Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a6045591 by security tracker role at 2026-10-22T07:13:16+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,13 +1,1037 @@
-CVE-2026-102486
+CVE-2026-97328 (The WebP Express WordPress plugin before 0.25.16 does not
escape value ...)
+ TODO: check
+CVE-2026-96778 (Pillow is a Python imaging library. From 9.4.0 until 13.0.0,
ImagingJp ...)
+ TODO: check
+CVE-2026-96644 (Pillow is a Python imaging library. Prior to 13.0.0 on
Windows, src/PI ...)
+ TODO: check
+CVE-2026-96643 (Pillow is a Python imaging library. From 11.0.0 until 13.0.0,
Exif.loa ...)
+ TODO: check
+CVE-2026-96642 (Pillow is a Python imaging library. Prior to 13.0.0, the TarIO
initial ...)
+ TODO: check
+CVE-2026-96641 (Pillow is a Python imaging library. Prior to 13.0.0, PILfont
text-widt ...)
+ TODO: check
+CVE-2026-96640 (Pillow is a Python imaging library. From 5.1.0 until 13.0.0,
PdfParser ...)
+ TODO: check
+CVE-2026-96639 (Pillow is a Python imaging library. From 11.0.0 until 13.0.0,
multi-fr ...)
+ TODO: check
+CVE-2026-96638 (Pillow is a Python imaging library. From 9.1.0 until 13.0.0,
BmpRleDec ...)
+ TODO: check
+CVE-2026-96637 (Pillow is a Python imaging library. Prior to 13.0.0,
SpiderImageFile.s ...)
+ TODO: check
+CVE-2026-96636 (Pillow is a Python imaging library. Prior to 13.0.0,
MpoImageFile.seek ...)
+ TODO: check
+CVE-2026-96398 (Incorrect Authorization vulnerability in Drupal Webform allows
Forcefu ...)
+ TODO: check
+CVE-2026-96392 (Improper Neutralization of Special Elements Used in a Template
Engine ...)
+ TODO: check
+CVE-2026-96391 (Missing Authorization vulnerability in Drupal Webform REST
allows Forc ...)
+ TODO: check
+CVE-2026-96390 (Privilege Defined With Unsafe Actions vulnerability in Drupal
Editoria ...)
+ TODO: check
+CVE-2026-96388 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Tawk.to - Li ...)
+ TODO: check
+CVE-2026-96387 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
+ TODO: check
+CVE-2026-96386 (Missing Authorization vulnerability in Drupal Smart Content
allows For ...)
+ TODO: check
+CVE-2026-96385 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
+ TODO: check
+CVE-2026-96384 (Incorrect Authorization vulnerability in Drupal Mermaid
Diagram Field ...)
+ TODO: check
+CVE-2026-96382 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96380 (Missing Authorization vulnerability in Drupal CSS Usage
Analyzer allow ...)
+ TODO: check
+CVE-2026-96379 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96378 (Improperly Controlled Modification of Dynamically-Determined
Object At ...)
+ TODO: check
+CVE-2026-96377 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
+ TODO: check
+CVE-2026-96376 (Improper Neutralization of Special Elements used in an OS
Command ("OS ...)
+ TODO: check
+CVE-2026-96375 (Improper Certificate Validation vulnerability in Drupal Cloud
allows A ...)
+ TODO: check
+CVE-2026-96374 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Project Brow ...)
+ TODO: check
+CVE-2026-96373 (Incorrect Authorization vulnerability in Drupal Webform allows
Forcefu ...)
+ TODO: check
+CVE-2026-96372 (Insufficient Granularity of Access Control vulnerability in
Drupal Web ...)
+ TODO: check
+CVE-2026-96371 (Privilege Defined With Unsafe Actions vulnerability in Drupal
Webform ...)
+ TODO: check
+CVE-2026-96370 (Incorrect Authorization vulnerability in Drupal Webform allows
Server ...)
+ TODO: check
+CVE-2026-96369 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
+ TODO: check
+CVE-2026-96368 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96367 (Privilege Defined With Unsafe Actions vulnerability in Drupal
Webform ...)
+ TODO: check
+CVE-2026-96366 (Incorrect Authorization vulnerability in Drupal Webform allows
Forcefu ...)
+ TODO: check
+CVE-2026-96365 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
+ TODO: check
+CVE-2026-96364 (Improper Control of Interaction Frequency vulnerability in
Drupal Webf ...)
+ TODO: check
+CVE-2026-96363 (Privilege Defined With Unsafe Actions vulnerability in Drupal
Webform ...)
+ TODO: check
+CVE-2026-96362 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96361 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96360 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96359 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96358 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96357 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-96356 (Incorrect Authorization vulnerability in Drupal Webform allows
Forcefu ...)
+ TODO: check
+CVE-2026-96355 (Improper Neutralization of Special Elements Used in a Template
Engine ...)
+ TODO: check
+CVE-2026-92210 (NoMachine nxhtd Server-Side Request Forgery Information
Disclosure Vul ...)
+ TODO: check
+CVE-2026-92209 (NoMachine Redis Improper Authentication Local Privilege
Escalation Vul ...)
+ TODO: check
+CVE-2026-92208 (NoMachine mDNS Heap-based Buffer Overflow Remote Code
Execution Vulner ...)
+ TODO: check
+CVE-2026-92207 (MindsDB OpenBBtable Code Injection Remote Code Execution
Vulnerability ...)
+ TODO: check
+CVE-2026-92206 (CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote
Code Ex ...)
+ TODO: check
+CVE-2026-92205 (BusyBox libarchive Symlink Directory Traversal Arbitrary File
Creation ...)
+ TODO: check
+CVE-2026-92204 (Airbyte OneDrive Connector _get_shared_drive_object
Server-Side Reques ...)
+ TODO: check
+CVE-2026-92203 (Airbyte SharePoint Connector _get_shared_drive_object
Server-Side Requ ...)
+ TODO: check
+CVE-2026-92202 (Luxion KeyShot BIP File Parsing Uncontrolled Search Path
Element Remot ...)
+ TODO: check
+CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code
Executi ...)
+ TODO: check
+CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
+ TODO: check
+CVE-2026-90484 (The MySQL client response parser in Apache bRPC dereferences a
null po ...)
+ TODO: check
+CVE-2026-89052 (A hardcoded cryptographic key management vulnerability exists
in Arche ...)
+ TODO: check
+CVE-2026-89035 (MikroTik RouterOS through 7.24.5 contains a session token
replay vulne ...)
+ TODO: check
+CVE-2026-88849 (The MasterStudy LMS WordPress Plugin WordPress plugin before
3.7.55 d ...)
+ TODO: check
+CVE-2026-87955 (Missing Authorization vulnerability in Drupal Ultimate Table
Field all ...)
+ TODO: check
+CVE-2026-87954 (Missing Authorization vulnerability in Drupal Taxonomy Term
Glossary a ...)
+ TODO: check
+CVE-2026-87953 (Server-Side Request Forgery (SSRF) vulnerability in Drupal
SAML SSO - ...)
+ TODO: check
+CVE-2026-87952 (Authentication Bypass by Capture-replay vulnerability in
Drupal SAML S ...)
+ TODO: check
+CVE-2026-87951 (Insecure Storage of Sensitive Information vulnerability in
Drupal SAML ...)
+ TODO: check
+CVE-2026-87950 (Use of Hard-coded Credentials vulnerability in Drupal SAML SSO
- Servi ...)
+ TODO: check
+CVE-2026-87949 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-87948 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-87947 (Improper Verification of Cryptographic Signature vulnerability
in Drup ...)
+ TODO: check
+CVE-2026-87946 (Observable Timing Discrepancy vulnerability in Drupal SAML SSO
- Servi ...)
+ TODO: check
+CVE-2026-87945 (URL Redirection to Untrusted Site ('Open Redirect')
vulnerability in D ...)
+ TODO: check
+CVE-2026-87944 (Improper Certificate Validation vulnerability in Drupal SAML
SSO - Ser ...)
+ TODO: check
+CVE-2026-87943 (Missing Authorization vulnerability in Drupal SAML SSO -
Service Provi ...)
+ TODO: check
+CVE-2026-87942 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-87941 (Vulnerability in Drupal Patreon. This issue affects Patreon
versions: ...)
+ TODO: check
+CVE-2026-87940 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
+ TODO: check
+CVE-2026-87939 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-87938 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-87937 (URL Redirection to Untrusted Site ('Open Redirect')
vulnerability in D ...)
+ TODO: check
+CVE-2026-87936 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-87849 (The Discovery naming-service reply parser in Apache bRPC
(versions < 1 ...)
+ TODO: check
+CVE-2026-87096 (Sensitive information disclosure and manipulation due to
improper auth ...)
+ TODO: check
+CVE-2026-87095 (Sensitive information disclosure and manipulation due to
improper auth ...)
+ TODO: check
+CVE-2026-86249 (On a brpc::Server that sets both ServerOptions.auth and
ServerOptions. ...)
+ TODO: check
+CVE-2026-86147 (External control of file name or path and uncontrolled
resource consum ...)
+ TODO: check
+CVE-2026-86146 (Inconsistent interpretation of HTTP requests (HTTP
request/response sm ...)
+ TODO: check
+CVE-2026-85683 (The Jane Menu WordPress plugin before 1.5.1 does not have any
capabili ...)
+ TODO: check
+CVE-2026-85518 (A flaw was found in OpenSCAP. When decomposing a Source
DataStream (SD ...)
+ TODO: check
+CVE-2026-84924 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-84923 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
+ TODO: check
+CVE-2026-84921 (Missing Authorization vulnerability in Drupal Webform
Submissions Dele ...)
+ TODO: check
+CVE-2026-84920 (Incorrect Authorization vulnerability in Drupal Unpublished
Node Permi ...)
+ TODO: check
+CVE-2026-84919 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-84918 (Improper Verification of Cryptographic Signature vulnerability
in Drup ...)
+ TODO: check
+CVE-2026-84917 (Incorrect Authorization vulnerability in Drupal Jsonapi Role
Access a ...)
+ TODO: check
+CVE-2026-84916 (Missing Authorization vulnerability in Drupal Islandora
allows Forcef ...)
