Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0c5436ea by security tracker role at 2026-10-27T19:15:40+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,973 @@
+CVE-2026-94347 (PowerProtect Data Domain Virtual Edition, Feature Release
versions 7.7 ...)
+ TODO: check
+CVE-2026-94346 (PowerProtect Data Domain Virtual Edition, Feature Release
versions 7.7 ...)
+ TODO: check
+CVE-2026-93866 (An integer overflow vulnerability in the WebSocket connection
handling ...)
+ TODO: check
+CVE-2026-93865 (A missing authentication vulnerability in the Fireware OS
FireCluster ...)
+ TODO: check
+CVE-2026-93864 (A link following vulnerability in WatchGuard Fireware
OS\u2019s firewa ...)
+ TODO: check
+CVE-2026-93862 (An out-of-bounds read vulnerability in the FireCluster Sync
processing ...)
+ TODO: check
+CVE-2026-93857 (A stack-based buffer overflow vulnerability in Fireware OS's
SIP proxy ...)
+ TODO: check
+CVE-2026-93434 (An XPath injection vulnerability in WatchGuard Fireware OS's
SSH authe ...)
+ TODO: check
+CVE-2026-92885 (The Qode Membership plugin for WordPress is vulnerable to
Authenticati ...)
+ TODO: check
+CVE-2026-92546 (Authentication bypass by spoofing vulnerability in Keepnet
Labs Cybers ...)
+ TODO: check
+CVE-2026-92377 (Improper access control in the Patch Management update
mechanism of Te ...)
+ TODO: check
+CVE-2026-92376 (Improper authentication in the inter-process communication
(IPC) mecha ...)
+ TODO: check
+CVE-2026-92375 (An improper access control vulnerability in the IPC
communication betw ...)
+ TODO: check
+CVE-2026-92374 (A time-of-check time-of-use (TOCTOU) race condition combined
with impr ...)
+ TODO: check
+CVE-2026-92372 (An out-of-bounds write vulnerability in the screen-image
decoder of Te ...)
+ TODO: check
+CVE-2026-90732 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90731 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90730 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90729 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90728 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90727 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90726 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90725 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90465 (A missing authentication vulnerability in the FireCluster Sync
process ...)
+ TODO: check
+CVE-2026-90464 (An external control of file path vulnerability in a WatchGuard
Firewar ...)
+ TODO: check
+CVE-2026-90442 (A stack-based buffer overflow vulnerability in the Fireware OS
certd p ...)
+ TODO: check
+CVE-2026-87897 (A SSRF vulnerability found that enables access to internal
Chrome Devt ...)
+ TODO: check
+CVE-2026-87086 (Tanium addressed a denial of service vulnerability in
Provision.)
+ TODO: check
+CVE-2026-87085 (Tanium addressed a SQL injection vulnerability in Provision.)
+ TODO: check
+CVE-2026-86577 (Out-of-bounds Write Vulnerability in JP1 Products. This issue
affects ...)
+ TODO: check
+CVE-2026-86576 (Heap-based Buffer Overflow Vulnerability in JP1 Products.
This issue ...)
+ TODO: check
+CVE-2026-86575 (Stack-based Buffer Overflow Vulnerability in JP1 Products.
This issue ...)
+ TODO: check
+CVE-2026-86574 (Heap-based Buffer Overflow Vulnerability in JP1/Base. This
issue affe ...)
+ TODO: check
+CVE-2026-85299 (A Missing Authorization vulnerability in the
disks.createSnapshot and ...)
+ TODO: check
+CVE-2026-82986 (The user in a group can bypass the group restriction set by an
adminis ...)
+ TODO: check
+CVE-2026-82984 (When a team was configured as "visible to everyone", the web
UI correc ...)
+ TODO: check
+CVE-2026-82983 (The Tables app's share-listing endpoint (GET
/apps/tables/share/table/ ...)
+ TODO: check
+CVE-2026-82332 (An improper authentication vulnerability in WatchGuard
Fireware OS's A ...)
+ TODO: check
+CVE-2026-82122 (Stack-based Buffer Overflow Vulnerability in HiRDB. This
issue affec ...)
+ TODO: check
+CVE-2026-82121 (Origin Validation Error Vulnerability in HiRDB. This issue
affects H ...)
+ TODO: check
+CVE-2026-82120 (Heap-based Buffer Overflow Vulnerability in HiRDB. This
issue affect ...)
+ TODO: check
+CVE-2026-82119 (OS Command Injection Vulnerability in HiRDB. This issue
affects HiRD ...)
+ TODO: check
+CVE-2026-82118 (Stack-based Buffer Overflow Vulnerability in HiRDB. This
issue affec ...)
+ TODO: check
+CVE-2026-82117 (Authentication Bypass by Spoofing Vulnerability in HiRDB.
This issue ...)
+ TODO: check
+CVE-2026-82116 (Missing Authentication for Critical Function Vulnerability in
HiRDB. ...)
+ TODO: check
+CVE-2026-78845 (Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter
Smart L ...)
+ TODO: check
+CVE-2026-77173 (A user could create a docx or odt file with a # in the
filename with c ...)
+ TODO: check
+CVE-2026-77172 (App passwords were allowed to bypass password confirmation on
sensitiv ...)
+ TODO: check
+CVE-2026-77171 (A public shared collective always allowed recipients of the
link to cr ...)
+ TODO: check
+CVE-2026-77167 (Abusing the federated share endpoint, an attacker can write
arbitrary ...)
+ TODO: check
+CVE-2026-76939 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job
Manageme ...)
+ TODO: check
+CVE-2026-76938 (Authentication Bypass Vulnerability in JP1/Automatic Job
Management Sy ...)
+ TODO: check
+CVE-2026-76937 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job
Manageme ...)
+ TODO: check
+CVE-2026-76936 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
+ TODO: check
+CVE-2026-76935 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
+ TODO: check
+CVE-2026-76934 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
+ TODO: check
+CVE-2026-76933 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job
Manageme ...)
+ TODO: check
+CVE-2026-76932 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
+ TODO: check
+CVE-2026-68866 (PowerProtect Data Domain, Feature Release versions 7.7.1.0
through 8.7 ...)
+ TODO: check
+CVE-2026-67400 (A missing token type check allowed to retrieve more additional
informa ...)
+ TODO: check
+CVE-2026-65220 (A logic flaw in the BMC IPMI implementation may allow an
attacker to s ...)
+ TODO: check
+CVE-2026-65219 (A flaw in the BMC RAKP+ implementation may allow an attacker
to send a ...)
+ TODO: check
+CVE-2026-65213 (This issue may allow an IPMI authenticated administrator to
execute co ...)
+ TODO: check
+CVE-2026-65211 (This issue may allow an authenticated IPMI Administrator to
read and w ...)
+ TODO: check
+CVE-2026-65210 (This issue may allow an authenticated IPMI Administrator to
read arbit ...)
+ TODO: check
+CVE-2026-65151 (NVIDIA NeMo Agent Toolkit contains vulnerability where an
attacker cou ...)
