on on Win ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106339 (Use of released resource in Core in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106338 (UI misrepresentation in PictureInPicture in Google Chrome on
on Androi ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106337 (UI misrepresentation in UI in Google Chrome on on Android
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106336 (Observable discrepancy in Paint in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106335 (Use after free in Media in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106334 (Information leak in Payments in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106333 (Incorrect authorization in Input in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106332 (Integer overflow in Compositing in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106331 (Improper input validation in Extensions in Google Chrome
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106330 (Information leak in Paint in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106329 (Incorrect authorization in FileSystem in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106328 (Incorrect authorization in PDF in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106327 (Incorrect authorization in Core in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106326 (Confused deputy in UI in Google Chrome on on Android prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106325 (Incorrect reference resolution in Core in Google Chrome prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106324 (Incorrect authorization in WebAppInstalls in Google Chrome on
on Andro ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106323 (Missing authorization in Chrome for iOS in Google Chrome on
on iOS pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106322 (Open redirect in AppManifest in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106321 (Information leak in Editing in Google Chrome prior to
155.0.8059.39 al ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106320 (Use of released resource in UI in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106318 (Use after free in Media in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106317 (UI misrepresentation in FullScreen in Google Chrome on on
Android prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106316 (UI misrepresentation in Chromoting in Google Chrome on on Mac
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106315 (Use after free in Modularization in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106314 (Incorrect authorization in Bluetooth in Google Chrome prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106313 (Incorrect authorization in Browser in Google Chrome on on
Android prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106312 (Missing authorization in SignIn in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106311 (Clickjacking in PermissionElement in Google Chrome prior to
155.0.8059 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106310 (Use of released resource in FontAccess in Google Chrome prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106309 (Incorrect authorization in Selection in Google Chrome on on
iOS prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106308 (Incorrect reference resolution in Autofill in Google Chrome
on on Andr ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106307 (Incorrect authorization in Network in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106306 (Incorrect authorization in DevTools in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106305 (UI misrepresentation in Mobile in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106304 (Out of bounds read in ANGLE in Google Chrome prior to
155.0.8059.39 al ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106303 (Observable discrepancy in Autofill AI in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106302 (UI misrepresentation in PermissionElement in Google Chrome
prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106301 (Confused deputy in Contextual Tasks in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106300 (Race condition in CacheStorage in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106299 (Improper input validation in WebAudio in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106298 (Use after free in Chrome Tabs in Google Chrome on on Mac
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106297 (Incorrect authorization in Scheduling in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106296 (Improper privilege management in UI in Google Chrome on on
Mac prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106295 (Incorrect authorization in Unbounded Element in Google Chrome
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106294 (Incomplete cleanup in Chromoting in Google Chrome on on Mac
prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106293 (Type confusion in ANGLE in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106292 (Buffer overflow in Fonts in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106291 (Use after free in GarbageCollection in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106290 (Uninitialized resource in GPU in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106289 (Missing authorization in FedCM in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106288 (Missing authorization in Browser in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106287 (Information loss in CORS in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106286 (Confused deputy in Omnibox in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106285 (UI misrepresentation in WebAppInstalls in Google Chrome prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106284 (Out of bounds read in Printing in Google Chrome on on Windows
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106283 (Use after free in Streaming in Google Chrome prior to
155.0.8059.39 al ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106282 (UI misrepresentation in WebOTP in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106281 (Use after free in Tint in Google Chrome prior to
155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106280 (Incorrect authorization in PermissionElement in Google Chrome
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106279 (Incorrect reference resolution in Passwords in Google Chrome
on on iOS ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106278 (Use after free in Select in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106277 (Information leak in Animation in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106276 (UI misrepresentation in Payments in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106275 (Uninitialized resource in GPU in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106274 (Incorrect reference resolution in Browser in Google Chrome on
on Mac p ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106273 (Uninitialized resource in Video in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106272 (UI misrepresentation in Chromoting in Google Chrome on on
Windows prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106271 (Missing authorization in Workers in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106270 (Incorrect authorization in WebAppInstalls in Google Chrome
prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106269 (Use after free in CSS in Google Chrome prior to 155.0.8059.39
allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106268 (Use after free in WebRTC in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106267 (Missing authorization in Network in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106266 (Confused deputy in Contextual Tasks in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106265 (UI misrepresentation in File in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106264 (Missing authorization in Web Authentication (Passkeys &
Security Keys) ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106263 (Improper input validation in SignIn in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106262 (Incomplete cleanup in GetUserMedia in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106261 (Uninitialized resource in Video in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106260 (Incorrect authorization in DevTools in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106259 (Incorrect authorization in PermissionElement in Google Chrome
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106258 (Uninitialized resource in ANGLE in Google Chrome on on
Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106257 (Use after free in HTML in Google Chrome prior to