+ TODO: check
+CVE-2026-84915 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-84914 (Missing Authorization vulnerability in Drupal Calculate
Working Days a ...)
+ TODO: check
+CVE-2026-84913 (Missing Authorization vulnerability in Drupal AI Translate
allows Forc ...)
+ TODO: check
+CVE-2026-84912 (Missing Authorization vulnerability in Drupal AI (Artificial
Intellige ...)
+ TODO: check
+CVE-2026-84911 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
+ TODO: check
+CVE-2026-84910 (Missing Authorization vulnerability in Drupal Advanced Search
allows F ...)
+ TODO: check
+CVE-2026-84748 (Improper authorization in Apache bRPC (versions < 1.18.0) on
all platf ...)
+ TODO: check
+CVE-2026-84747 (Interpretation conflict in the HTTP protocol implementation in
Apache ...)
+ TODO: check
+CVE-2026-84727 (Use-after-free in the RTMP protocol implementation in Apache
bRPC (ver ...)
+ TODO: check
+CVE-2026-82987 (There exists a screen capture endpoint in vCast media
streaming servic ...)
+ TODO: check
+CVE-2026-82953 (NULL pointer dereference in the RTMP protocol implementation
in Apache ...)
+ TODO: check
+CVE-2026-82942 (A data race in the RDMA transport of Apache bRPC (versions <
1.18.0) a ...)
+ TODO: check
+CVE-2026-82425 (A reachable assertion in Apache bRPC (version < 1.18.0) on all
platfor ...)
+ TODO: check
+CVE-2026-82231 (A Thrift client in Apache bRPC (version < 1.18.0, built with
WITH_THRI ...)
+ TODO: check
+CVE-2026-82230 (Uncontrolled recursion in the mcpack2pb component in Apache
bRPC (vers ...)
+ TODO: check
+CVE-2026-82210 (Enforceable assertion in the streaming feature of Apache bRPC
(version ...)
+ TODO: check
+CVE-2026-81755 (Uncontrolled resource consumption in the streaming RPC
component of Ap ...)
+ TODO: check
+CVE-2026-81163 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-80463 (Unbounded memory accumulation in the stream message reassembly
path of ...)
+ TODO: check
+CVE-2026-79976 (The MCTP-over-I2C+GPIO target binding in
subsys/pmci/mctp/mctp_i2c_gpi ...)
+ TODO: check
+CVE-2026-79704 (An out-of-bounds read vulnerability exists in the streaming
RPC client ...)
+ TODO: check
+CVE-2026-78392 (The Link Library WordPress plugin before 7.9.6 does not
sanitise and e ...)
+ TODO: check
+CVE-2026-78334 (Missing authentication in the streaming RPC path of Apache
bRPC (versi ...)
+ TODO: check
+CVE-2026-78119 (The Nuvoton NPCX eSPI driver parses Target-Attached-Flash
(TAF) reques ...)
+ TODO: check
+CVE-2026-78118 (The kernel helper z_waitq_head() (kernel/include/wait_q.h)
reads the h ...)
+ TODO: check
+CVE-2026-78117 (The Infineon PSOC 6 BLESS HCI driver in
drivers/bluetooth/hci/hci_infi ...)
+ TODO: check
+CVE-2026-78116 (The Broadcom AFBR-S50 time-of-flight sensor driver
double-completes an ...)
+ TODO: check
+CVE-2026-78066 (Resource exhaustion in Apache bRPC (version < 1.18.0) on all
platforms ...)
+ TODO: check
+CVE-2026-78058 (Uncontrolled resource consumption in the HTTP/2 (h2) receive
path of A ...)
+ TODO: check
+CVE-2026-78048 (A reachable-assertion flaw in the HPACK header-compression
decoder of ...)
+ TODO: check
+CVE-2026-76531 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76530 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76529 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76528 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76527 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76526 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76524 (A vulnerability in the control channel socket implementation
of O ...)
+ TODO: check
+CVE-2026-76505 (A vulnerability in the IPv4 packet processing functionality of
Cisco I ...)
+ TODO: check
+CVE-2026-76497 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76496 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76495 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76494 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76493 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76492 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76491 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76490 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76489 (Multiple Cisco products are affected by a vulnerability in the
memory ...)
+ TODO: check
+CVE-2026-76487 (A vulnerability in Cisco Unified Communications Manager
(Unified CM) a ...)
+ TODO: check
+CVE-2026-76481 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76479 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76478 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76477 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76476 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76475 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76474 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76473 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76466 (A vulnerability in the database service feature of Cisco
Expressway Se ...)
+ TODO: check
+CVE-2026-76462 (A vulnerability in the interprocess communication (IPC)
channel of the ...)
+ TODO: check
+CVE-2026-76445 (Multiple Cisco products are affected by a vulnerability in the
Snort 3 ...)
+ TODO: check
+CVE-2026-76435 (A vulnerability in Cisco Expressway Series could allow an
unauthentica ...)
+ TODO: check
+CVE-2026-76408 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76407 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76406 (In Splunk SOAR versions below 8.7.0, an unauthenticated user
with acce ...)
+ TODO: check
+CVE-2026-76308 (In Splunk SOAR versions below 8.7.0, an authenticated user
could chang ...)
+ TODO: check
+CVE-2026-76307 (In Splunk SOAR versions below 8.7.0, a user that holds a role
with the ...)
+ TODO: check
+CVE-2026-76306 (In Splunk SOAR versions below 8.7.0, a user that has the
"Observer" ro ...)
+ TODO: check
+CVE-2026-76305 (In Splunk SOAR versions below 8.7.0, an authenticated user who
does no ...)
+ TODO: check
+CVE-2026-76304 (In Splunk SOAR versions below 8.7.0, an authenticated user who
does no ...)
+ TODO: check
+CVE-2026-76303 (In Splunk SOAR versions below 8.7.0, a user that holds a role
with the ...)
+ TODO: check
+CVE-2026-76302 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76301 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76300 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76299 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-76298 (In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user
who does ...)
+ TODO: check
+CVE-2026-76297 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76296 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76295 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76294 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76293 (In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76292 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76291 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76290 (In Splunk Enterprise versions below 10.4.4, 10.2.8, and
10.0.11, an un ...)
+ TODO: check
+CVE-2026-76289 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76288 (In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11,
and 9.4.1 ...)
+ TODO: check
+CVE-2026-76287 (In Splunk Enterprise versions below 10.4.4, a user that holds
a role w ...)
+ TODO: check
+CVE-2026-74758 (A heap use-after-free in the RTMP protocol component of Apache
bRPC (v ...)
+ TODO: check
+CVE-2026-74757 (Uncontrolled resource allocation in the mcpack2pb component in
Apache ...)
+ TODO: check
+CVE-2026-74755 (An integer underflow in the mcpack2pb component of Apache bRPC
(versio ...)
+ TODO: check
+CVE-2026-70387 (Exposed dangerous method or function and Incorrect
Authorization vulne ...)
+ TODO: check
+CVE-2026-70386 (Improper neutralization of special elements used in an OS
command ('OS ...)
+ TODO: check
+CVE-2026-66392 (Apache bRPC versions before 1.18.0 validate the server
certificate cha ...)
+ TODO: check
+CVE-2026-61916 (Out-of-bounds reads in URL parsing and case-insensitive header
lookup ...)
+ TODO: check
+CVE-2026-61902 (Apache bRPC versions before 1.18.0 do not consistently enforce
the con ...)
+ TODO: check
+CVE-2026-59562 (Missing authentication for critical function vulnerability in
Apache I ...)
+ TODO: check
+CVE-2026-59229 (The Legacy Pipe receiver protocol (handshake / sendPipeData)
uses a ha ...)
+ TODO: check
+CVE-2026-58663 (An authentication bypass vulnerability exists in Apache
IoTDB's Thrift ...)
+ TODO: check
+CVE-2026-58064 (The Redis protocol implementation in Apache bRPC allowed
inline comman ...)
+ TODO: check
+CVE-2026-56388 (The Redis server command parser in Apache bRPC accepts an
empty RESP a ...)
+ TODO: check
+CVE-2026-56387 (The RTMP AMF parser in Apache bRPC accepts AMF string lengths
and arra ...)
+ TODO: check
+CVE-2026-56386 (Integer underflow and out-of-bounds read in the HTTP/2 server
DATA fra ...)
+ TODO: check
+CVE-2026-54427 (Uncontrolled recursion in the AMF parser in Apache bRPC <
1.18.0 allow ...)
+ TODO: check
+CVE-2026-54426 (Uncontrolled recursion in the Redis reply parser in Apache
bRPC < 1.18 ...)
+ TODO: check
+CVE-2026-54425 (Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache
bRPC befo ...)
+ TODO: check
+CVE-2026-53986 (Girafit camera app (Android and iOS) version 1.9.1 and
earlier, and Gi ...)
+ TODO: check
+CVE-2026-48830 (Improper authentication in Apache bRPC through 1.17.0 allows a
remote ...)
+ TODO: check
+CVE-2026-41114 (Uncontrolled Resource Consumption vulnerability in Apache
IoTDB JDBC d ...)
+ TODO: check
+CVE-2026-29001 (TastyIgniter through 4.4.5 contain a PHP object injection
vulnerabilit ...)
+ TODO: check
+CVE-2026-20356 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-20291 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-20236 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-20221 (Multiple Cisco products are affected by a vulnerability in the
generic ...)
+ TODO: check
+CVE-2026-20218 (A vulnerability in the Snort 3 Visual Basic for Applications
(VBA) Dec ...)
+ TODO: check
+CVE-2026-20197 (Multiple Cisco products are affected by a vulnerability in the
Snort 3 ...)
+ TODO: check
+CVE-2026-20179 (Multiple Cisco products are affected by a vulnerability in the
Snort 3 ...)
+ TODO: check
+CVE-2026-20043 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
+ TODO: check
+CVE-2026-20019 (Multiple Cisco products are affected by a vulnerability in the
Snort 3 ...)
+ TODO: check
+CVE-2026-20011 (Multiple Cisco products are affected by a vulnerability in the
Snort 3 ...)