+ TODO: check
+CVE-2026-65145 (NVIDIA NeMo Agent Toolkit contains a vulnerability where a
attacker co ...)
+ TODO: check
+CVE-2026-65120 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker
could c ...)
+ TODO: check
+CVE-2026-65119 (NVIDIA TensorRT-LLM for any platform contains a vulnerability
in KvCac ...)
+ TODO: check
+CVE-2026-57202 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57201 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57198 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57197 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57194 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57189 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57188 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-57185 (Asterisk is an open source private branch exchange and
telephony toolk ...)
+ TODO: check
+CVE-2026-56084 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-54462 (Knative pkg provides common packages shared across Knative
repositorie ...)
+ TODO: check
+CVE-2026-4337 (Unrestricted Upload of File with Dangerous Type vulnerability
in the P ...)
+ TODO: check
+CVE-2026-48380 (Substance3D - Painter is affected by an out-of-bounds read
vulnerabili ...)
+ TODO: check
+CVE-2026-48379 (Substance3D - Painter is affected by a Stack-based Buffer
Overflow vul ...)
+ TODO: check
+CVE-2026-48360 (Adobe Connect is affected by an Improper Control of Generation
of Code ...)
+ TODO: check
+CVE-2026-47486 (NVIDIA PhysX for all platforms contains a vulnerability where
an attac ...)
+ TODO: check
+CVE-2026-41022 (Eaton easySoft improperly validates TLS certificates presented
by easy ...)
+ TODO: check
+CVE-2026-41021 (Eaton easyE4 uses an insufficiently strong password policy. An
attacke ...)
+ TODO: check
+CVE-2026-41020 (Eaton easyE4 uses a static nonce during authentication, which
could al ...)
+ TODO: check
+CVE-2026-24269 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker
could c ...)
+ TODO: check
+CVE-2026-18451 (The HTML5 KVM-over-IP console authenticates with a token
returned by t ...)
+ TODO: check
+CVE-2026-18450 (The BMC does not correctly enforce integrity and encryption
requiremen ...)
+ TODO: check
+CVE-2026-18449 (The BMC does not correctly enforce integrity and encryption
requiremen ...)
+ TODO: check
+CVE-2026-16521 (An OS command injection vulnerability exists because of
insufficient i ...)
+ TODO: check
+CVE-2026-16491 (Grafana\u2019s RBAC service ignored the requested folder when
checking ...)
+ TODO: check
+CVE-2026-16307 (Authorization bypass through User-Controlled key vulnerability
in Neti ...)
+ TODO: check
+CVE-2026-15586 (Improper restriction of excessive authentication attempts
vulnerabilit ...)
+ TODO: check
+CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat
allows authe ...)
+ TODO: check
+CVE-2026-12887 (In affected versions of Octopus Server, a user with permission
to uplo ...)
+ TODO: check
+CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the
homeserver a ...)
+ TODO: check
+CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID
made Thun ...)
+ TODO: check
+CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or
newLocation ele ...)
+ TODO: check
+CVE-2026-118177 (When looking for calendars in a directory on a server, during
account ...)
+ TODO: check
+CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from
accessing files o ...)
+ TODO: check
+CVE-2026-118175 (When replying to, forwarding, or editing a crafted email
message as ne ...)
+ TODO: check
+CVE-2026-118174 (When a message containing an OpenPGP key attachment was
displayed, Thu ...)
+ TODO: check
+CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP
feed data, ...)
+ TODO: check
+CVE-2026-118172 (The strapi/strapi (Core Admin / Webhook Runner) package is
vulnerable ...)
+ TODO: check
+CVE-2026-118171 (The strapi/content-manager package is missing content-scope
authorizat ...)
+ TODO: check
+CVE-2026-118170 (The strapi/review-workflows package is vulnerable to a broken
access c ...)
+ TODO: check
+CVE-2026-118132 (NextChat version 2.16.1 contains a client\u2011side
cross\u2011site sc ...)
+ TODO: check
+CVE-2026-118131 (GnuPG (version 2.5.21) for Windows contains a vulnerability
where defa ...)
+ TODO: check
+CVE-2026-118027 (Frame poisoning in the Layout component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-118026 (Invalid pointer in the JavaScript: GC component. This
vulnerability wa ...)
+ TODO: check
+CVE-2026-118025 (Other issue in the SVG component. This vulnerability was
fixed in Fire ...)
+ TODO: check
+CVE-2026-118024 (Use-after-free in the Graphics: Text component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-118023 (Sandbox escape due to use-after-free in the Graphics:
WebRender compon ...)
+ TODO: check
+CVE-2026-118022 (Sandbox escape due to use-after-free in the Disability Access
APIs com ...)
+ TODO: check
+CVE-2026-118021 (Sandbox escape due to use-after-free in the XPCOM component.
This vuln ...)
+ TODO: check
+CVE-2026-118020 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ TODO: check
+CVE-2026-118019 (Race condition, use-after-free in the DOM: File component.
This vulner ...)
+ TODO: check
+CVE-2026-118018 (Spoofing issue in the Downloads component in Firefox for
Android. This ...)
+ TODO: check
+CVE-2026-118017 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-118016 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-118015 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-118014 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-118013 (Use-after-free in the Layout: Images, Video, and HTML Frames
component ...)
+ TODO: check
+CVE-2026-118012 (Use-after-free in the DOM: Animation component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-118011 (Frame poisoning in the CSS Parsing and Computation component.
This vul ...)
+ TODO: check
+CVE-2026-118010 (Use-after-free in the Disability Access APIs component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-118009 (Integer overflow, use-after-free in the Graphics: Text
component. This ...)
+ TODO: check
+CVE-2026-118008 (Privilege escalation in the DOM: Navigation component. This
vulnerabil ...)
+ TODO: check
+CVE-2026-118007 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-118006 (Privilege escalation due to use-after-free in the WebRTC:
Signaling co ...)
+ TODO: check
+CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This
vulnerability ...)
+ TODO: check
+CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and
Animations co ...)
+ TODO: check
+CVE-2026-118003 (Information disclosure in the Networking: DNS component. This
vulnerab ...)
+ TODO: check
+CVE-2026-118002 (Information disclosure due to race condition in the
Networking compone ...)
+ TODO: check
+CVE-2026-118000 (Information disclosure in the Networking: HTTP component.
This vulnera ...)
+ TODO: check
+CVE-2026-117999 (Race condition in the IPC component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component.
This vulne ...)
+ TODO: check
+CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component.
This vul ...)
+ TODO: check
+CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This
vulnerabil ...)
+ TODO: check
+CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling
component. ...)
+ TODO: check
+CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-117993 (Integer overflow in the Graphics: Text component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation
component. T ...)
+ TODO: check
+CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
+ TODO: check
+CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the
Graphics: W ...)
+ TODO: check
+CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the
Graphics: C ...)
+ TODO: check
+CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics
component. This v ...)
+ TODO: check
+CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and
Overflow co ...)
+ TODO: check
+CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
+ TODO: check
+CVE-2026-117981 (Privilege escalation in the Toolkit component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender
component. Th ...)