155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106256 (Information leak in Passwords in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106255 (Race condition in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106254 (Information leak in Mobile in Google Chrome on on Android
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106253 (Incorrect authorization in Extensions in Google Chrome prior
to 155.0. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106252 (Incorrect comparison in Fonts in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106251 (UI misrepresentation in Chromoting in Google Chrome on on Mac
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106250 (Missing authorization in Actor in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106249 (Incorrect authorization in Autofill in Google Chrome on on
Android pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106248 (Use after free in Bindings in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106247 (Buffer overflow in ANGLE in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106246 (Incorrect authorization in Browser in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106245 (Uninitialized resource in ANGLE in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106244 (Incorrect authorization in Permissions in Google Chrome prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106243 (Incomplete cleanup in Proxy Auth in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106242 (Information leak in Omnibox in Google Chrome on on Android
prior to 15 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106241 (Incorrect authorization in Search in Google Chrome on on
Android prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106240 (Type confusion in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106239 (Integer overflow in WebGL in Google Chrome on on Android
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106238 (Race condition in Fonts in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106237 (Information leak in Permissions in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106236 (UI misrepresentation in Chromoting in Google Chrome on on
Windows prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106235 (Use after free in WebAudio in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106234 (Use after free in Network in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106233 (Use after free in Metrics in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106232 (UI misrepresentation in Browser in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106231 (Uninitialized resource in Dawn in Google Chrome on on Mac
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106230 (Incorrect reference resolution in Offline in Google Chrome on
on Andro ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106229 (UI misrepresentation in FileSystem in Google Chrome prior to
155.0.805 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106228 (Confused deputy in Google Lens in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106227 (Use after free in Core in Google Chrome prior to
155.0.8059.39 allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106226 (Improper input validation in Compositing in Google Chrome
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106225 (Missing authorization in Autofill in Google Chrome prior to
155.0.8059 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106224 (Missing authorization in Google Lens in Google Chrome prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106223 (Uninitialized resource in GPU in Google Chrome on on Android
prior to ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106222 (Incorrect authorization in Sync in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106221 (Confused deputy in WebAPKs in Google Chrome on on Android
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106220 (Information leak in Passwords in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106219 (In JetBrains TeamCity before 2026.2.1 missing validation of
Git submod ...)
NOT-FOR-US: JetBrains
CVE-2026-106218 (In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL
sandbox esc ...)
NOT-FOR-US: JetBrains
CVE-2026-106217 (Missing authorization in Google Lens in Google Chrome prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106216 (Cross-site request forgery in ReadingList in Google Chrome on
on Andro ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106215 (Uninitialized resource in ANGLE in Google Chrome on on
Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106214 (Information leak in Proxy in Google Chrome on on Windows
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106213 (Race condition in WebAudio in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106212 (Incorrect authorization in Autofill in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106211 (Use after free in TabStrip in Google Chrome prior to
155.0.8059.39 all ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106210 (Observable discrepancy in Scroll in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106209 (UI misrepresentation in Mobile in Google Chrome on on iOS
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106208 (Missing authorization in API in Google Chrome prior to
155.0.8059.39 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106207 (Race condition in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106206 (Improper input validation in Mobile in Google Chrome on on
iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106205 (Missing authorization in Passwords in Google Chrome on on
Android prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106204 (Use after free in PDF in Google Chrome prior to 155.0.8059.39
allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106203 (Incomplete cleanup in Autofill in Google Chrome on on iOS
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106202 (Uninitialized resource in ANGLE in Google Chrome on on
Windows prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106201 (Race condition in V8 in Google Chrome prior to 155.0.8059.39
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106200 (Use after free in Track in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106199 (Incorrect authorization in Actor in Google Chrome on on
Android prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106198 (Missing authorization in FileSystem in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106197 (Use after free in Browser in Google Chrome prior to
155.0.8059.39 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106196 (Missing authorization in Navigation in Google Chrome on on
iOS prior t ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106195 (Incorrect authorization in Chromoting in Google Chrome on on
Mac prior ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106194 (Missing authorization in WebAppInstalls in Google Chrome
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106193 (Use after free in Parser in Google Chrome prior to
155.0.8059.39 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106192 (Information leak in Mobile in Google Chrome on on iOS prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106191 (Missing authorization in Actor in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106190 (Use after free in Media in Google Chrome prior to
155.0.8059.39 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106189 (Code injection in ReaderMode in Google Chrome on on iOS prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106188 (Confused deputy in SignIn in Google Chrome on on Android
prior to 155. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106187 (Missing authorization in Permissions in Google Chrome prior
to 155.0.8 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106186 (Uncontrolled search path element in CredentialProvider in
Google Chrom ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106185 (Improper input validation in Viz in Google Chrome prior to
155.0.8059. ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106184 (Uninitialized resource in Media in Google Chrome prior to
155.0.8059.3 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106183 (Missing authorization in Chromoting in Google Chrome on on
Windows pri ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106182 (UI misrepresentation in Paint in Google Chrome prior to
155.0.8059.39 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106181 (Incorrect reference resolution in DevTools in Google Chrome
prior to 1 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106180 (Observable discrepancy in Animation in Google Chrome prior to
155.0.80 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106179 (UI misrepresentation in WebAppInstalls in Google Chrome prior
to 155.0 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-106123 (The RabbitMQ Java client library allows Java and JVM-based
application ...)