+ TODO: check
+CVE-2026-19947 (The device multiplexer pseudo-driver in
drivers/misc/devmux/devmux.c e ...)
+ TODO: check
+CVE-2026-19676 (The user-mode verifier for the peci_transfer() system call,
z_vrfy_pec ...)
+ TODO: check
+CVE-2026-18748 (The Bluetooth Classic A2DP host stores a codec Information
Element (IE ...)
+ TODO: check
+CVE-2026-17557 (A flaw was found in the `lm-evaluation-harness` component of
Red Hat O ...)
+ TODO: check
+CVE-2026-16648 (Insertion of Sensitive Information into Log File vulnerability
in Drup ...)
+ TODO: check
+CVE-2026-16255 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
+ TODO: check
+CVE-2026-15723 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
+ TODO: check
+CVE-2026-14556 (The HappyForms WordPress plugin before 1.26.15 does not
sanitise or es ...)
+ TODO: check
+CVE-2026-14288 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
+ TODO: check
+CVE-2026-13319 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
+ TODO: check
+CVE-2026-12664 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
+ TODO: check
+CVE-2026-114732 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114731 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114730 (Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5
is affec ...)
+ TODO: check
+CVE-2026-114729 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114728 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114727 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes
potentia ...)
+ TODO: check
+CVE-2026-114726 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114725 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114724 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5
contains an obj ...)
+ TODO: check
+CVE-2026-114723 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows
the Imag ...)
+ TODO: check
+CVE-2026-114722 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114721 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows
the disa ...)
+ TODO: check
+CVE-2026-114720 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114719 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114718 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114717 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114716 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114715 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114714 (Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is
affected by ...)
+ TODO: check
+CVE-2026-114664 (Frappe Framework before 16.33.0 contains a blind SQL
injection vulnera ...)
+ TODO: check
+CVE-2026-114663 (Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable
constants and omi ...)
+ TODO: check
+CVE-2026-114662 (Obot before 0.26.0 contains an authentication bypass
vulnerability in ...)
+ TODO: check
+CVE-2026-114661 (OpenRemote 1.2.0 before 1.31.0 contains a missing
authorization vulner ...)
+ TODO: check
+CVE-2026-114660 (Grav from 2.0.0 before 2.2.5 contains an improper access
control vulne ...)
+ TODO: check
+CVE-2026-114659 (Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an
authorization ...)
+ TODO: check
+CVE-2026-114658 (Grav Login plugin from 3.6.0 before 3.9.13 contains a missing
authoriz ...)
+ TODO: check
+CVE-2026-114657 (Grav from 2.0.0 before 2.2.5 contains an information
disclosure vulner ...)
+ TODO: check
+CVE-2026-114656 (Traefik before 2.11.58 and 3.7.13 contains an authentication
bypass vu ...)
+ TODO: check
+CVE-2026-114642 (Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores
its NTLM/ ...)
+ TODO: check
+CVE-2026-114641 (Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains
a race co ...)
+ TODO: check
+CVE-2026-114640 (Traefik from v3.7.0 before v3.7.14 contains an authentication
bypass v ...)
+ TODO: check
+CVE-2026-114639 (Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14
contains an auth ...)
+ TODO: check
+CVE-2026-114638 (Traefik v3.7.0 before v3.7.14 contains an improper
authentication vuln ...)
+ TODO: check
+CVE-2026-114637 (Traefik from v3.2.0 before v3.7.14 contains an authentication
bypass v ...)
+ TODO: check
+CVE-2026-114636 (Traefik v3.7.13 before v3.7.14 contains an access-control
bypass in th ...)
+ TODO: check
+CVE-2026-114635 (Traefik before v2.11.58 and v3.7.14 contains an
authentication bypass ...)
+ TODO: check
+CVE-2026-114634 (WWBN AVideo before 29.4.0 contains a blind server-side
request forgery ...)
+ TODO: check
+CVE-2026-114633 (WWBN AVideo before 29.4.0 contains an incorrect authorization
vulnerab ...)
+ TODO: check
+CVE-2026-114577 (A vulnerability was found in oretnom23
php-travel-agency-system. This ...)
+ TODO: check
+CVE-2026-114576 (A vulnerability has been found in Linksys RE6250 1.0.04.001.
This affe ...)
+ TODO: check
+CVE-2026-114575 (A flaw has been found in TOTOLINK A950RG
4.1.2cu.5268_B20221104. Affec ...)
+ TODO: check
+CVE-2026-114574 (A security vulnerability has been detected in massCodeIO
massCode 5.10 ...)
+ TODO: check
+CVE-2026-114570 (WordPress Core is vulnerable to Stored Cross-Site Scripting
via Quick ...)
+ TODO: check
+CVE-2026-114509 (Laravel is a web application framework. Prior to 12.68.0 and
13.29.0, ...)
+ TODO: check
+CVE-2026-114508 (Laravel is a web application framework. From 12.45.0 until
12.68.0 and ...)
+ TODO: check
+CVE-2026-114501 (Pillow is a Python imaging library. From 11.2.1 until 13.0.0,
Arrow ex ...)
+ TODO: check
+CVE-2026-114493 (LocalAI v4.6.0 through v4.11.0 contains a server-side request
forgery ...)
+ TODO: check
+CVE-2026-114492 (gin-vue-admin through 2.9.2 contains a path traversal
vulnerability th ...)
+ TODO: check
+CVE-2026-114491 (pdfmake 0.3.8 before 0.3.12 fails to apply the
setLocalAccessPolicy() ...)
+ TODO: check
+CVE-2026-114490 (Incorrect authorization in the COM administration API of
Progressive R ...)
+ TODO: check
+CVE-2026-114489 (Missing authorization in the REST and COM administration APIs
of Progr ...)
+ TODO: check
+CVE-2026-114479 (Not failing securely in the anti-virus attachment-stripping
action of ...)
+ TODO: check
+CVE-2026-114478 (Insufficient preservation of the original sender in the
forwarding of ...)
+ TODO: check
+CVE-2026-114477 (Missing authorization in the REST metrics route of
Progressive Robot h ...)
+ TODO: check
+CVE-2026-114476 (Incorrect authorization in the REST administration API of
Progressive ...)
+ TODO: check
+CVE-2026-114475 (Missing authorization in the REST role-management routes of
Progressiv ...)
+ TODO: check
+CVE-2026-114474 (Use of a less trusted source for the envelope sender in the
external-a ...)
+ TODO: check
+CVE-2026-114473 (Incorrect authorization in the Sender Rewriting Scheme (SRS)
of Progre ...)
+ TODO: check
+CVE-2026-114472 (Insufficient resource pool in the ACME HTTP-01 challenge
responder of ...)
+ TODO: check
+CVE-2026-114471 (Insertion of sensitive information into a log file in the
SMTP server ...)
+ TODO: check
+CVE-2026-114470 (Cross-site request forgery in the REST API of Progressive
Robot hMailS ...)
+ TODO: check
+CVE-2026-114463 (The webhook platform gateway in Nous Research Hermes Agent
versions bu ...)
+ TODO: check
+CVE-2026-114462 (Improper link resolution before file access ('link
following') vulnera ...)
+ TODO: check
+CVE-2026-114460 (A flaw was found in mod_qos. An off-by-one pointer
calculation error o ...)
+ TODO: check
+CVE-2026-114459 (A flaw was found in mod_qos. When inspecting HTTP response
bodies, imp ...)
+ TODO: check
+CVE-2026-114458 (A flaw was found in mod_qos. An unauthenticated remote
attacker can ca ...)
+ TODO: check
+CVE-2026-114457 (A flaw was found in mod_qos. An unauthenticated remote
attacker could ...)
+ TODO: check
+CVE-2026-114441 (A weakness has been identified in oretnom23
php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-114440 (A vulnerability was identified in oretnom23
php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-114439 (A vulnerability was determined in oretnom23
php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-114438 (A flaw was found in the Update User Locale required action of
the Keyc ...)
+ TODO: check
+CVE-2026-114437 (In the Golang Chi web framework, the ClientIPFromXFF
middleware skips ...)
+ TODO: check
+CVE-2026-114407 (e107 CMS before 2.3.13 contains a reflected cross-site
scripting vulne ...)
+ TODO: check
+CVE-2026-114406 (The system certificate authority (CA) store in Red Hat
products, distr ...)
+ TODO: check
+CVE-2026-114405 (Improper validation of array index vulnerability in Velneo
vServer.Thi ...)
+ TODO: check
+CVE-2026-114404 (PHPOffice PHPPresentation 1.2.0 contains a cross-site
scripting vulner ...)
+ TODO: check
+CVE-2026-114403 (PHPOffice PHPPresentation through 1.2.0 contains an insecure
deseriali ...)
+ TODO: check
+CVE-2026-114402 (Trudesk through 1.2.11 contains a path traversal and
authorization byp ...)
+ TODO: check
+CVE-2026-114401 (Trudesk through 1.2.11 contains a regular expression
injection vulnera ...)
+ TODO: check
+CVE-2026-114400 (Trudesk through 1.2.11 contains a missing authentication
vulnerability ...)
+ TODO: check
+CVE-2026-114399 (Trudesk through 1.2.11 contains a path traversal
vulnerability that al ...)
+ TODO: check
+CVE-2026-114398 (Trudesk through 1.2.11 contains an unrestricted file upload
vulnerabil ...)
+ TODO: check
+CVE-2026-114397 (Trudesk through 1.2.11 contains a missing authentication
vulnerability ...)
+ TODO: check
+CVE-2026-114396 (Trudesk through 1.2.11 contains a server-side JavaScript
injection vul ...)
+ TODO: check
+CVE-2026-114395 (Trudesk through 1.2.11 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-114394 (Trudesk through 1.2.11 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-114393 (Trudesk through 1.2.11 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-114392 (Trudesk through 1.2.11 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-114391 (ZenTao PMS before 22.3 contains an authorization bypass
vulnerability ...)
+ TODO: check
+CVE-2026-114390 (Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a
missing au ...)
+ TODO: check
+CVE-2026-114389 (Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a
missing au ...)
+ TODO: check
+CVE-2026-114388 (Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before
2.0.0-RC.3 co ...)
