[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 27 19:17:53 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0c5436ea by security tracker role at 2026-10-27T19:15:40+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,973 @@
+CVE-2026-94347 (PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7 ...)
+ TODO: check
+CVE-2026-94346 (PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7 ...)
+ TODO: check
+CVE-2026-93866 (An integer overflow vulnerability in the WebSocket connection handling ...)
+ TODO: check
+CVE-2026-93865 (A missing authentication vulnerability in the Fireware OS FireCluster ...)
+ TODO: check
+CVE-2026-93864 (A link following vulnerability in WatchGuard Fireware OS\u2019s firewa ...)
+ TODO: check
+CVE-2026-93862 (An out-of-bounds read vulnerability in the FireCluster Sync processing ...)
+ TODO: check
+CVE-2026-93857 (A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy ...)
+ TODO: check
+CVE-2026-93434 (An XPath injection vulnerability in WatchGuard Fireware OS's SSH authe ...)
+ TODO: check
+CVE-2026-92885 (The Qode Membership plugin for WordPress is vulnerable to Authenticati ...)
+ TODO: check
+CVE-2026-92546 (Authentication bypass by spoofing vulnerability in Keepnet Labs Cybers ...)
+ TODO: check
+CVE-2026-92377 (Improper access control in the Patch Management update mechanism of Te ...)
+ TODO: check
+CVE-2026-92376 (Improper authentication in the inter-process communication (IPC) mecha ...)
+ TODO: check
+CVE-2026-92375 (An improper access control vulnerability in the IPC communication betw ...)
+ TODO: check
+CVE-2026-92374 (A time-of-check time-of-use (TOCTOU) race condition combined with impr ...)
+ TODO: check
+CVE-2026-92372 (An out-of-bounds write vulnerability in the screen-image decoder of Te ...)
+ TODO: check
+CVE-2026-90732 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90731 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90730 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90729 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90728 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90727 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90726 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90725 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-90465 (A missing authentication vulnerability in the FireCluster Sync process ...)
+ TODO: check
+CVE-2026-90464 (An external control of file path vulnerability in a WatchGuard Firewar ...)
+ TODO: check
+CVE-2026-90442 (A stack-based buffer overflow vulnerability in the Fireware OS certd p ...)
+ TODO: check
+CVE-2026-87897 (A SSRF vulnerability found that enables access to internal Chrome Devt ...)
+ TODO: check
+CVE-2026-87086 (Tanium addressed a denial of service vulnerability in Provision.)
+ TODO: check
+CVE-2026-87085 (Tanium addressed a SQL injection vulnerability in Provision.)
+ TODO: check
+CVE-2026-86577 (Out-of-bounds Write Vulnerability in JP1 Products. This issue affects ...)
+ TODO: check
+CVE-2026-86576 (Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue ...)
+ TODO: check
+CVE-2026-86575 (Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue ...)
+ TODO: check
+CVE-2026-86574 (Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affe ...)
+ TODO: check
+CVE-2026-85299 (A Missing Authorization vulnerability in the disks.createSnapshot and ...)
+ TODO: check
+CVE-2026-82986 (The user in a group can bypass the group restriction set by an adminis ...)
+ TODO: check
+CVE-2026-82984 (When a team was configured as "visible to everyone", the web UI correc ...)
+ TODO: check
+CVE-2026-82983 (The Tables app's share-listing endpoint (GET /apps/tables/share/table/ ...)
+ TODO: check
+CVE-2026-82332 (An improper authentication vulnerability in WatchGuard Fireware OS's A ...)
+ TODO: check
+CVE-2026-82122 (Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affec ...)
+ TODO: check
+CVE-2026-82121 (Origin Validation Error Vulnerability in HiRDB. This issue affects H ...)
+ TODO: check
+CVE-2026-82120 (Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affect ...)
+ TODO: check
+CVE-2026-82119 (OS Command Injection Vulnerability in HiRDB. This issue affects HiRD ...)
+ TODO: check
+CVE-2026-82118 (Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affec ...)
+ TODO: check
+CVE-2026-82117 (Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue ...)
+ TODO: check
+CVE-2026-82116 (Missing Authentication for Critical Function Vulnerability in HiRDB. ...)
+ TODO: check
+CVE-2026-78845 (Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart L ...)
+ TODO: check
+CVE-2026-77173 (A user could create a docx or odt file with a # in the filename with c ...)
+ TODO: check
+CVE-2026-77172 (App passwords were allowed to bypass password confirmation on sensitiv ...)
+ TODO: check
+CVE-2026-77171 (A public shared collective always allowed recipients of the link to cr ...)
+ TODO: check
+CVE-2026-77167 (Abusing the federated share endpoint, an attacker can write arbitrary ...)
+ TODO: check
+CVE-2026-76939 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
+ TODO: check
+CVE-2026-76938 (Authentication Bypass Vulnerability in JP1/Automatic Job Management Sy ...)
+ TODO: check
+CVE-2026-76937 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
+ TODO: check
+CVE-2026-76936 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
+ TODO: check
+CVE-2026-76935 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
+ TODO: check
+CVE-2026-76934 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
+ TODO: check
+CVE-2026-76933 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
+ TODO: check
+CVE-2026-76932 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
+ TODO: check
+CVE-2026-68866 (PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7 ...)
+ TODO: check
+CVE-2026-67400 (A missing token type check allowed to retrieve more additional informa ...)
+ TODO: check
+CVE-2026-65220 (A logic flaw in the BMC IPMI implementation may allow an attacker to s ...)
+ TODO: check
+CVE-2026-65219 (A flaw in the BMC RAKP+ implementation may allow an attacker to send a ...)