- rabbitmq-java-client <unfixed> (bug #1150244)
@@ -6204,7 +7182,7 @@ CVE-2026-105070 (Unauthenticated Privilege Escalation in
Salon booking system <=
NOT-FOR-US: WordPress plugin or theme
CVE-2026-105061 (Unauthenticated Cross Site Scripting (XSS) in WP Mailster <=
1.9.0.0 v ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-105059 (Subscriber Broken Access Control in Delete All Comments of
wordpress < ...)
+CVE-2026-105059 (Missing Authorization vulnerability in royalnavneet Delete
All Comment ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-105058 (Subscriber Privilege Escalation in WP User Profiles <= 2.7.3
versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -6259,6 +7237,7 @@ CVE-2026-102915 (Subscriber Broken Access Control in
WPO365 <= 44.1 versions.)
CVE-2026-102387 (Unauthenticated Sensitive Data Exposure in Xserver Migrator
<= 1.6.6 v ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-102322 (Incorrect Authorization in SiteIsolation in Google Chrome
prior to 155 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-101207 (Dell OpenManage Integration with Microsoft Windows Admin
Center, versi ...)
NOT-FOR-US: Dell / EMC
@@ -9269,28 +10248,39 @@ CVE-2026-103762 (SiYuan before v3.8.5 contains a
missing authorization vulnerabi
CVE-2026-103648 (Path traversal in image-downloader 4.3.0 allows an attacker
who can co ...)
NOT-FOR-US: image-downloader
CVE-2026-103631 (Buffer overflow in WebRTC in Google Chrome prior to
154.0.8037.97 allo ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103630 (Use after free in FedCM in Google Chrome prior to
154.0.8037.97 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to
154.0.8037.97 allow ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
- libskia <unfixed> (unimportant)
NOTE: skia not covered by security support
CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to
154.0.8037.97 a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103627 (Information leak in SVG in Google Chrome prior to
154.0.8037.97 allowe ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103626 (Incorrect authorization in FileSystem in Google Chrome on on
Windows p ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103625 (Type confusion in V8 in Google Chrome prior to 154.0.8037.97
allowed a ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103624 (Use after free in Contextual Tasks in Google Chrome on on
Windows prio ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103623 (Use after free in MediaStream in Google Chrome prior to
154.0.8037.97 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103622 (Use after free in SVG in Google Chrome prior to 154.0.8037.97
allowed ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103621 (Integer overflow in Compositing in Google Chrome prior to
154.0.8037.9 ...)
+ {DSA-6553-1}
- chromium 155.0.8059.39-1
CVE-2026-103604 (Inefficient algorithmic complexity in X.509 distinguished
name string ...)
NOT-FOR-US: Bouncycastle components not packaged in Debian
@@ -51094,7 +52084,7 @@ CVE-2026-82223 (Unauthenticated Broken Access Control
in WP Event SOlution <= 4.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81775 (Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4
version ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-81774 (Unauthenticated Sensitive Data Exposure in WooCommerce Product
Attachm ...)
+CVE-2026-81774 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-81772 (Unauthenticated PHP Object Injection in Ninja Forms - Layout &
Styles ...)
NOT-FOR-US: WordPress plugin or theme
@@ -79377,7 +80367,7 @@ CVE-2026-63134 (Malcolm is a network traffic analysis
tool suite. Prior to versi
CVE-2026-63133 (Malcolm is a network traffic analysis tool suite. Prior to
version 26. ...)