+ TODO: check
+CVE-2026-114387 (Shopper from 2.0.0 before 2.6.0 contains a missing
authorization vulne ...)
+ TODO: check
+CVE-2026-114386 (Pydantic AI Harness before 0.59.0 fails to enforce
UsageLimits.tool_ca ...)
+ TODO: check
+CVE-2026-114384 (A security vulnerability has been detected in itsourcecode
Online Cake ...)
+ TODO: check
+CVE-2026-114383 (A weakness has been identified in TOTOLINK EX200 5.2.3c.7200.
This imp ...)
+ TODO: check
+CVE-2026-114382 (A security flaw has been discovered in TOTOLINK EX200
5.2.3c.7200. Thi ...)
+ TODO: check
+CVE-2026-114381 (A vulnerability was determined in itsourcecode Online Cake
Ordering Sy ...)
+ TODO: check
+CVE-2026-114380 (A vulnerability was found in itsourcecode Online Cake
Ordering System ...)
+ TODO: check
+CVE-2026-114379 (A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6.
This vul ...)
+ TODO: check
+CVE-2026-114378 (A vulnerability was detected in itsourcecode Online Cake
Ordering Syst ...)
+ TODO: check
+CVE-2026-114377 (A security vulnerability has been detected in leomoon-studios
wiki-go ...)
+ TODO: check
+CVE-2026-114376 (A weakness has been identified in leomoon-studios wiki-go up
to 1.9.1. ...)
+ TODO: check
+CVE-2026-114375 (A security flaw has been discovered in leomoon-studios
wiki-go up to 1 ...)
+ TODO: check
+CVE-2026-114374 (A vulnerability was identified in leomoon-studios wiki-go up
to 1.9.1. ...)
+ TODO: check
+CVE-2026-114370 (A flaw was found in the PathResourceManager component of the
Undertow ...)
+ TODO: check
+CVE-2026-114362 (A flaw has been found in HarnessRouter up to 0.31.12. This
impacts an ...)
+ TODO: check
+CVE-2026-114361 (A vulnerability was detected in HarnessRouter up to 0.31.10.
This affe ...)
+ TODO: check
+CVE-2026-114268 (A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected
by this ...)
+ TODO: check
+CVE-2026-114267 (A vulnerability was detected in SourceCodester Food Order
Management S ...)
+ TODO: check
+CVE-2026-114266 (A security vulnerability has been detected in ProjectWorlds
Advanced L ...)
+ TODO: check
+CVE-2026-114265 (A weakness has been identified in ProjectWorlds Advanced
Library Manag ...)
+ TODO: check
+CVE-2026-114264 (A security flaw has been discovered in ProjectWorlds Advanced
Library ...)
+ TODO: check
+CVE-2026-114263 (A vulnerability was identified in ProjectWorlds Advanced
Library Manag ...)
+ TODO: check
+CVE-2026-114262 (A vulnerability was determined in file-management-system
dc9ce1bf27f94 ...)
+ TODO: check
+CVE-2026-114261 (A vulnerability was found in MomoTommy file-management-system
dc9ce1bf ...)
+ TODO: check
+CVE-2026-114260 (A vulnerability has been found in oretnom23
file-management-system-php ...)
+ TODO: check
+CVE-2026-114259 (A flaw has been found in oretnom23 file-management-system-php
up to 2e ...)
+ TODO: check
+CVE-2026-114258 (A vulnerability was detected in oretnom23
file-management-system-php u ...)
+ TODO: check
+CVE-2026-114257 (A security vulnerability has been detected in oretnom23
file-managemen ...)
+ TODO: check
+CVE-2026-114256 (A weakness has been identified in oretnom23
file-management-system-php ...)
+ TODO: check
+CVE-2026-114255 (A security flaw has been discovered in oretnom23
file-management-syste ...)
+ TODO: check
+CVE-2026-114254 (A vulnerability was identified in oretnom23
file-management-system-php ...)
+ TODO: check
+CVE-2026-114253 (A vulnerability was determined in oretnom23
file-management-system-php ...)
+ TODO: check
+CVE-2026-114252 (A vulnerability was found in itsourcecode
Sales-and-Inventory-System u ...)
+ TODO: check
+CVE-2026-114251 (A vulnerability has been found in itsourcecode
Sales-and-Inventory-Sys ...)
+ TODO: check
+CVE-2026-114250 (A flaw has been found in itsourcecode
Sales-and-Inventory-System up to ...)
+ TODO: check
+CVE-2026-114249 (A vulnerability was detected in dhikshitha29
Insurance-Management-Syst ...)
+ TODO: check
+CVE-2026-114248 (A security vulnerability has been detected in dhikshitha29
Insurance-M ...)
+ TODO: check
+CVE-2026-114245 (A weakness has been identified in dhikshitha29
Insurance-Management-Sy ...)
+ TODO: check
+CVE-2026-114243 (A security flaw has been discovered in dhikshitha29
Insurance-Manageme ...)
+ TODO: check
+CVE-2026-114242 (A vulnerability was identified in dhikshitha29
Insurance-Management-Sy ...)
+ TODO: check
+CVE-2026-114236 (storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer
may, when pr ...)
+ TODO: check
+CVE-2026-114223 (NT OneAPP developed by NewType Infortech has an Exposure of
Sensitive ...)
+ TODO: check
+CVE-2026-114222 (NT OneAPP developed by NewType Infortech has an
Authentication Bypass ...)
+ TODO: check
+CVE-2026-114221 (NT OneAPP developed by NewType Infortech has a Credential
Disclosure v ...)
+ TODO: check
+CVE-2026-114220 (NT OneAPP developed by NewType Infortech has an Improper
Certificate V ...)
+ TODO: check
+CVE-2026-114219 (NT OneAPP developed by NewType Infortech has a Hard-coded
Credentials ...)
+ TODO: check
+CVE-2026-114184 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-114182 (Missing Authorization vulnerability in IdeaBox Creations
PowerPack Add ...)
+ TODO: check
+CVE-2026-114180 (Missing Authorization vulnerability in Wpmet Metform metform
allows Ex ...)
+ TODO: check
+CVE-2026-114177 (Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro
Elementor ...)
+ TODO: check
+CVE-2026-114176 (Missing Authorization vulnerability in DigitalME eRoom
eroom-zoom-meet ...)
+ TODO: check
+CVE-2026-114175 (Missing Authorization vulnerability in DigitalME eRoom
eroom-zoom-meet ...)
+ TODO: check
+CVE-2026-114145 (GitPython is a python library used to interact with Git
repositories. ...)
+ TODO: check
+CVE-2026-114144 (toml-node is a TOML parser for Node.js and the browser. Prior
to 5.0.1 ...)
+ TODO: check
+CVE-2026-114143 (toml-node is a TOML parser for Node.js and the browser. Prior
to 5.0.1 ...)
+ TODO: check
+CVE-2026-114142 (toml-node is a TOML parser for Node.js and the browser. Prior
to 5.0.1 ...)
+ TODO: check
+CVE-2026-114141 (toml-node is a TOML parser for Node.js and the browser. Prior
to 5.0.1 ...)
+ TODO: check
+CVE-2026-114140 (The nbconvert tool, jupyter nbconvert, converts Jupyter
notebooks to v ...)
+ TODO: check
+CVE-2026-114139 (Sentry-Javascript is an official Sentry SDKs for JavaScript.
From 9.36 ...)
+ TODO: check
+CVE-2026-114138 (Django REST framework is a toolkit for building Web APIs.
Prior to 3.1 ...)
+ TODO: check
+CVE-2026-114137 (Django REST framework is a toolkit for building Web APIs.
From 3.12.0 ...)
+ TODO: check
+CVE-2026-114136 (Django REST framework is a toolkit for building Web APIs.
From 3.6.4 u ...)
+ TODO: check
+CVE-2026-114135 (Jupyter Server is the backend for Jupyter web applications.
From 2.0.0 ...)
+ TODO: check
+CVE-2026-114133 (Nuxt is an open-source web development framework for Vue.js.
From 3.13 ...)
+ TODO: check
+CVE-2026-114132 (Nuxt is an open-source web development framework for Vue.js.
Prior to ...)
+ TODO: check
+CVE-2026-114131 (Nuxt is an open-source web development framework for Vue.js.
From 3.11 ...)
+ TODO: check
+CVE-2026-114130 (Nuxt is an open-source web development framework for Vue.js.
Prior to ...)
+ TODO: check
+CVE-2026-114129 (stream-json is a micro-library of stream components for
processing JSO ...)
+ TODO: check
+CVE-2026-114128 (Astro is a web framework for content-driven websites. Prior
to 7.3.2, ...)
+ TODO: check
+CVE-2026-114127 (Astro is a web framework for content-driven websites. From
7.1.0 until ...)
+ TODO: check
+CVE-2026-114126 (Storybook is a frontend workshop for building user interface
component ...)
+ TODO: check
+CVE-2026-114125 (Storybook is a frontend workshop for building user interface
component ...)
+ TODO: check
+CVE-2026-114124 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-114123 (D365 F&O MCP Server is a Model Context Protocol server for
querying Dy ...)
+ TODO: check
+CVE-2026-114122 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-114121 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-114120 (SchedulePress before 5.3.5 contains a missing authorization
vulnerabil ...)
+ TODO: check
+CVE-2026-113870 (MongoDB Compass improperly escapes certain BSON values when
converting ...)
+ TODO: check
+CVE-2026-113800 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-113799 (Slack Morphism is a client library for Slack Web/Events
API/Socket Mod ...)
+ TODO: check
+CVE-2026-113798 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-113797 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-113796 (Electron is a framework for writing cross-platform desktop
application ...)
+ TODO: check
+CVE-2026-113795 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.20 ...)
+ TODO: check
+CVE-2026-113794 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.20 ...)
+ TODO: check
+CVE-2026-113793 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.20 ...)
+ TODO: check
+CVE-2026-113792 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.20 ...)
+ TODO: check
+CVE-2026-113791 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.21 ...)
+ TODO: check
+CVE-2026-113790 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.21 ...)
+ TODO: check
+CVE-2026-113789 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.21 ...)