+ TODO: check
+CVE-2026-65213 (This issue may allow an IPMI authenticated administrator to execute co ...)
+ TODO: check
+CVE-2026-65211 (This issue may allow an authenticated IPMI Administrator to read and w ...)
+ TODO: check
+CVE-2026-65210 (This issue may allow an authenticated IPMI Administrator to read arbit ...)
+ TODO: check
+CVE-2026-65151 (NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker cou ...)
+ TODO: check
+CVE-2026-65145 (NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker co ...)
+ TODO: check
+CVE-2026-65120 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker could c ...)
+ TODO: check
+CVE-2026-65119 (NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCac ...)
+ TODO: check
+CVE-2026-57202 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57201 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57198 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57197 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57194 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57189 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57188 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-57185 (Asterisk is an open source private branch exchange and telephony toolk ...)
+ TODO: check
+CVE-2026-56084 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
+ TODO: check
+CVE-2026-54462 (Knative pkg provides common packages shared across Knative repositorie ...)
+ TODO: check
+CVE-2026-4337 (Unrestricted Upload of File with Dangerous Type vulnerability in the P ...)
+ TODO: check
+CVE-2026-48380 (Substance3D - Painter is affected by an out-of-bounds read vulnerabili ...)
+ TODO: check
+CVE-2026-48379 (Substance3D - Painter is affected by a Stack-based Buffer Overflow vul ...)
+ TODO: check
+CVE-2026-48360 (Adobe Connect is affected by an Improper Control of Generation of Code ...)
+ TODO: check
+CVE-2026-47486 (NVIDIA PhysX for all platforms contains a vulnerability where an attac ...)
+ TODO: check
+CVE-2026-41022 (Eaton easySoft improperly validates TLS certificates presented by easy ...)
+ TODO: check
+CVE-2026-41021 (Eaton easyE4 uses an insufficiently strong password policy. An attacke ...)
+ TODO: check
+CVE-2026-41020 (Eaton easyE4 uses a static nonce during authentication, which could al ...)
+ TODO: check
+CVE-2026-24269 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker could c ...)
+ TODO: check
+CVE-2026-18451 (The HTML5 KVM-over-IP console authenticates with a token returned by t ...)
+ TODO: check
+CVE-2026-18450 (The BMC does not correctly enforce integrity and encryption requiremen ...)
+ TODO: check
+CVE-2026-18449 (The BMC does not correctly enforce integrity and encryption requiremen ...)
+ TODO: check
+CVE-2026-16521 (An OS command injection vulnerability exists because of insufficient i ...)
+ TODO: check
+CVE-2026-16491 (Grafana\u2019s RBAC service ignored the requested folder when checking ...)
+ TODO: check
+CVE-2026-16307 (Authorization bypass through User-Controlled key vulnerability in Neti ...)
+ TODO: check
+CVE-2026-15586 (Improper restriction of excessive authentication attempts vulnerabilit ...)
+ TODO: check
+CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat allows authe ...)
+ TODO: check
+CVE-2026-12887 (In affected versions of Octopus Server, a user with permission to uplo ...)
+ TODO: check
+CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the homeserver a ...)
+ TODO: check
+CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID made Thun ...)
+ TODO: check
+CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or newLocation ele ...)
+ TODO: check
+CVE-2026-118177 (When looking for calendars in a directory on a server, during account ...)
+ TODO: check
+CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from accessing files o ...)
+ TODO: check
+CVE-2026-118175 (When replying to, forwarding, or editing a crafted email message as ne ...)
+ TODO: check
+CVE-2026-118174 (When a message containing an OpenPGP key attachment was displayed, Thu ...)
+ TODO: check
+CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP feed data, ...)
+ TODO: check
+CVE-2026-118172 (The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable ...)
+ TODO: check
+CVE-2026-118171 (The strapi/content-manager package is missing content-scope authorizat ...)
+ TODO: check
+CVE-2026-118170 (The strapi/review-workflows package is vulnerable to a broken access c ...)
+ TODO: check
+CVE-2026-118132 (NextChat version 2.16.1 contains a client\u2011side cross\u2011site sc ...)
+ TODO: check
+CVE-2026-118131 (GnuPG (version 2.5.21) for Windows contains a vulnerability where defa ...)
+ TODO: check
+CVE-2026-118027 (Frame poisoning in the Layout component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-118026 (Invalid pointer in the JavaScript: GC component. This vulnerability wa ...)
+ TODO: check
+CVE-2026-118025 (Other issue in the SVG component. This vulnerability was fixed in Fire ...)
+ TODO: check
+CVE-2026-118024 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
+ TODO: check
+CVE-2026-118023 (Sandbox escape due to use-after-free in the Graphics: WebRender compon ...)
+ TODO: check
+CVE-2026-118022 (Sandbox escape due to use-after-free in the Disability Access APIs com ...)
+ TODO: check
+CVE-2026-118021 (Sandbox escape due to use-after-free in the XPCOM component. This vuln ...)
+ TODO: check
+CVE-2026-118020 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
+ TODO: check
+CVE-2026-118019 (Race condition, use-after-free in the DOM: File component. This vulner ...)
+ TODO: check
+CVE-2026-118018 (Spoofing issue in the Downloads component in Firefox for Android. This ...)
+ TODO: check
+CVE-2026-118017 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-118016 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-118015 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-118014 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
+ TODO: check
+CVE-2026-118013 (Use-after-free in the Layout: Images, Video, and HTML Frames component ...)
+ TODO: check
+CVE-2026-118012 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
+ TODO: check
+CVE-2026-118011 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
+ TODO: check
+CVE-2026-118010 (Use-after-free in the Disability Access APIs component. This vulnerabi ...)