+ TODO: check
+CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This
vulnerab ...)
+ TODO: check
+CVE-2026-117977 (Other issue in the Console component. This vulnerability was
fixed in ...)
+ TODO: check
+CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This
vulnerabil ...)
+ TODO: check
+CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics:
WebRender compo ...)
+ TODO: check
+CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117973 (Use-after-free in the Networking: DNS component. This
vulnerability wa ...)
+ TODO: check
+CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability
was fixed ...)
+ TODO: check
+CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview
component. T ...)
+ TODO: check
+CVE-2026-117970 (Race condition in the Disability Access APIs component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
+ TODO: check
+CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This
vulnerabilit ...)
+ TODO: check
+CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers
component. T ...)
+ TODO: check
+CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the
Storage: Qu ...)
+ TODO: check
+CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts
component. ...)
+ TODO: check
+CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component.
This vulne ...)
+ TODO: check
+CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This
vulnerab ...)
+ TODO: check
+CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
+ TODO: check
+CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117952 (Uninitialized memory in the Networking component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML
component. This ...)
+ TODO: check
+CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
+ TODO: check
+CVE-2026-117945 (Incorrect boundary conditions in the XML component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ TODO: check
+CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT
component. ...)
+ TODO: check
+CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This
vulnerabil ...)
+ TODO: check
+CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ TODO: check
+CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ TODO: check
+CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component.
This vul ...)
+ TODO: check
+CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117931 (Use-after-free in the DOM: Events component. This
vulnerability was fi ...)
+ TODO: check
+CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
+ TODO: check
+CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
+ TODO: check
+CVE-2026-117923 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
+ TODO: check
+CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
+ TODO: check
+CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This
vulnerabili ...)
+ TODO: check
+CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
+ TODO: check
+CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline
componen ...)
+ TODO: check
+CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation
component ...)
+ TODO: check
+CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
+ TODO: check
+CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117907 (Use-after-free in the Networking component. This
vulnerability was fix ...)
+ TODO: check
+CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
+ TODO: check
+CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This
vulnerabil ...)
+ TODO: check
+CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-117903 (Use-after-free in the Audio/Video component. This
vulnerability was fi ...)
+ TODO: check
+CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117900 (Use-after-free in the DOM: Editor component. This
vulnerability was fi ...)
+ TODO: check
+CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
+ TODO: check
+CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling
component. This ...)
+ TODO: check
+CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component.
This vul ...)
+ TODO: check
+CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC:
Networking c ...)
+ TODO: check
+CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component.
This vulne ...)
+ TODO: check
+CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine
component. This ...)
+ TODO: check
+CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component.
This vulnera ...)
+ TODO: check
+CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text
component. This vu ...)
+ TODO: check
+CVE-2026-117885 (Use-after-free in the Layout: Grid component. This
vulnerability was f ...)
+ TODO: check
+CVE-2026-117884 (Use-after-free in the Networking component. This
vulnerability was fix ...)
+ TODO: check
+CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ TODO: check
+CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was
fixed in F ...)
+ TODO: check
+CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables
component. This vu ...)
+ TODO: check
+CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB
component. This ...)
+ TODO: check
+CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
+ TODO: check
+CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow
component. This v ...)
+ TODO: check
+CVE-2026-117874 (Use-after-free in the Internationalization component. This
vulnerabili ...)
+ TODO: check
+CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback
component. ...)
+ TODO: check
+CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component.
This vul ...)
+ TODO: check
+CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability
was fixe ...)
+ TODO: check
+CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This
vulnerability ...)
+ TODO: check
+CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
+ TODO: check
+CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This
vulnerability wa ...)
+ TODO: check
+CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability
was fixed i ...)
+ TODO: check
+CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics:
Canvas2D c ...)
+ TODO: check
+CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This
vulnerability was ...)
+ TODO: check
+CVE-2026-117864 (Sandbox escape in the Form Manager component. This
vulnerability was f ...)
+ TODO: check
+CVE-2026-117863 (Information disclosure due to uninitialized memory in the
Audio/Video ...)
+ TODO: check
+CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in
the Netwo ...)
+ TODO: check
+CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This
vulnerability wa ...)
+ TODO: check
+CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component.
This vulne ...)
+ TODO: check
+CVE-2026-117604 (Grav from 1.7.53.3 before 1.7.53.6 contains an authorization
bypass in ...)
+ TODO: check
+CVE-2026-117603 (Electrum before 4.7.2 contains a spending limit bypass
vulnerability i ...)
+ TODO: check
+CVE-2026-117602 (Electrum 4.6.0 before 4.7.2 contains an authorization bypass
in the ex ...)
+ TODO: check
+CVE-2026-117601 (Electrum before 4.8.3 fails to verify signatures of
wallet-owned input ...)
+ TODO: check
+CVE-2026-117573 (hagent through commit 761eec6 contains an OS command
injection vulnera ...)
+ TODO: check
+CVE-2026-117570 (Vorota-ai nmap-mcp through commit 3636afa contains an
improper allowli ...)
+ TODO: check
+CVE-2026-117569 (Kali-GPT through commit a608c74 contains an OS command
injection vulne ...)
+ TODO: check
+CVE-2026-117568 (mcp-ffmpeg through 1.0.5 contains an OS command injection
vulnerabilit ...)
+ TODO: check
+CVE-2026-117567 (esp-mcp through commit 28afddf contains an OS command
injection vulner ...)
+ TODO: check
+CVE-2026-117566 (EasyImages2.0 through 2.8.6 contains an unauthenticated path
traversal ...)
+ TODO: check
+CVE-2026-117565 (Artalk before 2.10.1 contains an unauthenticated server-side
request f ...)
+ TODO: check
+CVE-2026-117564 (nest-admin before 1.0.1 contains an authentication bypass
vulnerabilit ...)
+ TODO: check
+CVE-2026-117563 (MrDoc through 1.1.1 contains a broken access control
vulnerability in ...)
+ TODO: check
+CVE-2026-117562 (rssant 1.9.0 through 1.9.1 contains an authorization bypass
vulnerabil ...)
+ TODO: check
+CVE-2026-117561 (Codefriar sf-mcp through 1.3.2 contains an OS command
injection vulner ...)
+ TODO: check
+CVE-2026-117560 (ATXP Gemini CLI extension through 1.0.0 contains an OS
command injecti ...)
+ TODO: check
+CVE-2026-117559 (DroidMind through 0.4.0 contains a command injection
vulnerability tha ...)
+ TODO: check
+CVE-2026-117558 (The ai-sdlc plugin MCP server through 0.31.2 contains an OS
command in ...)
+ TODO: check
+CVE-2026-117557 (SDL_image through 3.4.8 and through 2.8.12 contains a stack
out-of-bou ...)
+ TODO: check
+CVE-2026-117556 (zchunk before 1.5.5 contains a heap out-of-bounds read
vulnerability i ...)
+ TODO: check
+CVE-2026-117555 (CImg through 4.0.6 contains a heap out-of-bounds read
vulnerability in ...)