+ TODO: check
+CVE-2026-113788 (Lagoon is an application delivery platform for Kubernetes.
Versions pr ...)
+ TODO: check
+CVE-2026-113787 (odf-kit allows users to generate, fill, read, and convert
OpenDocument ...)
+ TODO: check
+CVE-2026-113786 (pypdf is a free and open-source pure-python PDF library.
Prior to 6.21 ...)
+ TODO: check
+CVE-2026-113779 (The pfSense REST API package is an unofficial, open-source
REST and Gr ...)
+ TODO: check
+CVE-2026-113461 (Local privilege escalation in Checkmk 2.5.0p14 allows a local
user wit ...)
+ TODO: check
+CVE-2026-112868 (Authorization Bypass Through User-Controlled Key
vulnerability in H5P ...)
+ TODO: check
+CVE-2026-112867 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-112843 (Missing Authorization vulnerability in WP Chill Strong
Testimonials st ...)
+ TODO: check
+CVE-2026-112826 (Missing Authorization vulnerability in eLightUp Falcon \u2013
WordPres ...)
+ TODO: check
+CVE-2026-112408 (Missing verification of source of a communication channel in
the defau ...)
+ TODO: check
+CVE-2026-112378 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
+ TODO: check
+CVE-2026-112326 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
+ TODO: check
+CVE-2026-112221 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-112212 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
+ TODO: check
+CVE-2026-111972 (The Photo Engine (Media Organizer & Lightroom) WordPress
plugin before ...)
+ TODO: check
+CVE-2026-111971 (The Photo Engine (Media Organizer & Lightroom) WordPress
plugin before ...)
+ TODO: check
+CVE-2026-111958 (The Royal MCP WordPress plugin before 1.5.7 does not limit a
preview- ...)
+ TODO: check
+CVE-2026-111852 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
+ TODO: check
+CVE-2026-111849 (Missing Authorization vulnerability in Magepeople inc.
WpTravelly tour ...)
+ TODO: check
+CVE-2026-111848 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111847 (Missing Authorization vulnerability in Kings Plugins
MarketKing market ...)
+ TODO: check
+CVE-2026-111840 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111838 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111837 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-111835 (Missing Authorization vulnerability in bjorntech BjornTech
Swish for W ...)
+ TODO: check
+CVE-2026-111834 (Unrestricted Upload of File with Dangerous Type vulnerability
in Kitae ...)
+ TODO: check
+CVE-2026-111833 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-111832 (Unrestricted Upload of File with Dangerous Type vulnerability
in WP Ma ...)
+ TODO: check
+CVE-2026-111401 (Cross-Site Request Forgery (CSRF) vulnerability in Tailored
Media Tail ...)
+ TODO: check
+CVE-2026-111184 (NoMachine Named Pipe Incorrect Permission Assignment Local
Privilege E ...)
+ TODO: check
+CVE-2026-111183 (GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code
Execution ...)
+ TODO: check
+CVE-2026-111075 (In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer
component fa ...)
+ TODO: check
+CVE-2026-111074 (In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer
component is ...)
+ TODO: check
+CVE-2026-110938 (In Eclipse OpenJ9 versions up to 0.63.0, the JITServer
component is vu ...)
+ TODO: check
+CVE-2026-110899 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-110884 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-110803 (VaadinService.requestEnd() in Vaadin Framework 8 locks the
session and ...)
+ TODO: check
+CVE-2026-110744 (A flaw was found in multicluster-global-hub-operator-bundle.
The opera ...)
+ TODO: check
+CVE-2026-110370 (Deserialization of Untrusted Data vulnerability in GS Plugins
GS Pins ...)
+ TODO: check
+CVE-2026-110369 (Deserialization of Untrusted Data vulnerability in GS Plugins
WordPres ...)
+ TODO: check
+CVE-2026-110354 (HAProxy 3 before 3.4.6 allows a remote unauthenticated
attacker to cau ...)
+ TODO: check
+CVE-2026-110353 (HAProxy 3.2 before 3.4.6 allows a remote unauthenticated
attacker to c ...)
+ TODO: check
+CVE-2026-110264 (An issue has been discovered in GitLab CE/EE affecting all
versions fr ...)
+ TODO: check
+CVE-2026-110011 (The MB Custom Post Types & Custom Taxonomies WordPress plugin
before 2 ...)
+ TODO: check
+CVE-2026-110010 (The MB Custom Post Types & Custom Taxonomies WordPress plugin
before 2 ...)
+ TODO: check
+CVE-2026-109987 (The PixelYourSite WordPress plugin before 11.4.3,
PixelYourSite Pro W ...)
+ TODO: check
+CVE-2026-109931 (The Infility Global WordPress plugin before 2.16.25 does not
perform a ...)
+ TODO: check
+CVE-2026-109927 (The HIPAA Forms WordPress plugin before 3.3.2 does not
perform a capab ...)
+ TODO: check
+CVE-2026-107588 (Vaadin Charts renders charts with the Highcharts library and
pins an e ...)
+ TODO: check
+CVE-2026-107447 (The Contest Gallery WordPress plugin before 34.0.1 does not
reliably v ...)
+ TODO: check
+CVE-2026-107435 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-106053
+ REJECTED
+CVE-2026-105945 (The Pulsar Packages Management Service can be configured to
store pack ...)
+ TODO: check
+CVE-2026-105944 (Apache Pulsar Manager is a web console for administering
Apache Pulsar ...)
+ TODO: check
+CVE-2026-105942 (When a configured proxy role sends a request to the broker on
behalf o ...)
+ TODO: check
+CVE-2026-105938 (Apache Pulsar namespaces can restrict which roles may use a
subscripti ...)
+ TODO: check
+CVE-2026-105937 (Apache Pulsar shadow topics (PIP-180) are topics that read
the stored ...)
+ TODO: check
+CVE-2026-105936 (The Pulsar Functions worker REST API provides two endpoints
that retur ...)
+ TODO: check
+CVE-2026-105935 (The Pulsar Functions Worker provides a REST API endpoint for
triggerin ...)
+ TODO: check
+CVE-2026-105934 (The Apache Pulsar broker admin REST API provides a truncate
operation ...)
+ TODO: check
+CVE-2026-105933 (Apache Pulsar allows an administrator to require end-to-end
message en ...)
+ TODO: check
+CVE-2026-105932 (The Apache Pulsar broker admin REST API provides endpoints to
read, se ...)
+ TODO: check
+CVE-2026-105931 (The Apache Pulsar broker exposes a transaction administration
REST API ...)
+ TODO: check
+CVE-2026-105930 (When package management is enabled, Pulsar Functions, Sources
and Sink ...)
+ TODO: check
+CVE-2026-105927 (The Apache Pulsar WebSocket service allows a WebSocket
consumer to con ...)
+ TODO: check
+CVE-2026-105926 (The Pulsar broker serves two schema commands on its binary
protocol: G ...)
+ TODO: check
+CVE-2026-105923 (A malicious SVG can trigger an integer overflow which in turn
triggers ...)
+ TODO: check
+CVE-2026-105869 (Apache Pulsar's MultiRolesTokenAuthorizationProvider
authorizes a clie ...)
+ TODO: check
+CVE-2026-105777 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
+ TODO: check
+CVE-2026-105711 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
+ TODO: check
+CVE-2026-105270 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
+ TODO: check
+CVE-2026-105256 (The LatePoint WordPress plugin before 5.7.5 does not validate
the clie ...)
+ TODO: check
+CVE-2026-104949 (WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through
7.6.0 are a ...)
+ TODO: check
+CVE-2026-104948 (WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through
7.6.0 are a ...)
+ TODO: check
+CVE-2026-104947 (WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a
missing author ...)
+ TODO: check
+CVE-2026-104642 (The Simple Shopping Cart WordPress plugin before 5.3.3 does
not verify ...)
+ TODO: check
+CVE-2026-104641 (The Simple Shopping Cart WordPress plugin before 5.3.3 does
not verify ...)
+ TODO: check
+CVE-2026-103634 (Out-of-bounds read and write in the Count-Min sketch
deserialization o ...)
+ TODO: check
+CVE-2026-103515 (GitLab has remediated an issue in GitLab EE affecting all
versions fro ...)
+ TODO: check
+CVE-2026-103301 (The Payment Gateway for Telcell WordPress plugin before 2.0.5
does not ...)
+ TODO: check
+CVE-2026-103234 (The WP Ultimate Review WordPress plugin before 2.4.5 does not
neutrali ...)
+ TODO: check
+CVE-2026-103090 (Missing Authentication for Critical Function (CWE-306) and
Insufficien ...)
+ TODO: check
+CVE-2026-102536
+ REJECTED
+CVE-2026-101138 (The CMP \u2013 Coming Soon & Maintenance WordPress plugin
before 4.1.2 ...)
+ TODO: check
+CVE-2026-100420 (A sensitive information disclosure vulnerability in the
cloud-client d ...)
+ TODO: check
+CVE-2026-100142 (The FluentCart A New Era of eCommerce WordPress plugin
before 2.2.0 d ...)
+ TODO: check
+CVE-2025-71438 (An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1
(/odf/descriptors.c) in ...)
+ TODO: check
+CVE-2025-60497 (A segmentation violation in the GetESD function
(/isomedia/track.c) of ...)
+ TODO: check
+CVE-2025-60493 (A segmentation violation in the check_media_profile function
(/mp4box/ ...)
+ TODO: check
+CVE-2025-60492 (A stack overflow in the gf_bifs_dec_node function
(/bifs/field_decode. ...)
+ TODO: check
+CVE-2025-60491 (A heap use-after-free in the dasher_flush_segment function
(/filters/d ...)
+ TODO: check
+CVE-2025-60490 (A heap use-after-free in the
gf_filter_pid_send_event_downstream funct ...)
+ TODO: check
+CVE-2025-60489 (A NULL pointer dereference in the dasher_insert_timeline_entry
functio ...)
+ TODO: check
+CVE-2025-60487 (A segmentation violation in the gf_isom_get_esd function
(/isomedia/is ...)
+ TODO: check
+CVE-2025-60479 (A NULL pointer dereference in the StatSFVec2f function
(/scene_manager ...)