+ TODO: check
+CVE-2026-118009 (Integer overflow, use-after-free in the Graphics: Text component. This ...)
+ TODO: check
+CVE-2026-118008 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
+ TODO: check
+CVE-2026-118007 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
+ TODO: check
+CVE-2026-118006 (Privilege escalation due to use-after-free in the WebRTC: Signaling co ...)
+ TODO: check
+CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This vulnerability ...)
+ TODO: check
+CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animations co ...)
+ TODO: check
+CVE-2026-118003 (Information disclosure in the Networking: DNS component. This vulnerab ...)
+ TODO: check
+CVE-2026-118002 (Information disclosure due to race condition in the Networking compone ...)
+ TODO: check
+CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This vulnera ...)
+ TODO: check
+CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. This vulne ...)
+ TODO: check
+CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. This vul ...)
+ TODO: check
+CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vulnerabil ...)
+ TODO: check
+CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling component. ...)
+ TODO: check
+CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
+ TODO: check
+CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation component. T ...)
+ TODO: check
+CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
+ TODO: check
+CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
+ TODO: check
+CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Graphics: C ...)
+ TODO: check
+CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
+ TODO: check
+CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Overflow co ...)
+ TODO: check
+CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
+ TODO: check
+CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerability was ...)
+ TODO: check
+CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender component. Th ...)
+ TODO: check
+CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
+ TODO: check
+CVE-2026-117977 (Other issue in the Console component. This vulnerability was fixed in ...)
+ TODO: check
+CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
+ TODO: check
+CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRender compo ...)
+ TODO: check
+CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerability wa ...)
+ TODO: check
+CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
+ TODO: check
+CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview component. T ...)
+ TODO: check
+CVE-2026-117970 (Race condition in the Disability Access APIs component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
+ TODO: check
+CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulnerabilit ...)
+ TODO: check
+CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers component. T ...)
+ TODO: check
+CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Storage: Qu ...)
+ TODO: check
+CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
+ TODO: check
+CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. This vulne ...)
+ TODO: check
+CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This vulnerab ...)
+ TODO: check
+CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
+ TODO: check
+CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulnerability ...)
+ TODO: check
+CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component. This ...)
+ TODO: check
+CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
+ TODO: check
+CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulnerability ...)
+ TODO: check
+CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
+ TODO: check
+CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
+ TODO: check
+CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vulnerabil ...)
+ TODO: check
+CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
+ TODO: check
+CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
+ TODO: check
+CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
+ TODO: check
+CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
+ TODO: check
+CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability was fi ...)
+ TODO: check
+CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
+ TODO: check
+CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
+ TODO: check
+CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
+ TODO: check
+CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
+ TODO: check
+CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
+ TODO: check
+CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
+ TODO: check
+CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vulnerabili ...)
+ TODO: check
+CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
+ TODO: check
+CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline componen ...)
+ TODO: check
+CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
+ TODO: check
+CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
+ TODO: check
+CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
+ TODO: check
+CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
+ TODO: check
+CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
+ TODO: check
+CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability was fix ...)
+ TODO: check
+CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
+ TODO: check
+CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
+ TODO: check
+CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
+ TODO: check
+CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
+ TODO: check
+CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability was fi ...)
+ TODO: check
+CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
+ TODO: check
+CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling component. This ...)
+ TODO: check
+CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. This vul ...)
+ TODO: check
+CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Networking c ...)
+ TODO: check
+CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
+ TODO: check
+CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
+ TODO: check
+CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This vulnera ...)
+ TODO: check
+CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component. This vu ...)
+ TODO: check
+CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerability was f ...)
+ TODO: check
+CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability was fix ...)
+ TODO: check
+CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
+ TODO: check
+CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
+ TODO: check
+CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
+ TODO: check
+CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component. This ...)
+ TODO: check
+CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
+ TODO: check
+CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component. This v ...)
+ TODO: check
+CVE-2026-117874 (Use-after-free in the Internationalization component. This vulnerabili ...)
+ TODO: check
+CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
+ TODO: check
+CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. This vul ...)
+ TODO: check
+CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability was fixe ...)
+ TODO: check
+CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnerability ...)
+ TODO: check
+CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
+ TODO: check
+CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
+ TODO: check
+CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
+ TODO: check
+CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
+ TODO: check
+CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
+ TODO: check
+CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerability was f ...)
+ TODO: check
+CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio/Video ...)
+ TODO: check
+CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in the Netwo ...)
+ TODO: check
+CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
+ TODO: check
+CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
+ TODO: check
+CVE-2026-117604 (Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in ...)
+ TODO: check
+CVE-2026-117603 (Electrum before 4.7.2 contains a spending limit bypass vulnerability i ...)
+ TODO: check
+CVE-2026-117602 (Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the ex ...)
+ TODO: check
+CVE-2026-117601 (Electrum before 4.8.3 fails to verify signatures of wallet-owned input ...)
+ TODO: check
+CVE-2026-117573 (hagent through commit 761eec6 contains an OS command injection vulnera ...)
+ TODO: check
+CVE-2026-117570 (Vorota-ai nmap-mcp through commit 3636afa contains an improper allowli ...)
+ TODO: check
+CVE-2026-117569 (Kali-GPT through commit a608c74 contains an OS command injection vulne ...)
+ TODO: check
+CVE-2026-117568 (mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerabilit ...)
+ TODO: check
+CVE-2026-117567 (esp-mcp through commit 28afddf contains an OS command injection vulner ...)