NOT-FOR-US: Malcolm
CVE-2026-5917 (libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with
the li ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.7+ds-1 (bug #1144465)
NOTE: Fixed by:
https://github.com/libgit2/libgit2/commit/b2105b8e60798cb28086d4c648b1cb4854eadccb
(v1.9.7)
CVE-2026-55676 (Malcolm is a network traffic analysis tool suite. The
file-upload comp ...)
@@ -91015,17 +92005,17 @@ CVE-2026-53587 (libgit2 is a portable C
implementation of the Git core methods p
NOTE:
https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm
NOTE: Fixed by:
https://github.com/libgit2/libgit2/commit/affda60c10fcef16723451c0d7dc71b71dc20ad3
(v1.9.5)
CVE-2026-53586 (libgit2 is a portable C implementation of the Git core methods
provide ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.6+ds-1
NOTE:
https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x
NOTE: Fixed by:
https://github.com/libgit2/libgit2/commit/af2b29ad0a74d5bac9751376879ddaf848136d3b
(v1.9.5)
CVE-2026-53585 (libgit2 is a portable C implementation of the Git core methods
provide ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.6+ds-1
NOTE:
https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j
NOTE: Fixed by:
https://github.com/libgit2/libgit2/commit/0cdfdd5fa8f8514c82413025e1e0808866cf7c30
(v1.9.5)
CVE-2026-53584 (libgit2 is a portable C implementation of the Git core methods
provide ...)
- {DSA-6453-1}
+ {DSA-6453-1 DLA-4831-1}
- libgit2 1.9.6+ds-1
NOTE:
https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm
NOTE: Fixed by:
https://github.com/libgit2/libgit2/commit/ec7371da9f359cd8293e9108e7a0b1c1b61b67c4
(v1.9.5)
@@ -117005,7 +117995,7 @@ CVE-2026-27414 (Contributor PHP Object Injection in
Werkstatt <= 4.8.3 versions.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-27412 (Unauthenticated Local File Inclusion in Pearl - Corporate
Business <= ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-27408 (Unauthenticated Cross Site Scripting (XSS) in NativeChurch <=
4.8.8.2 ...)
+CVE-2026-27408 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-27404 (Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7
versions.)
NOT-FOR-US: WordPress plugin or theme
@@ -134833,7 +135823,7 @@ CVE-2026-11526 (GD versions before 2.86 for Perl
allow OS command injection and
- libgd-perl 2.84-3
NOTE: https://lists.security.metacpan.org/cve-announce/msg/41004664/
NOTE: Fixed by:
https://github.com/lstein/Perl-GD/commit/67b163713c6c78dfeb693da0978ae934e5cd8210
(v2.86)
-CVE-2026-52903
+CVE-2026-52903 (A deserialization of untrusted data vulnerability was found in
ManageI ...)
NOT-FOR-US: ManageIQ
CVE-2026-11791 (A flaw was found in 389 Directory Server. During schema
reload, the at ...)
- 389-ds-base <unfixed> (bug #1139816)
@@ -215895,7 +216885,7 @@ CVE-2021-47798 (NoteBurner 2.35 contains a buffer
overflow vulnerability in the
NOT-FOR-US: NoteBurner
CVE-2021-47797 (Leawo Prof. Media 11.0.0.1 contains a denial of service
vulnerability ...)
NOT-FOR-US: Leawo Prof. Media
-CVE-2021-47796 (Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet
credentia ...)
+CVE-2021-47796 (Denver SHO-110 IP cameras expose a secondary HTTP service on
TCP port ...)
NOT-FOR-US: Denver SHC-150 Smart Wifi Camera
CVE-2021-47795 (GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities
includi ...)
NOT-FOR-US: GeoVision
@@ -500996,8 +501986,8 @@ CVE-2023-25998 (Improper Control of Filename for
Include/Require Statement in PH
NOT-FOR-US: WordPress plugin or theme
CVE-2023-25997 (Missing Authorization vulnerability in SolaPlugins Sola
Support Ticket ...)
NOT-FOR-US: WordPress plugin
-CVE-2023-25996
- RESERVED
+CVE-2023-25996 (Insertion of Sensitive Information Into Sent Data
vulnerability in Plu ...)
+ TODO: check
CVE-2023-25995 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
NOT-FOR-US: WordPress plugin
CVE-2023-25994 (Cross-Site Request Forgery (CSRF) vulnerability in Alex
Benfica Publis ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15ae058f0e95a49fd940c1116861b9352c24a436
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15ae058f0e95a49fd940c1116861b9352c24a436
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