+ TODO: check
+CVE-2025-60478 (A use-after-free in the gf_filter_packet_destroy function
(/filter_cor ...)
+ TODO: check
+CVE-2025-60476 (A heap use-after-free in the gf_odf_ac4_cfg_clean_list
function (/odf/ ...)
+ TODO: check
+CVE-2025-60469 (A NULL pointer dereference in the gf_ac4_presentation_ch_mode
function ...)
+ TODO: check
+CVE-2025-0326 (The system fails to invalidate existing access tokens
associated with ...)
+ TODO: check
+CVE-2024-7478 (When a WSO2 product is configured to use an external user
store, the s ...)
+ TODO: check
+CVE-2024-6423 (The product failed to enforce validation constraints on
user-supplied ...)
+ TODO: check
+CVE-2024-5563 (Due to an incomplete implementation, reCaptcha is not applied
to certa ...)
+ TODO: check
+CVE-2024-5139 (The Authentication Endpoint accepts user-supplied input without
suffic ...)
+ TODO: check
+CVE-2024-4989 (The callback URL parameter in WSO2 API Manager fails to
validate user- ...)
+ TODO: check
+CVE-2026-102486 (Out-of-bounds read in NTS extension field parsing in NTPsec
ntpd 1.1.4 ...)
- ntpsec <unfixed>
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
-CVE-2026-102485
+CVE-2026-102485 (Out-of-bounds read in the Motorola Oncore refclock driver in
NTPsec nt ...)
- ntpsec <unfixed>
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
-CVE-2026-102484
+CVE-2026-102484 (Heap-based buffer overflow in the JJY refclock driver in
NTPsec ntpd b ...)
- ntpsec <unfixed>
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
-CVE-2026-102483
+CVE-2026-102483 (Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a
remote atta ...)
- ntpsec <unfixed>
NOTE: https://blog.ntpsec.org/2026/10/20/version-1.2.6.html
CVE-2026-105482
@@ -40,58 +1064,58 @@ CVE-2026-106071
CVE-2026-106073
- nodejs <unfixed>
NOTE:
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#permission-model-bypass-with-fsrealpathsync-cve-2026-106073---low
-CVE-2026-112921
+CVE-2026-112921 (Robots::Validate versions from 0.4.3 before 0.4.10 for Perl
report cli ...)
NOT-FOR-US: Robots::Validate Perl module
-CVE-2026-94423
+CVE-2026-94423 (Net::LibSSH versions before 0.004 for Perl authenticate to an
unverifi ...)
NOT-FOR-US: Net::LibSSH Perl module
-CVE-2026-94140
+CVE-2026-94140 (Rex versions through 1.16.1 for Perl accept an unknown SSH
host key fo ...)
- rex <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44533736/
-CVE-2026-113811
+CVE-2026-113811 (Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for
Perl all ...)
NOT-FOR-US: Algorithm::UrataniTakeda Perl module
-CVE-2026-111814
+CVE-2026-111814 (Apache Traffic Server's default outbound session-sharing
policy can re ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111813
+CVE-2026-111813 (Apache Traffic Server's experimental magick plugin lets an
unauthentic ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111804
+CVE-2026-111804 (Apache Traffic Server's experimental wasm plugin has a
use-after-free ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111815
+CVE-2026-111815 (Apache Traffic Server can resume a TLS session across SNI
virtual host ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111816
+CVE-2026-111816 (Apache Traffic Server forwarded a malformed 302 response that
should h ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2025-31699
+CVE-2025-31699 (Apache Traffic Server can return an origin connection to the
shared po ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2025-55702
+CVE-2025-55702 (When a client sends a POST with Expect: 100-continue and the
origin an ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111805
+CVE-2026-111805 (Apache Traffic Server can be used to exhaust an HTTP/1.1
origin's work ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111808
+CVE-2026-111808 (Apache Traffic Server can be used to exhaust an HTTP/1.1
origin's work ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111810
+CVE-2026-111810 (Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one
unthrottled ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111812
+CVE-2026-111812 (Apache Traffic Server's origin_server_auth plugin lets a
client force ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111809
+CVE-2026-111809 (Apache Traffic Server allows request smuggling via HEAD
requests that ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111811
+CVE-2026-111811 (Apache Traffic Server's experimental tsmemcache plugin allows
unauthen ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-112381
+CVE-2026-112381 (Apache Traffic Server can crash with a null pointer
dereference when a ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
-CVE-2026-111817
+CVE-2026-111817 (Apache Traffic Server can stall a chunked transfer that it
passes thro ...)
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
CVE-2026-73206 [A crafted DNS packet can cause a denial of service
decompressing the DNS names in the packet]
@@ -116,48 +1140,54 @@ CVE-2026-85558 [Recursor retains closed TCP client
addresses until process exit]
CVE-2026-85559 [Out-of-bounds read in Recursor findScopeZero]
- pdns-recursor 5.4.8-1
NOTE:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-12.html#cve-2026-85559-out-of-bounds-read-in-recursor-findscopezero
-CVE-2026-97206 [DoQ path-migration can lead to use-after-free on
multi-threaded deployments]
+CVE-2026-97206 (NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1,
contain ...)
- unbound 1.26.2-1
NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
-CVE-2026-50106 [Possible insecure NXDOMAIN for non-existing records under a
configured island trust anchor underneath an insecure parent]
+CVE-2026-50106 (When NLnet Labs Unbound up to and including version 1.26.1 is
configur ...)
- unbound 1.26.2-1
NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
-CVE-2026-96405 [Aggregate DNS name chained pointer decompression work leads to
degradation of service]
+CVE-2026-96405 (NLnet Labs Unbound up to and including version 1.26.1 limits
compressi ...)
- unbound 1.26.2-1
NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
-CVE-2026-109125 [Possible cache poisoning vulnerability via a cache
side-channel exposed y 'unwanted-reply-threshold']
+CVE-2026-109125 (In NLnet Labs Unbound up to and including version 1.26.1, an
observabl ...)
- unbound 1.26.2-1
NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
-CVE-2026-35501 [Bypass of a configured island trust anchor underneath an
insecure parent from an atacker-controlled NSEC record.]
+CVE-2026-35501 (When NLnet Labs Unbound 1.0.1 up to and including version
1.26.1 is co ...)
- unbound 1.26.2-1
NOTE: https://community.nlnetlabs.nl/t/unbound-1-26-2-released/3495
-CVE-2026-19630 [Amplified resource exhaustion in inbound message processing]
+CVE-2026-19630 (In a BIND resolver, inbound DNS protocol messages with a
particular st ...)
+ {DSA-6576-1}
- bind9 <unfixed>
NOTE: https://kb.isc.org/docs/cve-2026-19630
-CVE-2026-94300 [Concurrent GSS-TSIG messages corrupt memory]
+CVE-2026-94300 (Replaying GSS-TSIG signed UDP messages can result in memory
corruption ...)
+ {DSA-6576-1}
- bind9 <unfixed>
NOTE: https://kb.isc.org/docs/cve-2026-94300
-CVE-2026-96888 [named may terminate unexpectedly when a redirect zone is used
with strict QNAME minimization]
+CVE-2026-96888 (A BIND resolver that is configured with both a "redirect" zone
and "qn ...)
+ {DSA-6576-1}
- bind9 <unfixed>
NOTE: https://kb.isc.org/docs/cve-2026-96888
-CVE-2026-97313 [Specific RPZ configurations and query patterns may result in
an unexpected exit]
+CVE-2026-97313 (A recursive BIND server that receives a query with recursion
desired ( ...)
+ {DSA-6576-1}
- bind9 <unfixed>
NOTE: https://kb.isc.org/docs/cve-2026-97313
-CVE-2023-7356 [Bluetooth: ISO: Copy BASE if service data matches
EIR_BAA_SERVICE_UUID]
+CVE-2023-7356 (In the Linux kernel, the following vulnerability has been
resolved: B ...)
- linux 6.7.7-1
[bookworm] - linux 6.1.180-1
NOTE:
https://git.kernel.org/linus/f4da3ee15de9944482382181329bb6d7335ca003 (6.7-rc1)
-CVE-2026-98869 [bpf: Infer zext_dst based on static register liveness analysis]
+CVE-2026-98869 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
- linux <unfixed>
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/7ce090afbf725e25fff29caacce1eaf8459b1117 (7.3-rc1)
-CVE-2026-109619
+CVE-2026-109619 (PHP has various global state that temporarily points into
request memo ...)
+ {DSA-6574-1 DLA-4848-1}
- php8.4 8.4.27-1 (bug #1151516)
- php8.2 <removed>
NOTE:
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
NOTE: https://www.php2shell.com/
-CVE-2026-109618
+CVE-2026-109618 (PHP uses longjmp() for out-of-memory (OOM) errors to exit the
current ...)
+ {DSA-6574-1 DLA-4848-1}
- php8.4 8.4.27-1 (bug #1151516)
- php8.2 <removed>
NOTE:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
@@ -3935,7 +4965,8 @@ CVE-2026-113672 (Argo CD is a declarative, GitOps
continuous delivery tool for K
NOT-FOR-US: Argo CD
CVE-2026-113671 (ApostropheCMS is an open-source Node.js content management
system. Fro ...)
NOT-FOR-US: ApostropheCMS
-CVE-2026-113670 (ApostropheCMS is an open-source Node.js content management
system. Pri ...)
+CVE-2026-113670
+ REJECTED
NOT-FOR-US: ApostropheCMS
CVE-2026-113669 (ApostropheCMS is an open-source Node.js content management
system. Pri ...)
NOT-FOR-US: ApostropheCMS
@@ -4357,7 +5388,8 @@ CVE-2026-113401 (Denial-of-service in the PDF Viewer
component. This vulnerabili
CVE-2026-113400 (Uninitialized memory in the Audio/Video: cubeb component.
This vulnera ...)
- firefox 158.0.1-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/#CVE-2026-113400
-CVE-2026-113470 (Mozilla blocked compromised intermediate eMudhra certificates
via OneC ...)
+CVE-2026-113470 (Cryptographic issue in the Security Block-lists, Allow-lists,
and othe ...)