+ TODO: check
+CVE-2026-117554 (Admidio before 5.0.17 contains an improper access control
vulnerabilit ...)
+ TODO: check
+CVE-2026-117553 (Umbraco CMS before 17.7.2 and 18.2.2 contains an
authentication bypass ...)
+ TODO: check
+CVE-2026-117541 (svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught
exception ...)
+ TODO: check
+CVE-2026-117540 (svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of
service vul ...)
+ TODO: check
+CVE-2026-117539 (darylldoyle svg-sanitizer before 1.0.0 contains CSS injection
and remo ...)
+ TODO: check
+CVE-2026-117538 (REDAXO before 5.21.0 contains a reflected cross-site
scripting vulnera ...)
+ TODO: check
+CVE-2026-117537 (REDAXO before 5.21.0 contains a reflected cross-site
scripting vulnera ...)
+ TODO: check
+CVE-2026-117536 (REDAXO before 5.21.3 contains a cross-site request forgery
vulnerabili ...)
+ TODO: check
+CVE-2026-117535 (REDAXO before 5.21.3 contains a reflected cross-site
scripting vulnera ...)
+ TODO: check
+CVE-2026-117534 (REDAXO before 5.21.3 contains a cross-site request forgery
vulnerabili ...)
+ TODO: check
+CVE-2026-117533 (REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site
scriptin ...)
+ TODO: check
+CVE-2026-117532 (REDAXO core from 5.3.0 before 5.21.4 contains an
authentication bypass ...)
+ TODO: check
+CVE-2026-117530 (In JetBrains Junie CLI before 26.8.17 command execution was
possible d ...)
+ TODO: check
+CVE-2026-117526 (A vulnerability was found in reduxjs redux-devtools 5.0.0.
Affected by ...)
+ TODO: check
+CVE-2026-117516 (A weakness has been identified in oretnom23
php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-117515 (A security flaw has been discovered in oretnom23
php-travel-agency-sys ...)
+ TODO: check
+CVE-2026-117514 (A vulnerability was identified in oretnom23
php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-117513 (A vulnerability was determined in oretnom23
php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-117512 (A vulnerability was found in oretnom23
php-travel-agency-system. This ...)
+ TODO: check
+CVE-2026-117511 (A vulnerability has been found in desmondmorris
node-tesseract up to 0 ...)
+ TODO: check
+CVE-2026-117510 (A flaw has been found in Dexmal Dexbotic up to 0.2.0.
Affected by this ...)
+ TODO: check
+CVE-2026-117509 (A vulnerability was detected in crownpku Rasa_NLU_Chi up to
0.12.2. Af ...)
+ TODO: check
+CVE-2026-117507 (A security vulnerability has been detected in a2aproject
a2a-java up t ...)
+ TODO: check
+CVE-2026-117506 (A weakness has been identified in a2aproject a2a-java up to
1.2.0.Fina ...)
+ TODO: check
+CVE-2026-117505 (A security flaw has been discovered in a2aproject a2a-java up
to 1.2.0 ...)
+ TODO: check
+CVE-2026-117504 (A vulnerability was identified in a2aproject a2a-go up to
2.4.0. The a ...)
+ TODO: check
+CVE-2026-117503 (A vulnerability was determined in a2aproject a2a-go up to
2.4.0. Impac ...)
+ TODO: check
+CVE-2026-117499 (@fastify/session is a session plugin for Fastify. In all
releases befo ...)
+ TODO: check
+CVE-2026-117494 (Cross-Site Scripting (XSS) in the processing of SVG images
submitted t ...)
+ TODO: check
+CVE-2026-117493 (Stored cross-site scripting (XSS) in BloX widgets. The
/api/dashboards ...)
+ TODO: check
+CVE-2026-117466 (In affected versions of Octopus Server, a user holding the
System Mana ...)
+ TODO: check
+CVE-2026-117341 (In affected versions of Octopus Server, creating a user
invitation wri ...)
+ TODO: check
+CVE-2026-116900 (REDAXO before 5.21.4 contains a stored cross-site scripting
vulnerabil ...)
+ TODO: check
+CVE-2026-116899 (REDAXO before 5.21.4 contains a broken access control
vulnerability th ...)
+ TODO: check
+CVE-2026-116898 (REDAXO before 5.21.4 contains a missing authorization
vulnerability in ...)
+ TODO: check
+CVE-2026-116897 (REDAXO core before 5.21.4 contains a missing authorization
vulnerabili ...)
+ TODO: check
+CVE-2026-116896 (REDAXO before 5.21.5 contains a missing authorization
vulnerability in ...)
+ TODO: check
+CVE-2026-116895 (REDAXO before 5.21.5 contains a cross-site request forgery
vulnerabili ...)
+ TODO: check
+CVE-2026-116894 (REDAXO before 5.21.5 contains an insufficient session
expiration vulne ...)
+ TODO: check
+CVE-2026-116893 (REDAXO core before 5.21.5 contains a missing authorization
vulnerabili ...)
+ TODO: check
+CVE-2026-116892 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a
reflected cross-s ...)
+ TODO: check
+CVE-2026-116891 (SemanticMediaWiki from 4.2.0 before 7.2.1 contains a
reflected cross-s ...)
+ TODO: check
+CVE-2026-116890 (Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing
authoriz ...)
+ TODO: check
+CVE-2026-116889 (SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored
cross-site ...)
+ TODO: check
+CVE-2026-116888 (SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored
cross-site ...)
+ TODO: check
+CVE-2026-116887 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored
cross-sit ...)
+ TODO: check
+CVE-2026-116886 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored
cross-sit ...)
+ TODO: check
+CVE-2026-116885 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a
reflected cross- ...)
+ TODO: check
+CVE-2026-116884 (SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored
cross-site ...)
+ TODO: check
+CVE-2026-116883 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored
cross-sit ...)
+ TODO: check
+CVE-2026-116882 (Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored
cross-sit ...)
+ TODO: check
+CVE-2026-116881 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a
cross-site scrip ...)
+ TODO: check
+CVE-2026-116880 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a
cross-site reque ...)
+ TODO: check
+CVE-2026-116879 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing
authoriz ...)
+ TODO: check
+CVE-2026-116878 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an
uncontrolled re ...)
+ TODO: check
+CVE-2026-116877 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an
uncontrolled re ...)
+ TODO: check
+CVE-2026-116876 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an
improper author ...)
+ TODO: check
+CVE-2026-116875 (SemanticMediaWiki from 3.0.0 before 7.3.1 contains a
reflected cross-s ...)
+ TODO: check
+CVE-2026-116874 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a
reflected cross-s ...)
+ TODO: check
+CVE-2026-116873 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing
authoriz ...)
+ TODO: check
+CVE-2026-116872 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains an
algorithmic com ...)
+ TODO: check
+CVE-2026-116871 (Semantic MediaWiki 3.0.0 before 7.3.1 contains an
uncontrolled recursi ...)