+ TODO: check
+CVE-2026-117566 (EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal ...)
+ TODO: check
+CVE-2026-117565 (Artalk before 2.10.1 contains an unauthenticated server-side request f ...)
+ TODO: check
+CVE-2026-117564 (nest-admin before 1.0.1 contains an authentication bypass vulnerabilit ...)
+ TODO: check
+CVE-2026-117563 (MrDoc through 1.1.1 contains a broken access control vulnerability in ...)
+ TODO: check
+CVE-2026-117562 (rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerabil ...)
+ TODO: check
+CVE-2026-117561 (Codefriar sf-mcp through 1.3.2 contains an OS command injection vulner ...)
+ TODO: check
+CVE-2026-117560 (ATXP Gemini CLI extension through 1.0.0 contains an OS command injecti ...)
+ TODO: check
+CVE-2026-117559 (DroidMind through 0.4.0 contains a command injection vulnerability tha ...)
+ TODO: check
+CVE-2026-117558 (The ai-sdlc plugin MCP server through 0.31.2 contains an OS command in ...)
+ TODO: check
+CVE-2026-117557 (SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bou ...)
+ TODO: check
+CVE-2026-117556 (zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability i ...)
+ TODO: check
+CVE-2026-117555 (CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in ...)
+ TODO: check
+CVE-2026-117554 (Admidio before 5.0.17 contains an improper access control vulnerabilit ...)
+ TODO: check
+CVE-2026-117553 (Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass ...)
+ TODO: check
+CVE-2026-117541 (svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception ...)
+ TODO: check
+CVE-2026-117540 (svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vul ...)
+ TODO: check
+CVE-2026-117539 (darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remo ...)
+ TODO: check
+CVE-2026-117538 (REDAXO before 5.21.0 contains a reflected cross-site scripting vulnera ...)
+ TODO: check
+CVE-2026-117537 (REDAXO before 5.21.0 contains a reflected cross-site scripting vulnera ...)
+ TODO: check
+CVE-2026-117536 (REDAXO before 5.21.3 contains a cross-site request forgery vulnerabili ...)
+ TODO: check
+CVE-2026-117535 (REDAXO before 5.21.3 contains a reflected cross-site scripting vulnera ...)
+ TODO: check
+CVE-2026-117534 (REDAXO before 5.21.3 contains a cross-site request forgery vulnerabili ...)
+ TODO: check
+CVE-2026-117533 (REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scriptin ...)
+ TODO: check
+CVE-2026-117532 (REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass ...)
+ TODO: check
+CVE-2026-117530 (In JetBrains Junie CLI before 26.8.17 command execution was possible d ...)
+ TODO: check
+CVE-2026-117526 (A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by ...)
+ TODO: check
+CVE-2026-117516 (A weakness has been identified in oretnom23 php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-117515 (A security flaw has been discovered in oretnom23 php-travel-agency-sys ...)
+ TODO: check
+CVE-2026-117514 (A vulnerability was identified in oretnom23 php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-117513 (A vulnerability was determined in oretnom23 php-travel-agency-system. ...)
+ TODO: check
+CVE-2026-117512 (A vulnerability was found in oretnom23 php-travel-agency-system. This ...)
+ TODO: check
+CVE-2026-117511 (A vulnerability has been found in desmondmorris node-tesseract up to 0 ...)
+ TODO: check
+CVE-2026-117510 (A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this ...)
+ TODO: check
+CVE-2026-117509 (A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Af ...)
+ TODO: check
+CVE-2026-117507 (A security vulnerability has been detected in a2aproject a2a-java up t ...)
+ TODO: check
+CVE-2026-117506 (A weakness has been identified in a2aproject a2a-java up to 1.2.0.Fina ...)
+ TODO: check
+CVE-2026-117505 (A security flaw has been discovered in a2aproject a2a-java up to 1.2.0 ...)
+ TODO: check
+CVE-2026-117504 (A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The a ...)
+ TODO: check
+CVE-2026-117503 (A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impac ...)
+ TODO: check
+CVE-2026-117499 (@fastify/session is a session plugin for Fastify. In all releases befo ...)
+ TODO: check
+CVE-2026-117494 (Cross-Site Scripting (XSS) in the processing of SVG images submitted t ...)
+ TODO: check
+CVE-2026-117493 (Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards ...)
+ TODO: check
+CVE-2026-117466 (In affected versions of Octopus Server, a user holding the System Mana ...)
+ TODO: check
+CVE-2026-117341 (In affected versions of Octopus Server, creating a user invitation wri ...)
+ TODO: check
+CVE-2026-116900 (REDAXO before 5.21.4 contains a stored cross-site scripting vulnerabil ...)
+ TODO: check
+CVE-2026-116899 (REDAXO before 5.21.4 contains a broken access control vulnerability th ...)
+ TODO: check
+CVE-2026-116898 (REDAXO before 5.21.4 contains a missing authorization vulnerability in ...)
+ TODO: check
+CVE-2026-116897 (REDAXO core before 5.21.4 contains a missing authorization vulnerabili ...)
+ TODO: check
+CVE-2026-116896 (REDAXO before 5.21.5 contains a missing authorization vulnerability in ...)
+ TODO: check
+CVE-2026-116895 (REDAXO before 5.21.5 contains a cross-site request forgery vulnerabili ...)
+ TODO: check
+CVE-2026-116894 (REDAXO before 5.21.5 contains an insufficient session expiration vulne ...)
+ TODO: check
+CVE-2026-116893 (REDAXO core before 5.21.5 contains a missing authorization vulnerabili ...)
+ TODO: check
+CVE-2026-116892 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-s ...)