+ {DSA-6573-1 DLA-4847-1}
- firefox 158.0.1-1
- firefox-esr 153.5.1esr-1
- thunderbird <unfixed>
@@ -10824,6 +11856,7 @@ CVE-2026-XXXX [BUG/MAJOR: h1-htx: report an error on a
too long chunk-size line]
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=fd0864b83920851eeaaa0dd934bfebc82ba6ca27
(v3.0.30)
NOTE: Fixed by:
https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=68609955873ff845220b7a7cf22147d3617a0b42
(v2.6.35)
CVE-2026-97629 (Description When NGINX Plus or NGINX Open Source is configured
withssl ...)
+ {DSA-6575-1}
- nginx 1.30.4-8
NOTE: https://my.f5.com/manage/s/article/K000162606
CVE-2026-97315 (The Responsive Blocks WordPress plugin before 2.3.0 does not
sanitise ...)
@@ -10831,6 +11864,7 @@ CVE-2026-97315 (The Responsive Blocks WordPress plugin
before 2.3.0 does not san
CVE-2026-97278 (Deserialization of Untrusted Data vulnerability in WP SYNTEX
Polylang ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-97205 (NGINX Plus and NGINX Open Source have a vulnerability in the
ngx_http_ ...)
+ {DSA-6575-1}
- nginx 1.30.4-8
NOTE: https://my.f5.com/manage/s/article/K000162608
CVE-2026-96615 (Description NGINX Gateway Fabric has a vulnerability when it
is config ...)
@@ -10854,6 +11888,7 @@ CVE-2026-96596 (Loop with Unreachable Exit Condition
('Infinite Loop') vulnerabi
NOTE: Introduced with:
https://github.com/hexpm/hex/commit/5543a1919c709d8eb2b317f62aad76ca1eed375c
(v2.4.2)
NOTE: Fixed by:
https://github.com/hexpm/hex/commit/8e1067131a13949eff30623f31648a945ffd5418
(v2.5.3)
CVE-2026-95101 (Description NGINX Plus and NGINX Open Source have a
vulnerability in t ...)
+ {DSA-6575-1}
- nginx 1.30.4-8
NOTE: https://my.f5.com/manage/s/article/K000162613
CVE-2026-94348 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0,
contains an I ...)
@@ -10878,6 +11913,7 @@ CVE-2026-93637 (An authentication rate-limit bypass in
Zimbra Collaboration Suit
CVE-2026-93635 (LDAP filter injection in Zimbra Collaboration Suite 10.1.0
through 10. ...)
NOT-FOR-US: Zimbra
CVE-2026-93479 (A vulnerability exists in NGINX Plus and NGINX Open Source
when a map ...)
+ {DSA-6575-1}
- nginx 1.30.4-8
NOTE: https://my.f5.com/manage/s/article/K000162607
CVE-2026-92160 (F\xb4 (F Prime) is a framework that enables development and
deployment ...)
@@ -11210,6 +12246,7 @@ CVE-2026-16741 (Improper neutralization of special
elements used in an OS comman
CVE-2026-16740 (Missing authentication for critical function vulnerability in
TR7 Cybe ...)
NOT-FOR-US: TR7 ASP
CVE-2026-15176 (A vulnerability exists in NGINX Plus and NGINX Open Source
when a loca ...)
+ {DSA-6575-1}
- nginx 1.30.4-8
NOTE: https://my.f5.com/manage/s/article/K000162416
CVE-2026-15102 (ADP Desktop SDK contains a vulnerability where sensitive
information i ...)
@@ -27701,7 +28738,8 @@ CVE-2026-105306 (A flaw was found in the Dynamic Client
Registration flow of the
- keycloak <itp> (bug #1088287)
CVE-2026-105302 (A flaw was found in the User Session Note mapper of the
Keycloak ident ...)
- keycloak <itp> (bug #1088287)
-CVE-2026-105301 (A flaw was found in the X.509 client-certificate
authenticator of Keyc ...)
+CVE-2026-105301
+ REJECTED
- keycloak <itp> (bug #1088287)
CVE-2026-105295 (GitAhead 2.5.0 through 2.7.1 contains an insecure update
mechanism tha ...)
NOT-FOR-US: GitAhead
@@ -33987,12 +35025,12 @@ CVE-2026-102635 (ImageMagick versions before 7.1.2-32
and 6.9.13-57 contain unin
CVE-2026-102634 (SGLang through 0.5.20 in prefill/decode disaggregation mode
fails to v ...)
NOT-FOR-US: SGLang
CVE-2026-77214 (libexpat before commit 13c5f63 contains a heap buffer
over-read vulner ...)
- {DSA-6566-1}
+ {DSA-6566-1 DLA-4849-1}
- expat 2.9.0-1 (bug #1150320)
NOTE: https://github.com/libexpat/libexpat/pull/1393
NOTE: Fixed by:
https://github.com/libexpat/libexpat/commit/4d9b1c499ecb66323260a7274edcf86c5eab0517
(R_2_9_0)
CVE-2026-102633 (libexpat versions 2.7.2 through 2.8.5 contain an integer
overflow vuln ...)
- {DSA-6566-1}
+ {DSA-6566-1 DLA-4849-1}
- expat 2.8.5-2 (bug #1149507)
NOTE: https://github.com/libexpat/libexpat/pull/1392
NOTE: Fixed by:
https://github.com/libexpat/libexpat/commit/69edbec09f2cd3e0bd6e0a093b55ea38af902d7d
(R_2_9_0)
@@ -35831,23 +36869,23 @@ CVE-2026-109240 (FreeRDP 3.11.0 before 3.32.1
contains a reachable assertion vul
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9qqc-m43j-g4r2
-CVE-2026-114045 [GHSA-3m9q-g533-rqjq]
+CVE-2026-114045 (FreeRDP before 3.32.1 contains a heap-based buffer overflow
in the ser ...)
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3m9q-g533-rqjq
-CVE-2026-114044 [GHSA-262p-h989-vmpv]
+CVE-2026-114044 (FreeRDP before 3.32.1 contains a heap out-of-bounds read
vulnerability ...)
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-262p-h989-vmpv
-CVE-2026-114042 [GHSA-5xjc-c64q-m8r6]
+CVE-2026-114042 (FreeRDP 3.32.0 contains a use-after-free vulnerability in the
drdynvc ...)
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5xjc-c64q-m8r6
-CVE-2026-114043 [GHSA-f3vg-h45x-6wgf]
+CVE-2026-114043 (FreeRDP before 3.32.1 contains a heap-based out-of-bounds
read in WinP ...)
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f3vg-h45x-6wgf
-CVE-2026-114041 [GHSA-c49c-xm94-5qf3]
+CVE-2026-114041 (FreeRDP before 3.32.1 on Windows contains a heap
out-of-bounds read in ...)
- freerdp3 3.32.1+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c49c-xm94-5qf3
@@ -42339,7 +43377,7 @@ CVE-2026-110830 (FreeRDP before 3.32.0 fails to close
prior serial handles in se
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9
-CVE-2026-114046 [GHSA-q6pp-28g8-xqjc]
+CVE-2026-114046 (FreeRDP 3.0.0 before 3.32.0 contains a null-pointer
dereference in the ...)
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q6pp-28g8-xqjc
@@ -42355,7 +43393,7 @@ CVE-2026-110833 (FreeRDP from 3.0.0-beta1 before 3.32.0
fails to enforce cumulat
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7g5-gw57-cwcr
-CVE-2026-114047 [GHSA-pjxv-5j98-cqx4]
+CVE-2026-114047 (FreeRDP from 2.0.0 before 3.32.0 contains an improper
certificate vali ...)
- freerdp3 3.32.0+dfsg-1
- freerdp2 <removed>
NOTE:
https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pjxv-5j98-cqx4
@@ -100130,7 +101168,7 @@ CVE-2026-65678 (Use after free in Windows Win32K
allows an authorized attacker t
NOT-FOR-US: Microsoft
CVE-2026-65675 (No cwe for this issue in Visual Studio Code CoPilot Chat
Extension all ...)
NOT-FOR-US: Microsoft
-CVE-2026-65673 (Improper neutralization of special elements used in an sql
command ('s ...)
+CVE-2026-65673 (Incorrect authorization in Microsoft Entra Connect Sync allows
an auth ...)
NOT-FOR-US: Microsoft
CVE-2026-65672 (Heap-based buffer overflow in Windows Remote Access API allows
an auth ...)
NOT-FOR-US: Microsoft
@@ -100710,7 +101748,7 @@ CVE-2026-51584 (An issue in usememos v0.27.1 allows a
remote attacker to achieve
NOT-FOR-US: usememos
CVE-2026-51583 (An issue in usememos through v0.30.0 allows a remote
authenticated att ...)
NOT-FOR-US: usememos
-CVE-2026-50516 (Missing authentication for critical function in Microsoft
Azure Kubern ...)
+CVE-2026-50516 (Incorrect authorization in Microsoft Azure Kubernetes Service
allows a ...)
NOT-FOR-US: Microsoft
CVE-2026-50472 (Heap-based buffer overflow in Windows LUAFV allows an
authorized attac ...)
NOT-FOR-US: Microsoft
@@ -122370,7 +123408,7 @@ CVE-2026-16361 (Memory safety bugs present in
Thunderbird ESR 140.12. Some of th
- thunderbird 1:140.13.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16361
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16361
-CVE-2026-16360 (Memory safety bugs present in Firefox ESR 115.37, Firefox ESR
140.12 a ...)
+CVE-2026-16360 (Memory safety bugs present in Thunderbird ESR 140.12 and
Thunderbird 1 ...)
{DSA-6418-1 DSA-6394-1 DLA-4727-1 DLA-4695-1}
- firefox 153.0-1
- firefox-esr 140.13.0esr-1
@@ -122378,7 +123416,7 @@ CVE-2026-16360 (Memory safety bugs present in Firefox
ESR 115.37, Firefox ESR 14
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16360
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16360
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16360
-CVE-2026-16412 (Memory safety bugs present in Firefox ESR 140.12 and Firefox
152. Some ...)
+CVE-2026-16412 (Memory safety bugs present in Thunderbird ESR 140.12 and
Thunderbird 1 ...)