+ TODO: check
+CVE-2026-116870 (In affected versions of Octopus Server, OIDC token issuer
validation w ...)
+ TODO: check
+CVE-2026-116863 (Cross-Site Request Forgery (CSRF) vulnerability in Tribulant
Software ...)
+ TODO: check
+CVE-2026-116683 (CTFer.io's CTFd Terraform Provider manages CTFd resources as
code. Fro ...)
+ TODO: check
+CVE-2026-116682 (FileBrowser Quantum is a free, self-hosted, web-based file
manager. Pr ...)
+ TODO: check
+CVE-2026-116680 (HomeBox is a home inventory and organization system. Prior to
version ...)
+ TODO: check
+CVE-2026-116679 (Neko is a a self-hosted virtual browser that runs in Docker
and uses W ...)
+ TODO: check
+CVE-2026-116678 (Vaultwarden is a Bitwarden-compatible server written in Rust.
Prior to ...)
+ TODO: check
+CVE-2026-116677 (OpenWISP Controller is a network and WiFi controller for
provisioning, ...)
+ TODO: check
+CVE-2026-116676 (Atlantis is a self-hosted golang application that listens for
Terrafor ...)
+ TODO: check
+CVE-2026-116675 (TinyMCE is an open source rich text editor. From 7.9.3 until
7.9.4 and ...)
+ TODO: check
+CVE-2026-116674 (systeminformation is a System and OS information library for
node.js. ...)
+ TODO: check
+CVE-2026-116673 (systeminformation is a System and OS information library for
node.js. ...)
+ TODO: check
+CVE-2026-116672 (Authlib is a Python library which builds OAuth and OpenID
Connect serv ...)
+ TODO: check
+CVE-2026-116662 (Tanium addressed a compression bomb vulnerability in Enforce.)
+ TODO: check
+CVE-2026-116660 (Tanium addressed an improper access controls vulnerability in
Enforce.)
+ TODO: check
+CVE-2026-116659 (Tanium addressed an uncontrolled resource consumption
vulnerability in ...)
+ TODO: check
+CVE-2026-116658 (Tanium addressed a denial of service vulnerability in
Enforce.)
+ TODO: check
+CVE-2026-116657 (Tanium addressed a denial of service vulnerability in
Enforce.)
+ TODO: check
+CVE-2026-116656 (Tanium addressed an uncontrolled resource consumption
vulnerability in ...)
+ TODO: check
+CVE-2026-116649 (Tanium addressed an improper output sanitization
vulnerability in Enfo ...)
+ TODO: check
+CVE-2026-116647 (Tanium addressed an improper output sanitization
vulnerability in Comp ...)
+ TODO: check
+CVE-2026-116627 (Improper neutralization of input during web page generation
('Cross-si ...)
+ TODO: check
+CVE-2026-115495 (Cleartext Transmission of Sensitive Information vulnerability
in the W ...)
+ TODO: check
+CVE-2026-115413 (Missing token audience validation in the OAuth authentication
mode of ...)
+ TODO: check
+CVE-2026-115408 (In `github.com/eclipse-keypont/crypto11/v2` versions `>=
2.0.0-rc3, <= ...)
+ TODO: check
+CVE-2026-115216 (In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS
certificate ...)
+ TODO: check
+CVE-2026-114598 (In EPICS Base release 7.0.10 and prior, an insufficient
validation of ...)
+ TODO: check
+CVE-2026-114597 (In EPICS Base release 7.0.10 and prior, an insufficient
validation of ...)
+ TODO: check
+CVE-2026-114596 (In EPICS Base release 7.0.10 and prior, an improper
validation of mess ...)
+ TODO: check
+CVE-2026-114595 (In EPICS Base release 7.0.10 and prior, an integer overflow
in network ...)
+ TODO: check
+CVE-2026-114409 (Docker Desktop before version 4.97.0 could write third-party
API keys ...)
+ TODO: check
+CVE-2026-113881 (A stack-based buffer overflow vulnerability in Fireware OS's
VPN Netwo ...)
+ TODO: check
+CVE-2026-113775 (A maliciously crafted dynamic library, when loaded from an
arbitrary p ...)
+ TODO: check
+CVE-2026-113644 (In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and
3.8.0-rc.1 ...)
+ TODO: check
+CVE-2026-112710 (A heap-based buffer overflow vulnerability exists in the
Fireware OS a ...)
+ TODO: check
+CVE-2026-112709 (A heap-based buffer overflow vulnerability in the Fireware OS
authenti ...)
+ TODO: check
+CVE-2026-112362 (@fastify/express is a Fastify plugin that runs Express
middleware insi ...)
+ TODO: check
+CVE-2026-112353 (GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2
contains a stor ...)
+ TODO: check
+CVE-2026-111585 (An integer overflow in the remote-control screen processing
component ...)
+ TODO: check
+CVE-2026-111584 (A race condition in the installation process of TeamViewer
Remote Mana ...)
+ TODO: check
+CVE-2026-111583 (Improper access control in the installer staging directory
used by Tea ...)
+ TODO: check
+CVE-2026-111582 (A DLL loading vulnerability in the TeamViewer Remote
Management Monito ...)
+ TODO: check
+CVE-2026-111548 (A stack-based buffer overflow vulnerabilityexists in the web
managemen ...)
+ TODO: check
+CVE-2026-111461 (An OS command injection vulnerability exists inOnCell
G3150A-LTE Serie ...)
+ TODO: check
+CVE-2026-111460 (A hard-coded cryptographic key vulnerability exists in the
OnCell G315 ...)
+ TODO: check
+CVE-2026-111459 (An improper certificate validation vulnerability exists in
Moxa Remote ...)
+ TODO: check
+CVE-2026-111107 (A NULL pointer dereference vulnerability in WatchGuard
Fireware OS\u20 ...)
+ TODO: check
+CVE-2026-111054
+ REJECTED
+CVE-2026-110737 (The push endpoint of a Vaadin application that uses server
push reflec ...)
+ TODO: check
+CVE-2026-10756 (TRO600 contains a vulnerability that allows an authenticated
attacker ...)
+ TODO: check
+CVE-2026-10752 (The Advanced Custom Fields: Extended plugin for WordPress is
vulnerabl ...)
+ TODO: check
+CVE-2026-10537 (A misconfiguration issue in the affected service in
Control-M/Enterpri ...)
+ TODO: check
+CVE-2026-10511 (The Jupiter X Core plugin for WordPress is vulnerable to
Stored Cross- ...)
+ TODO: check
+CVE-2026-109995 (The Advanced Views \u2013 Display Framework for Gutenberg &
Elementor ...)
+ TODO: check
+CVE-2026-109823 (An attacker can read the name of filesystem paths of your
application ...)
+ TODO: check
+CVE-2026-108333 (Tanium addressed a use-after-free vulnerability in Threat
Response Cli ...)
+ TODO: check
+CVE-2026-108332 (Tanium addressed an improper link resolution before file
access vulner ...)
+ TODO: check
+CVE-2026-108331 (Tanium addressed an infinite loop vulnerability in Threat
Response Cli ...)