+ TODO: check
+CVE-2026-116891 (SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-s ...)
+ TODO: check
+CVE-2026-116890 (Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authoriz ...)
+ TODO: check
+CVE-2026-116889 (SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site ...)
+ TODO: check
+CVE-2026-116888 (SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site ...)
+ TODO: check
+CVE-2026-116887 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-sit ...)
+ TODO: check
+CVE-2026-116886 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-sit ...)
+ TODO: check
+CVE-2026-116885 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross- ...)
+ TODO: check
+CVE-2026-116884 (SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site ...)
+ TODO: check
+CVE-2026-116883 (Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-sit ...)
+ TODO: check
+CVE-2026-116882 (Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-sit ...)
+ TODO: check
+CVE-2026-116881 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scrip ...)
+ TODO: check
+CVE-2026-116880 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site reque ...)
+ TODO: check
+CVE-2026-116879 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authoriz ...)
+ TODO: check
+CVE-2026-116878 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled re ...)
+ TODO: check
+CVE-2026-116877 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled re ...)
+ TODO: check
+CVE-2026-116876 (Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper author ...)
+ TODO: check
+CVE-2026-116875 (SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-s ...)
+ TODO: check
+CVE-2026-116874 (SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-s ...)
+ TODO: check
+CVE-2026-116873 (Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authoriz ...)
+ TODO: check
+CVE-2026-116872 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic com ...)
+ TODO: check
+CVE-2026-116871 (Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursi ...)
+ TODO: check
+CVE-2026-116870 (In affected versions of Octopus Server, OIDC token issuer validation w ...)
+ TODO: check
+CVE-2026-116863 (Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software ...)
+ TODO: check
+CVE-2026-116683 (CTFer.io's CTFd Terraform Provider manages CTFd resources as code. Fro ...)
+ TODO: check
+CVE-2026-116682 (FileBrowser Quantum is a free, self-hosted, web-based file manager. Pr ...)
+ TODO: check
+CVE-2026-116680 (HomeBox is a home inventory and organization system. Prior to version ...)
+ TODO: check
+CVE-2026-116679 (Neko is a a self-hosted virtual browser that runs in Docker and uses W ...)
+ TODO: check
+CVE-2026-116678 (Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to ...)
+ TODO: check
+CVE-2026-116677 (OpenWISP Controller is a network and WiFi controller for provisioning, ...)
+ TODO: check
+CVE-2026-116676 (Atlantis is a self-hosted golang application that listens for Terrafor ...)
+ TODO: check
+CVE-2026-116675 (TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and ...)
+ TODO: check
+CVE-2026-116674 (systeminformation is a System and OS information library for node.js. ...)
+ TODO: check
+CVE-2026-116673 (systeminformation is a System and OS information library for node.js. ...)
+ TODO: check
+CVE-2026-116672 (Authlib is a Python library which builds OAuth and OpenID Connect serv ...)
+ TODO: check
+CVE-2026-116662 (Tanium addressed a compression bomb vulnerability in Enforce.)
+ TODO: check
+CVE-2026-116660 (Tanium addressed an improper access controls vulnerability in Enforce.)
+ TODO: check
+CVE-2026-116659 (Tanium addressed an uncontrolled resource consumption vulnerability in ...)
+ TODO: check
+CVE-2026-116658 (Tanium addressed a denial of service vulnerability in Enforce.)
+ TODO: check
+CVE-2026-116657 (Tanium addressed a denial of service vulnerability in Enforce.)
+ TODO: check
+CVE-2026-116656 (Tanium addressed an uncontrolled resource consumption vulnerability in ...)
+ TODO: check
+CVE-2026-116649 (Tanium addressed an improper output sanitization vulnerability in Enfo ...)
+ TODO: check
+CVE-2026-116647 (Tanium addressed an improper output sanitization vulnerability in Comp ...)
+ TODO: check
+CVE-2026-116627 (Improper neutralization of input during web page generation ('Cross-si ...)
+ TODO: check
+CVE-2026-115495 (Cleartext Transmission of Sensitive Information vulnerability in the W ...)
+ TODO: check
+CVE-2026-115413 (Missing token audience validation in the OAuth authentication mode of ...)
+ TODO: check
+CVE-2026-115408 (In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= ...)
+ TODO: check
+CVE-2026-115216 (In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate ...)
+ TODO: check
+CVE-2026-114598 (In EPICS Base release 7.0.10 and prior, an insufficient validation of ...)
+ TODO: check
+CVE-2026-114597 (In EPICS Base release 7.0.10 and prior, an insufficient validation of ...)
+ TODO: check
+CVE-2026-114596 (In EPICS Base release 7.0.10 and prior, an improper validation of mess ...)
+ TODO: check
+CVE-2026-114595 (In EPICS Base release 7.0.10 and prior, an integer overflow in network ...)
+ TODO: check
+CVE-2026-114409 (Docker Desktop before version 4.97.0 could write third-party API keys ...)
+ TODO: check
+CVE-2026-113881 (A stack-based buffer overflow vulnerability in Fireware OS's VPN Netwo ...)
+ TODO: check
+CVE-2026-113775 (A maliciously crafted dynamic library, when loaded from an arbitrary p ...)
+ TODO: check
+CVE-2026-113644 (In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 ...)
+ TODO: check
+CVE-2026-112710 (A heap-based buffer overflow vulnerability exists in the Fireware OS a ...)
+ TODO: check
+CVE-2026-112709 (A heap-based buffer overflow vulnerability in the Fireware OS authenti ...)
+ TODO: check
+CVE-2026-112362 (@fastify/express is a Fastify plugin that runs Express middleware insi ...)