{DSA-6418-1 DSA-6394-1 DLA-4727-1 DLA-4695-1}
- firefox 153.0-1
- firefox-esr 140.13.0esr-1
@@ -122386,7 +123424,7 @@ CVE-2026-16412 (Memory safety bugs present in Firefox
ESR 140.12 and Firefox 152
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16412
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/#CVE-2026-16412
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-72/#CVE-2026-16412
-CVE-2026-16411 (Memory safety bugs present in Firefox 152. Some of these bugs
showed e ...)
+CVE-2026-16411 (Memory safety bugs present in Thunderbird 152. Some of these
bugs show ...)
- firefox 153.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/#CVE-2026-16411
CVE-2026-16410 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
@@ -148683,7 +149721,7 @@ CVE-2026-7515 (The BetterDocs Pro plugin for
WordPress is vulnerable to Local Fi
CVE-2026-6716
REJECTED
CVE-2026-56132 (In libexpat before 2.8.2, there is a heap-based buffer
overflow in doP ...)
- {DSA-6404-1}
+ {DSA-6404-1 DLA-4849-1}
- expat 2.8.2-1 (bug #1140388)
NOTE: https://github.com/libexpat/libexpat/pull/1272
CVE-2026-56131 (libexpat before 2.8.2 lacks handler call depth tracking for
calls to X ...)
@@ -151170,7 +152208,7 @@ CVE-2026-12318 (Incorrect boundary conditions in the
Libraries component in NSS.
[trixie] - nss 2:3.110-1+deb13u3
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12318
NOTE:
https://hg-edge.mozilla.org/projects/nss/rev/bd0c42028c8eae5b9cbdb4f5b0ee59bc07cba2de
-CVE-2026-12317 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12317 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
- firefox 152.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12317
CVE-2026-12316 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
@@ -151184,7 +152222,7 @@ CVE-2026-12315 (Mitigation bypass in the DOM:
Security component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12315
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12315
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12315
-CVE-2026-12314 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12314 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151200,7 +152238,7 @@ CVE-2026-12313 (Information disclosure, sandbox
escape in the Security: Process
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12313
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12313
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12313
-CVE-2026-12312 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12312 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151216,7 +152254,7 @@ CVE-2026-12311 (Information disclosure, sandbox
escape in the Security: Process
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12311
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12311
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12311
-CVE-2026-12310 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12310 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151224,7 +152262,7 @@ CVE-2026-12310 (Memory safety bug fixed in Firefox
152. This vulnerability was f
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12310
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12310
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12310
-CVE-2026-12309 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12309 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151232,7 +152270,7 @@ CVE-2026-12309 (Memory safety bug fixed in Firefox
152. This vulnerability was f
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12309
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12309
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12309
-CVE-2026-12308 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12308 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151240,7 +152278,7 @@ CVE-2026-12308 (Memory safety bug fixed in Firefox
152. This vulnerability was f
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12308
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12308
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12308
-CVE-2026-12307 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12307 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151248,7 +152286,7 @@ CVE-2026-12307 (Memory safety bug fixed in Firefox
152. This vulnerability was f
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12307
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12307
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12307
-CVE-2026-12306 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12306 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151256,7 +152294,7 @@ CVE-2026-12306 (Memory safety bug fixed in Firefox
152. This vulnerability was f
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12306
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12306
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12306
-CVE-2026-12305 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12305 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151283,10 +152321,10 @@ CVE-2026-12302 (Mitigation bypass in the DOM:
Security component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12302
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12302
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12302
-CVE-2026-12301 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12301 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
- firefox 152.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12301
-CVE-2026-12300 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12300 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
- firefox 152.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12300
CVE-2026-12299 (JIT miscompilation in the DOM: Core & HTML component. This
vulnerabili ...)
@@ -151297,7 +152335,7 @@ CVE-2026-12299 (JIT miscompilation in the DOM: Core &
HTML component. This vulne
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12299
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12299
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12299
-CVE-2026-12298 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12298 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -151356,7 +152394,7 @@ CVE-2026-12291 (Use-after-free in the Networking:
HTTP component. This vulnerabi
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12291
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-58/#CVE-2026-12291
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-61/#CVE-2026-12291
-CVE-2026-12290 (Memory safety bug fixed in Firefox 152. This vulnerability was
fixed i ...)
+CVE-2026-12290 (Memory safety bug fixed in Thunderbird 152. This vulnerability
was fix ...)
{DSA-6351-1 DSA-6350-1 DLA-4636-1 DLA-4635-1}
- firefox 152.0-1
- firefox-esr 140.12.0esr-1
@@ -171803,7 +172841,7 @@ CVE-2026-46529 (Atril Document Viewer is the default
document reader of the MATE
NOTE: Fixed by:
https://github.com/mate-desktop/atril/commit/6fcec412c36186564f2af8b94026c61b8fecb5e4
(1.26.3)
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/papers/-/commit/1b82bf627b4d8b414a57b55a9095e6d361799d6c
NOTE: No security impact in evince-gtk3 since affected code not built
in binary package.
-CVE-2026-8975 (Memory safety bugs present in Firefox ESR 115.35, Firefox ESR
140.10 a ...)
+CVE-2026-8975 (Memory safety bugs present in Thunderbird 140.10 and
Thunderbird 150. ...)
{DSA-6288-1 DSA-6283-1 DLA-4594-1 DLA-4592-1}
- firefox 151.0-1
- firefox-esr 140.11.0esr-1
@@ -171811,7 +172849,7 @@ CVE-2026-8975 (Memory safety bugs present in Firefox
ESR 115.35, Firefox ESR 140
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/#CVE-2026-8975
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/#CVE-2026-8975
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/#CVE-2026-8975
-CVE-2026-8974 (Memory safety bugs present in Firefox ESR 140.10 and Firefox
150. Some ...)
+CVE-2026-8974 (Memory safety bugs present in Thunderbird 140.10 and
Thunderbird 150. ...)
{DSA-6288-1 DSA-6283-1 DLA-4594-1 DLA-4592-1}
- firefox 151.0-1
- firefox-esr 140.11.0esr-1
@@ -171819,7 +172857,7 @@ CVE-2026-8974 (Memory safety bugs present in Firefox
ESR 140.10 and Firefox 150.
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/#CVE-2026-8974
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/#CVE-2026-8974
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/#CVE-2026-8974
-CVE-2026-8973 (Memory safety bugs present in Firefox 150. Some of these bugs
showed e ...)
+CVE-2026-8973 (Memory safety bugs present in Thunderbird 150. Some of these
bugs show ...)
- firefox 151.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/#CVE-2026-8973
CVE-2026-8972 (Privilege escalation in the WebRTC: Audio/Video component. This
vulner ...)
@@ -179615,10 +180653,10 @@ CVE-2026-8094 (Other issue in the WebRTC component.
This vulnerability was fixed
- thunderbird 1:140.10.2esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/#CVE-2026-8094
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-44/#CVE-2026-8094
-CVE-2026-8093 (Memory safety bugs present in Firefox 150.0.1. Some of these
bugs show ...)
+CVE-2026-8093 (Memory safety bugs present in Thunderbird 150.0.1. Some of
these bugs ...)
- firefox 150.0.2-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/#CVE-2026-8093
-CVE-2026-8092 (Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR
140.10 ...)
+CVE-2026-8092 (Memory safety bugs present in Thunderbird ESR 140.10.1 and
Thunderbird ...)
{DSA-6267-1 DSA-6254-1 DLA-4582-1 DLA-4575-1}
- firefox 150.0.2-1
- firefox-esr 140.10.2esr-1
@@ -229130,7 +230168,7 @@ CVE-2025-63372 (Articentgroup Zip Rar Extractor Tool
1.345.93.0 is vulnerable to
NOT-FOR-US: Articentgroup Zip Rar Extractor Tool
CVE-2025-62673 (Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0
and AX12 ...)
NOT-FOR-US: TP-Link
-CVE-2025-62501 (SSH Hostkey misconfiguration vulnerability in TP-Link Archer
AX53 v1.0 ...)
+CVE-2025-62501 (SSH Hostkey misconfiguration vulnerability in Archer AX53 and
Archer B ...)
NOT-FOR-US: TP-Link
CVE-2025-62405 (Heap-based Buffer Overflow vulnerability in TP-Link Archer
AX53 v1.0 ( ...)
NOT-FOR-US: TP-Link
@@ -270022,7 +271060,7 @@ CVE-2025-34282 (ThingsBoard versions < 4.2.1 contain
a server-side request forge
CVE-2025-34281 (ThingsBoard in versions prior to v4.2.1 allows an
authenticated user t ...)
NOT-FOR-US: ThingsBoard
CVE-2025-26625 (Git LFS is a Git extension for versioning large files. In Git
LFS vers ...)
- {DLA-4610-1}
+ {DLA-4846-1 DLA-4610-1}
- git-lfs 3.7.1-1 (bug #1118339)
[trixie] - git-lfs 3.6.1-1+deb13u1
NOTE:
https://github.com/git-lfs/git-lfs/security/advisories/GHSA-6pvw-g552-53c5
@@ -284407,7 +285445,7 @@ CVE-2025-59378 (In guix-daemon in GNU Guix before
1618ca7, a content-addressed-m
NOTE: Fixed by:
https://codeberg.org/guix/guix/commit/f607aaaaaafe19257ef09ca519d325df6ae97e05
NOTE: Fixed by:
https://codeberg.org/guix/guix/commit/9202921e812708b23788b2209cdb576d456f56db
CVE-2025-59375 (libexpat in Expat before 2.7.2 allows attackers to trigger
large dynam ...)
- {DSA-6404-1 DSA-6179-1 DSA-6178-1 DLA-4807-1 DLA-4511-1 DLA-4510-1}
+ {DSA-6404-1 DSA-6179-1 DSA-6178-1 DLA-4849-1 DLA-4807-1 DLA-4511-1
DLA-4510-1}
- firefox 149.0-1
- firefox-esr 140.9.0esr-1
- thunderbird 1:140.9.0esr-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6045591049ca479fad82b9bb60ec577a442d937
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6045591049ca479fad82b9bb60ec577a442d937
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