+ TODO: check
+CVE-2026-108330 (Tanium addressed an information disclosure vulnerability in
Threat Res ...)
+ TODO: check
+CVE-2026-108329 (Tanium addressed an unauthorized code execution vulnerability
in Threa ...)
+ TODO: check
+CVE-2026-108328 (Tanium addressed an insertion of sensitive information into
log file v ...)
+ TODO: check
+CVE-2026-108326 (Tanium addressed an improper certificate validation
vulnerability in S ...)
+ TODO: check
+CVE-2026-108325 (Tanium addressed an insertion of sensitive information into
log file v ...)
+ TODO: check
+CVE-2026-108316 (Tanium addressed an information disclosure vulnerability in
Tanium Ser ...)
+ TODO: check
+CVE-2026-108313 (Tanium addressed an incorrect privilege assignment
vulnerability in Ta ...)
+ TODO: check
+CVE-2026-108311 (Tanium addressed an insufficient logging vulnerability in
Tanium Serve ...)
+ TODO: check
+CVE-2026-108310 (Tanium addressed a denial of service vulnerability in Tanium
Server.)
+ TODO: check
+CVE-2026-108309 (Tanium addressed an uncontrolled resource consumption
vulnerability in ...)
+ TODO: check
+CVE-2026-108308 (Tanium addressed a SQL injection vulnerability in Patch.)
+ TODO: check
+CVE-2026-108307 (Tanium addressed a heap-based buffer overflow vulnerability
in Index.)
+ TODO: check
+CVE-2026-108306 (Tanium addressed a local privilege escalation vulnerability
in End-Use ...)
+ TODO: check
+CVE-2026-108305 (Tanium addressed a local privilege escalation vulnerability
in End-Use ...)
+ TODO: check
+CVE-2026-108304 (Tanium addressed a local privilege escalation vulnerability
in End-Use ...)
+ TODO: check
+CVE-2026-108303 (Tanium addressed an unauthorized code execution vulnerability
in Certi ...)
+ TODO: check
+CVE-2026-108302 (Tanium addressed an improper access controls vulnerability in
Comply.)
+ TODO: check
+CVE-2026-108301 (Tanium addressed an improper access controls vulnerability in
Comply.)
+ TODO: check
+CVE-2026-108142 (A vulnerability allowing an unauthenticated attacker to
bypass authori ...)
+ TODO: check
+CVE-2026-108141 (A vulnerability allowing an authenticated user with the
Restore Operat ...)
+ TODO: check
+CVE-2026-108140 (A vulnerability allowing an authenticated user with the
Restore Operat ...)
+ TODO: check
+CVE-2026-108015 (Private keys for eight eMudhra intermediate CA certificates
have been ...)
+ TODO: check
+CVE-2026-108014 (Private keys for eight eMudhra intermediate CA certificates
have been ...)
+ TODO: check
+CVE-2026-107672 (A maliciously crafted .stack.json file can trigger a trusted
Markdown ...)
+ TODO: check
+CVE-2026-107671 (A vulnerability allowing an attacker with valid Administrator
credenti ...)
+ TODO: check
+CVE-2026-107590 (An out-of-bounds write vulnerability in the Qt QTextCodec
iconv-based ...)
+ TODO: check
+CVE-2026-107472 (An out-of-bounds read vulnerability in the QTextCodec TSCII
encoding o ...)
+ TODO: check
+CVE-2026-107458
+ REJECTED
+CVE-2026-107147 (The twofactor_gauthenticator plugin for Roundcube is
vulnerable to 2fa ...)
+ TODO: check
+CVE-2026-107146 (The twofactor_gauthenticator plugin for Roundcube is
vulnerable to ses ...)
+ TODO: check
+CVE-2026-107145 (The twofactor_gauthenticator plugin for Roundcube is
vulnerable to bru ...)
+ TODO: check
+CVE-2026-107067 (An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier
allow a local ...)
+ TODO: check
+CVE-2026-106087 (TRO600 contains an arbitrary file read vulnerability. An
unauthenticat ...)
+ TODO: check
+CVE-2026-106078 (A vulnerability allowing an unauthenticated attacker to
bypass REST AP ...)
+ TODO: check
+CVE-2026-106077 (A vulnerability allowing a user with the Veeam Backup for
Microsoft 36 ...)
+ TODO: check
+CVE-2026-106076 (A vulnerability allowing an authenticated
organization-transfer peer t ...)
+ TODO: check
+CVE-2026-105987 (KGS Software tia Viewer is vulnerable to Stored XSS via the
annotation ...)
+ TODO: check
+CVE-2026-105781 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
+ TODO: check
+CVE-2026-105780 (Adobe Campaign Classic (ACC) is affected by an Incorrect
Authorization ...)
+ TODO: check
+CVE-2026-105779 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
+ TODO: check
+CVE-2026-105489 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
+ TODO: check
+CVE-2026-105477 (A vulnerability in Veeam Agent for Linux allows for local
privilege es ...)
+ TODO: check
+CVE-2026-105323 (Improper neutralization of input during web page generation
('cross-si ...)
+ TODO: check
+CVE-2026-104381 (A missing authentication vulnerability in Fireware OS's
FireCluster st ...)
+ TODO: check
+CVE-2026-104354 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
+ TODO: check
+CVE-2026-104353 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
+ TODO: check
+CVE-2026-104351 (Adobe Campaign Classic (ACC) is affected by an Improper
Control of Gen ...)
+ TODO: check
+CVE-2026-104350 (Adobe Campaign Classic (ACC) is affected by a reflected
Cross-Site Scr ...)
+ TODO: check
+CVE-2026-104349 (Creative Cloud Desktop is affected by an Uncontrolled Search
Path Elem ...)
+ TODO: check
+CVE-2026-104189 (The 3D Viewer for Nextcloud is a comprehensive 3D model
viewer applica ...)
+ TODO: check
+CVE-2026-103594 (A stack-based buffer overflow vulnerability in Fireware OS's
WireGuard ...)
+ TODO: check
+CVE-2026-103593 (A stack-based buffer overflow vulnerability in the Fireware
OS logging ...)
+ TODO: check
+CVE-2026-102816 (An authorization vulnerability exists in the country or
region configu ...)
+ TODO: check
+CVE-2026-102815 (An operating-system command injection vulnerability exists in
the tmpS ...)
+ TODO: check
+CVE-2026-102814 (An authentication weakness exists in the TP-Link TDDP v2
service of TP ...)
+ TODO: check
+CVE-2026-102813 (An authentication flaw exists in the password-recovery
functionality o ...)
+ TODO: check
+CVE-2026-102812 (A hard-coded cryptographic key vulnerability exists in the
user-config ...)
+ TODO: check
+CVE-2026-102800 (Joomla Extension - dj-extensions.com - Unauthenticated Stored
XSS in D ...)
+ TODO: check
+CVE-2026-102789 (Joomla Extension - balbooa.com - Missing Authorization Check
on Editor ...)
+ TODO: check
+CVE-2026-102788 (Joomla Extension - balbooa.com - Unauthenticated SQL
injection in Grid ...)