+ TODO: check
+CVE-2026-112353 (GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stor ...)
+ TODO: check
+CVE-2026-111585 (An integer overflow in the remote-control screen processing component ...)
+ TODO: check
+CVE-2026-111584 (A race condition in the installation process of TeamViewer Remote Mana ...)
+ TODO: check
+CVE-2026-111583 (Improper access control in the installer staging directory used by Tea ...)
+ TODO: check
+CVE-2026-111582 (A DLL loading vulnerability in the TeamViewer Remote Management Monito ...)
+ TODO: check
+CVE-2026-111548 (A stack-based buffer overflow vulnerabilityexists in the web managemen ...)
+ TODO: check
+CVE-2026-111461 (An OS command injection vulnerability exists inOnCell G3150A-LTE Serie ...)
+ TODO: check
+CVE-2026-111460 (A hard-coded cryptographic key vulnerability exists in the OnCell G315 ...)
+ TODO: check
+CVE-2026-111459 (An improper certificate validation vulnerability exists in Moxa Remote ...)
+ TODO: check
+CVE-2026-111107 (A NULL pointer dereference vulnerability in WatchGuard Fireware OS\u20 ...)
+ TODO: check
+CVE-2026-111054
+ REJECTED
+CVE-2026-110737 (The push endpoint of a Vaadin application that uses server push reflec ...)
+ TODO: check
+CVE-2026-10756 (TRO600 contains a vulnerability that allows an authenticated attacker ...)
+ TODO: check
+CVE-2026-10752 (The Advanced Custom Fields: Extended plugin for WordPress is vulnerabl ...)
+ TODO: check
+CVE-2026-10537 (A misconfiguration issue in the affected service in Control-M/Enterpri ...)
+ TODO: check
+CVE-2026-10511 (The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross- ...)
+ TODO: check
+CVE-2026-109995 (The Advanced Views \u2013 Display Framework for Gutenberg & Elementor ...)
+ TODO: check
+CVE-2026-109823 (An attacker can read the name of filesystem paths of your application ...)
+ TODO: check
+CVE-2026-108333 (Tanium addressed a use-after-free vulnerability in Threat Response Cli ...)
+ TODO: check
+CVE-2026-108332 (Tanium addressed an improper link resolution before file access vulner ...)
+ TODO: check
+CVE-2026-108331 (Tanium addressed an infinite loop vulnerability in Threat Response Cli ...)
+ TODO: check
+CVE-2026-108330 (Tanium addressed an information disclosure vulnerability in Threat Res ...)
+ TODO: check
+CVE-2026-108329 (Tanium addressed an unauthorized code execution vulnerability in Threa ...)
+ TODO: check
+CVE-2026-108328 (Tanium addressed an insertion of sensitive information into log file v ...)
+ TODO: check
+CVE-2026-108326 (Tanium addressed an improper certificate validation vulnerability in S ...)
+ TODO: check
+CVE-2026-108325 (Tanium addressed an insertion of sensitive information into log file v ...)
+ TODO: check
+CVE-2026-108316 (Tanium addressed an information disclosure vulnerability in Tanium Ser ...)
+ TODO: check
+CVE-2026-108313 (Tanium addressed an incorrect privilege assignment vulnerability in Ta ...)
+ TODO: check
+CVE-2026-108311 (Tanium addressed an insufficient logging vulnerability in Tanium Serve ...)
+ TODO: check
+CVE-2026-108310 (Tanium addressed a denial of service vulnerability in Tanium Server.)
+ TODO: check
+CVE-2026-108309 (Tanium addressed an uncontrolled resource consumption vulnerability in ...)
+ TODO: check
+CVE-2026-108308 (Tanium addressed a SQL injection vulnerability in Patch.)
+ TODO: check
+CVE-2026-108307 (Tanium addressed a heap-based buffer overflow vulnerability in Index.)
+ TODO: check
+CVE-2026-108306 (Tanium addressed a local privilege escalation vulnerability in End-Use ...)
+ TODO: check
+CVE-2026-108305 (Tanium addressed a local privilege escalation vulnerability in End-Use ...)
+ TODO: check
+CVE-2026-108304 (Tanium addressed a local privilege escalation vulnerability in End-Use ...)
+ TODO: check
+CVE-2026-108303 (Tanium addressed an unauthorized code execution vulnerability in Certi ...)
+ TODO: check
+CVE-2026-108302 (Tanium addressed an improper access controls vulnerability in Comply.)
+ TODO: check
+CVE-2026-108301 (Tanium addressed an improper access controls vulnerability in Comply.)
+ TODO: check
+CVE-2026-108142 (A vulnerability allowing an unauthenticated attacker to bypass authori ...)
+ TODO: check
+CVE-2026-108141 (A vulnerability allowing an authenticated user with the Restore Operat ...)
+ TODO: check
+CVE-2026-108140 (A vulnerability allowing an authenticated user with the Restore Operat ...)
+ TODO: check
+CVE-2026-108015 (Private keys for eight eMudhra intermediate CA certificates have been ...)
+ TODO: check
+CVE-2026-108014 (Private keys for eight eMudhra intermediate CA certificates have been ...)
+ TODO: check
+CVE-2026-107672 (A maliciously crafted .stack.json file can trigger a trusted Markdown ...)
+ TODO: check
+CVE-2026-107671 (A vulnerability allowing an attacker with valid Administrator credenti ...)
+ TODO: check
+CVE-2026-107590 (An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based ...)
+ TODO: check
+CVE-2026-107472 (An out-of-bounds read vulnerability in the QTextCodec TSCII encoding o ...)