+ TODO: check
+CVE-2026-102787 (Joomla Extension - phoca.cz - CSRF in category management in
Phoca Dow ...)
+ TODO: check
+CVE-2026-102638 (A maliciously crafted HTML payload in the description of an
electronic ...)
+ TODO: check
+CVE-2026-102637 (A maliciously crafted HTML payload in the documentName
parameter of a ...)
+ TODO: check
+CVE-2026-102636 (A maliciously crafted HTML payload in a design name, when
displayed af ...)
+ TODO: check
+CVE-2026-101034 (An attacker who obtained the hardcoded key could decrypt
domain/servic ...)
+ TODO: check
+CVE-2026-100164 (Observable response discrepancy vulnerability in Rolantis
Information ...)
+ TODO: check
+CVE-2025-64394 (A vulnerability allowing a low-privileged local user to write
arbitrar ...)
+ TODO: check
CVE-2026-XXXX [qbittorrent: WebUI authentication bypass via spoofed
X-Forwarded-For]
- qbittorrent 5.3.0-1 (bug #1151739)
[trixie] - qbittorrent <no-dsa> (Minor issue)
@@ -1286,7 +2256,7 @@ CVE-2026-116476 (A weakness has been identified in
a2aproject a2a-dotnet up to 1
NOT-FOR-US: a2aproject a2a-dotnet
CVE-2026-116471 (A security flaw has been discovered in BKWLD Decoy up to
5.11.1. The i ...)
NOT-FOR-US: BKWLD Decoy
-CVE-2026-116469 (MISP Guard, a proxy-based security filter for MISP (Malware
Informatio ...)
+CVE-2026-116469 (MISP Guard, a proxy-based security filter for MISP feed
distribution, ...)
NOT-FOR-US: MISP Guard
CVE-2026-116467 (A security flaw has been discovered in ggml-org llama.cpp up
to 0.7.0. ...)
- llama.cpp <unfixed>
@@ -1635,7 +2605,7 @@ CVE-2026-108525 (Allocation of Resources Without Limits
or Throttling vulnerabil
NOT-FOR-US: Bandit (mtrudel/bandit, not the same as src:bandit)
CVE-2026-107656 (An authentication bypass using an alternate path or channel
vulnerabil ...)
NOT-FOR-US: Fortinet
-CVE-2026-107157 (Out-of-bounds read vulnerability in QCborValue::fromCbor()
impacts Qt ...)
+CVE-2026-107157 (Specially crafted CBOR input passed to QCborValue::fromCbor()
in Qt Co ...)
TODO: check
CVE-2026-107092 (NexoPOS v6.2.4 is vulnerable to Directory Traversal via the
api/update ...)
NOT-FOR-US: NexoPOS
@@ -4945,6 +5915,7 @@ CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer
Overflow Remote Code E
- gimp 3.2.6-1
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/gimp/-/commit/e4b0d6bc389df4b9b439a3f4e1155e4de965869e
(GIMP_3_2_6)
CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
+ {DSA-6588-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6026,6 +6997,7 @@ CVE-2026-111817 (Apache Traffic Server can stall a
chunked transfer that it pass
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
CVE-2026-73206 [A crafted DNS packet can cause a denial of service
decompressing the DNS names in the packet]
+ {DSA-6587-1}
- pdns 5.1.5-1 (bug #1152255)
- pdns-recursor 5.4.8-1
NOTE:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-12.html#cve-2026-73206-crafted-packet-using-compression-pointers-can-lead-to-denial-of-service
@@ -6393,7 +7365,7 @@ CVE-2026-91489 (Vulnerability in the Oracle Identity
Manager Connector product o
CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product
of Orac ...)
NOT-FOR-US: Oracle
CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler).
Supported vers ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6441,7 +7413,7 @@ CVE-2026-91466 (Vulnerability in the PeopleSoft
Enterprise FIN Common Objects Ar
CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects
Argentin ...)
NOT-FOR-US: Oracle
CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6450,7 +7422,7 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6459,7 +7431,7 @@ CVE-2026-91463 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6468,7 +7440,7 @@ CVE-2026-91462 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6487,7 +7459,7 @@ CVE-2026-91457 (Vulnerability in the Oracle Outside In
Technology product of Ora
CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of
Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6496,7 +7468,7 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6505,7 +7477,7 @@ CVE-2026-91452 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking).
Supported ve ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6576,7 +7548,7 @@ CVE-2026-91420 (Vulnerability in the Siebel CRM
Deployment product of Oracle Sie
CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle
Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle
GraalVM for ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6588,7 +7560,7 @@ CVE-2026-91417 (Vulnerability in the Oracle Java SE,
Oracle GraalVM Enterprise E
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6603,14 +7575,14 @@ CVE-2026-91413 (Vulnerability in the Siebel CRM
Development product of Oracle Si
CVE-2026-91412 (Vulnerability in the Siebel CRM End User product of Oracle
Siebel CRM ...)
NOT-FOR-US: Oracle
CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries).
Supported ver ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6636,7 +7608,7 @@ CVE-2026-91402 (Vulnerability in the Oracle Java SE,
Oracle JavaFX, Oracle Graal
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only
affects 21 and later)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6647,7 +7619,7 @@ CVE-2026-91400 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6656,7 +7628,7 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6673,7 +7645,7 @@ CVE-2026-91395 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-11 <unfixed>
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK
product of ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -6706,7 +7678,7 @@ CVE-2026-91384 (Vulnerability in the JD Edwards
EnterpriseOne Tools product of O
CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of
Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6716,7 +7688,7 @@ CVE-2026-91381 (Vulnerability in the Oracle Java SE,
Oracle GraalVM Enterprise E
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6725,7 +7697,7 @@ CVE-2026-91380 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6740,7 +7712,7 @@ CVE-2026-91377 (Vulnerability in the Siebel CRM
Integration product of Oracle Si
CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio
Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries).
Supported ver ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6749,7 +7721,7 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE
(component: Libraries). Support
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6758,7 +7730,7 @@ CVE-2026-91374 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported
versions ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6841,7 +7813,7 @@ CVE-2026-91337 (Vulnerability in the iProcurement product
of Oracle E-Business S
CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
NOT-FOR-US: Oracle
CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6850,7 +7822,7 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6859,12 +7831,13 @@ CVE-2026-91334 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security).
Supported vers ...)
+ {DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking).
Supported ve ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7233,7 +8206,7 @@ CVE-2026-87370 (Vulnerability in the Oracle WebCenter
Content product of Oracle
CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle
Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7384,7 +8357,7 @@ CVE-2026-87296 (Vulnerability in the Oracle Access
Manager product of Oracle Fus
CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle
E-Business ...)
NOT-FOR-US: Oracle
CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7396,7 +8369,7 @@ CVE-2026-87293 (Vulnerability in Oracle Java SE
(component: RMI). Supported ver
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7405,12 +8378,13 @@ CVE-2026-87292 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking).
Supported ve ...)