+ TODO: check
+CVE-2026-107458
+ REJECTED
+CVE-2026-107147 (The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa ...)
+ TODO: check
+CVE-2026-107146 (The twofactor_gauthenticator plugin for Roundcube is vulnerable to ses ...)
+ TODO: check
+CVE-2026-107145 (The twofactor_gauthenticator plugin for Roundcube is vulnerable to bru ...)
+ TODO: check
+CVE-2026-107067 (An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local ...)
+ TODO: check
+CVE-2026-106087 (TRO600 contains an arbitrary file read vulnerability. An unauthenticat ...)
+ TODO: check
+CVE-2026-106078 (A vulnerability allowing an unauthenticated attacker to bypass REST AP ...)
+ TODO: check
+CVE-2026-106077 (A vulnerability allowing a user with the Veeam Backup for Microsoft 36 ...)
+ TODO: check
+CVE-2026-106076 (A vulnerability allowing an authenticated organization-transfer peer t ...)
+ TODO: check
+CVE-2026-105987 (KGS Software tia Viewer is vulnerable to Stored XSS via the annotation ...)
+ TODO: check
+CVE-2026-105781 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
+ TODO: check
+CVE-2026-105780 (Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization ...)
+ TODO: check
+CVE-2026-105779 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
+ TODO: check
+CVE-2026-105489 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
+ TODO: check
+CVE-2026-105477 (A vulnerability in Veeam Agent for Linux allows for local privilege es ...)
+ TODO: check
+CVE-2026-105323 (Improper neutralization of input during web page generation ('cross-si ...)
+ TODO: check
+CVE-2026-104381 (A missing authentication vulnerability in Fireware OS's FireCluster st ...)
+ TODO: check
+CVE-2026-104354 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
+ TODO: check
+CVE-2026-104353 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
+ TODO: check
+CVE-2026-104351 (Adobe Campaign Classic (ACC) is affected by an Improper Control of Gen ...)
+ TODO: check
+CVE-2026-104350 (Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scr ...)
+ TODO: check
+CVE-2026-104349 (Creative Cloud Desktop is affected by an Uncontrolled Search Path Elem ...)
+ TODO: check
+CVE-2026-104189 (The 3D Viewer for Nextcloud is a comprehensive 3D model viewer applica ...)
+ TODO: check
+CVE-2026-103594 (A stack-based buffer overflow vulnerability in Fireware OS's WireGuard ...)
+ TODO: check
+CVE-2026-103593 (A stack-based buffer overflow vulnerability in the Fireware OS logging ...)
+ TODO: check
+CVE-2026-102816 (An authorization vulnerability exists in the country or region configu ...)
+ TODO: check
+CVE-2026-102815 (An operating-system command injection vulnerability exists in the tmpS ...)
+ TODO: check
+CVE-2026-102814 (An authentication weakness exists in the TP-Link TDDP v2 service of TP ...)
+ TODO: check
+CVE-2026-102813 (An authentication flaw exists in the password-recovery functionality o ...)
+ TODO: check
+CVE-2026-102812 (A hard-coded cryptographic key vulnerability exists in the user-config ...)
+ TODO: check
+CVE-2026-102800 (Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in D ...)
+ TODO: check
+CVE-2026-102789 (Joomla Extension - balbooa.com - Missing Authorization Check on Editor ...)
+ TODO: check
+CVE-2026-102788 (Joomla Extension - balbooa.com - Unauthenticated SQL injection in Grid ...)
+ TODO: check
+CVE-2026-102787 (Joomla Extension - phoca.cz - CSRF in category management in Phoca Dow ...)
+ TODO: check
+CVE-2026-102638 (A maliciously crafted HTML payload in the description of an electronic ...)
+ TODO: check
+CVE-2026-102637 (A maliciously crafted HTML payload in the documentName parameter of a ...)
+ TODO: check
+CVE-2026-102636 (A maliciously crafted HTML payload in a design name, when displayed af ...)
+ TODO: check
+CVE-2026-101034 (An attacker who obtained the hardcoded key could decrypt domain/servic ...)
+ TODO: check
+CVE-2026-100164 (Observable response discrepancy vulnerability in Rolantis Information ...)
+ TODO: check
+CVE-2025-64394 (A vulnerability allowing a low-privileged local user to write arbitrar ...)
+ TODO: check
CVE-2026-XXXX [qbittorrent: WebUI authentication bypass via spoofed X-Forwarded-For]
- qbittorrent 5.3.0-1 (bug #1151739)
[trixie] - qbittorrent <no-dsa> (Minor issue)
@@ -1286,7 +2256,7 @@ CVE-2026-116476 (A weakness has been identified in a2aproject a2a-dotnet up to 1
NOT-FOR-US: a2aproject a2a-dotnet
CVE-2026-116471 (A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The i ...)
NOT-FOR-US: BKWLD Decoy
-CVE-2026-116469 (MISP Guard, a proxy-based security filter for MISP (Malware Informatio ...)
+CVE-2026-116469 (MISP Guard, a proxy-based security filter for MISP feed distribution, ...)
NOT-FOR-US: MISP Guard
CVE-2026-116467 (A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. ...)
- llama.cpp <unfixed>
@@ -1635,7 +2605,7 @@ CVE-2026-108525 (Allocation of Resources Without Limits or Throttling vulnerabil
NOT-FOR-US: Bandit (mtrudel/bandit, not the same as src:bandit)
CVE-2026-107656 (An authentication bypass using an alternate path or channel vulnerabil ...)
NOT-FOR-US: Fortinet
-CVE-2026-107157 (Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt ...)
+CVE-2026-107157 (Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Co ...)