+ {DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7449,7 +8423,7 @@ CVE-2026-83402 (Vulnerability in the Oracle Identity
Manager product of Oracle F
CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle
Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7466,7 +8440,7 @@ CVE-2026-83397 (Vulnerability in the Oracle Data
Integrator product of Oracle Fu
CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle
Fusion M ...)
NOT-FOR-US: Oracle
CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7489,7 +8463,7 @@ CVE-2026-83389 (Vulnerability in the Oracle HRMS (UK)
product of Oracle E-Busine
CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of
Oracle E-B ...)
NOT-FOR-US: Oracle
CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7508,7 +8482,7 @@ CVE-2026-83383 (Vulnerability in the Oracle HRMS (US)
product of Oracle E-Busine
CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle
E-Busines ...)
NOT-FOR-US: Oracle
CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security).
Supported vers ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7517,7 +8491,7 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE
(component: Security). Supporte
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7528,6 +8502,7 @@ CVE-2026-83380 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in
product of O ...)
NOT-FOR-US: Oracle
CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler).
Supported vers ...)
+ {DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
@@ -7535,7 +8510,7 @@ CVE-2026-83378 (Vulnerability in Oracle Java SE
(component: Compiler). Supporte
CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle
E-Business Sui ...)
NOT-FOR-US: Oracle
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7546,7 +8521,7 @@ CVE-2026-83376 (Vulnerability in the Oracle Java SE,
Oracle GraalVM for JDK, Ora
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources
product ...)
NOT-FOR-US: Oracle
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK,
Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -11818,6 +12793,7 @@ CVE-2026-11319 (TickTick Android application
(com.ticktick.task) 8.2.2.0 contain
CVE-2026-112377 (CCC Attestation SIG attested-tls-poc through commit 731ca82
fails to b ...)
NOT-FOR-US: CCC Attestation SIG attested-tls-poc
CVE-2026-112368 (An uncontrolled recursion weakness in the BSON decoding logic
of the M ...)
+ {DSA-6589-1}
- php-mongodb <unfixed> (bug #1151934)
NOTE: https://jira.mongodb.org/browse/PHPC-276
NOTE: Fixed by:
https://github.com/mongodb/mongo-php-driver/commit/795e914e6f7cc631a2f80c89aedcdd2a1df4ada9
(2.5.5, 2.1.12, 1.21.12)
@@ -29320,6 +30296,7 @@ CVE-2026-106437 (The BSON buffer-reservation API in the
MongoDB C Driver can rec
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/6c593a59a9dce87e42298b85779ca02a9357dd74
(2.5.6)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/b7f1f5742351741c068020196fd88f196551aad2
(1.30.13)
CVE-2026-106436 (The BSON encoder in the MongoDB PHP Driver does not check
some return ...)
+ {DSA-6589-1}
- php-mongodb <unfixed> (bug #1150514)
NOTE: https://jira.mongodb.org/browse/PHPC-2739
NOTE: Fixed by:
https://github.com/mongodb/mongo-php-driver/commit/79036dd7a4c946cfef2d0105f8102f26d685b260
(2.5.4, 2.1.11, 1.21.11)
@@ -29342,6 +30319,7 @@ CVE-2026-106433 (Improper state management in MongoDB
libmongocrypt can cause pr
NOTE: Fixed by:
https://github.com/mongodb/libmongocrypt/commit/556bcb70b6efecb7f568d824b03469df3a3bc91a
(1.20.5)
NOTE: Fixed by:
https://github.com/mongodb/libmongocrypt/commit/8bc580ea69eea13a932197221edf72830fbc38a1
(1.20.5)
CVE-2026-106432 (The BSON encoder in the MongoDB PHP Driver converts a string
length to ...)
+ {DSA-6589-1}
- php-mongodb <unfixed> (bug #1150514)
NOTE: https://jira.mongodb.org/browse/PHPC-2741
NOTE: Fixed by:
https://github.com/mongodb/mongo-php-driver/commit/79036dd7a4c946cfef2d0105f8102f26d685b260
(2.5.4, 2.1.11, 1.21.11)
@@ -31311,7 +32289,7 @@ CVE-2026-101027 (When `[migrations] ALLOWED_DOMAINS`
was configured, a hostname
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-101023 (Gitea's OAuth2 token endpoint verified the signature and
grant of a to ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
-CVE-2026-88812 [XKB SetGeometry TextDoodad Double Free]
+CVE-2026-88812 (A double free inXKB SetGeometryin X.Org X Server before
21.1.25 and X ...)
- xorg-server 2:21.1.25-1 (bug #1150214)
- xwayland 2:24.1.14-1 (bug #1150213; unimportant)
NOTE: Xwayland shouldn't be running as root, cf. README.Debian.security
@@ -42309,7 +43287,7 @@ CVE-2026-94287 (A denial of service via unsigned
underflow in libXpm's write pat
NOTE:
https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
-CVE-2026-109088 [libXtst RECORD EnableContext Reply Endless Loop]
+CVE-2026-109088 (A malicious X server could send malformedRECORD
EnableContextreolies t ...)
- libxtst 2:1.2.6-1
[trixie] - libxtst <no-dsa> (Minor issue)
NOTE:
https://lists.x.org/archives/xorg-announce/2026-October/003752.html
@@ -46564,13 +47542,13 @@ CVE-2026-94604
REJECTED
CVE-2026-94416 (An authorization bypass was found in the Ansible Automation
Platform ( ...)
NOT-FOR-US: Red Hat Ansible Automation Platform
-CVE-2026-109090 [libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow]
+CVE-2026-109090 (A malicious X server could cause a heap overflow by injecting
a largeD ...)
- libxi 2:1.8.4-1
[trixie] - libxi <no-dsa> (Minor issue)
NOTE:
https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/26
NOTE: Fixed by:
https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b67034ace1abdf785fd8dcba7b6dc739d
-CVE-2026-109089 [libXi XGetDeviceControl Control Type Mismatch Heap Buffer
Overflow]
+CVE-2026-109089 (A buffer overflow when handling DEVICE_RESOLUTION in libXi
before 1.8. ...)
- libxi 2:1.8.4-1
[trixie] - libxi <no-dsa> (Minor issue)
NOTE:
https://lists.x.org/archives/xorg-announce/2026-October/003752.html
@@ -76729,7 +77707,7 @@ CVE-2026-19795 (Qiskit could allow a local attacker to
cause a denial of service
NOT-FOR-US: IBM
CVE-2026-19224 (The Hummingbird Performance WordPress plugin before 3.21.2
does not r ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-18330 (A hard-coded cryptographic key vulnerability exists in theweb
module o ...)
+CVE-2026-18330 (A hard-coded cryptographic key vulnerability exists in TP-Link
RE305 V ...)
NOT-FOR-US: TPLink
CVE-2026-18167 (A stack-based buffer overflow vulnerability exists in the
EasyMesh mod ...)
NOT-FOR-US: TPLink
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c5436ea4f248fef23b1973b10168939c1a0bc9d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c5436ea4f248fef23b1973b10168939c1a0bc9d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