TODO: check
CVE-2026-107092 (NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update ...)
NOT-FOR-US: NexoPOS
@@ -4945,6 +5915,7 @@ CVE-2026-92183 (GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code E
- gimp 3.2.6-1
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/e4b0d6bc389df4b9b439a3f4e1155e4de965869e (GIMP_3_2_6)
CVE-2026-91403 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
+ {DSA-6588-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6026,6 +6997,7 @@ CVE-2026-111817 (Apache Traffic Server can stall a chunked transfer that it pass
- trafficserver <removed>
NOTE: https://trafficserver.apache.org/security-2026-10.html
CVE-2026-73206 [A crafted DNS packet can cause a denial of service decompressing the DNS names in the packet]
+ {DSA-6587-1}
- pdns 5.1.5-1 (bug #1152255)
- pdns-recursor 5.4.8-1
NOTE: https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-12.html#cve-2026-73206-crafted-packet-using-compression-pointers-can-lead-to-denial-of-service
@@ -6393,7 +7365,7 @@ CVE-2026-91489 (Vulnerability in the Oracle Identity Manager Connector product o
CVE-2026-91488 (Vulnerability in the Oracle Identity Manager Connector product of Orac ...)
NOT-FOR-US: Oracle
CVE-2026-91487 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6441,7 +7413,7 @@ CVE-2026-91466 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Ar
CVE-2026-91465 (Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentin ...)
NOT-FOR-US: Oracle
CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6450,7 +7422,7 @@ CVE-2026-91464 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6459,7 +7431,7 @@ CVE-2026-91463 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6468,7 +7440,7 @@ CVE-2026-91462 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91461 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6487,7 +7459,7 @@ CVE-2026-91457 (Vulnerability in the Oracle Outside In Technology product of Ora
CVE-2026-91455 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6496,7 +7468,7 @@ CVE-2026-91453 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6505,7 +7477,7 @@ CVE-2026-91452 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91451 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6576,7 +7548,7 @@ CVE-2026-91420 (Vulnerability in the Siebel CRM Deployment product of Oracle Sie
CVE-2026-91419 (Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-91418 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6588,7 +7560,7 @@ CVE-2026-91417 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise E
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91415 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6603,14 +7575,14 @@ CVE-2026-91413 (Vulnerability in the Siebel CRM Development product of Oracle Si
CVE-2026-91412 (Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM ...)
NOT-FOR-US: Oracle
CVE-2026-91411 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91410 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6636,7 +7608,7 @@ CVE-2026-91402 (Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle Graal
[bookworm] - openjfx <not-affected> (Vulnerable code not present, only affects 21 and later)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6647,7 +7619,7 @@ CVE-2026-91400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-91399 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6656,7 +7628,7 @@ CVE-2026-91398 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91397 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6673,7 +7645,7 @@ CVE-2026-91395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-11 <unfixed>
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91394 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
- openjdk-21 21.0.13+9-1
@@ -6706,7 +7678,7 @@ CVE-2026-91384 (Vulnerability in the JD Edwards EnterpriseOne Tools product of O
CVE-2026-91383 (Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle ...)
NOT-FOR-US: Oracle
CVE-2026-91382 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6716,7 +7688,7 @@ CVE-2026-91381 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise E
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6725,7 +7697,7 @@ CVE-2026-91380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91379 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6740,7 +7712,7 @@ CVE-2026-91377 (Vulnerability in the Siebel CRM Integration product of Oracle Si
CVE-2026-91376 (Vulnerability in the Primavera P6 Enterprise Project Portfolio Managem ...)
NOT-FOR-US: Oracle
CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Supported ver ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6749,7 +7721,7 @@ CVE-2026-91375 (Vulnerability in Oracle Java SE (component: Libraries). Support
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6758,7 +7730,7 @@ CVE-2026-91374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91373 (Vulnerability in Oracle Java SE (component: JSSE). Supported versions ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6841,7 +7813,7 @@ CVE-2026-91337 (Vulnerability in the iProcurement product of Oracle E-Business S
CVE-2026-91336 (Vulnerability in the Oracle Solaris product of Oracle Systems (compone ...)
NOT-FOR-US: Oracle
CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6850,7 +7822,7 @@ CVE-2026-91335 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -6859,12 +7831,13 @@ CVE-2026-91334 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91333 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
+ {DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-91332 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7233,7 +8206,7 @@ CVE-2026-87370 (Vulnerability in the Oracle WebCenter Content product of Oracle
CVE-2026-87369 (Vulnerability in the Oracle Service Bus product of Oracle Fusion Middl ...)
NOT-FOR-US: Oracle
CVE-2026-87367 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7384,7 +8357,7 @@ CVE-2026-87296 (Vulnerability in the Oracle Access Manager product of Oracle Fus
CVE-2026-87295 (Vulnerability in the Oracle HRMS (India) product of Oracle E-Business ...)
NOT-FOR-US: Oracle
CVE-2026-87294 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7396,7 +8369,7 @@ CVE-2026-87293 (Vulnerability in Oracle Java SE (component: RMI). Supported ver
- openjdk-8 <unfixed> (bug #1151673)
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7405,12 +8378,13 @@ CVE-2026-87292 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87291 (Vulnerability in Oracle Java SE (component: Networking). Supported ve ...)
+ {DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-87290 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7449,7 +8423,7 @@ CVE-2026-83402 (Vulnerability in the Oracle Identity Manager product of Oracle F
CVE-2026-83401 (Vulnerability in the Oracle Identity Manager product of Oracle Fusion ...)
NOT-FOR-US: Oracle
CVE-2026-83400 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7466,7 +8440,7 @@ CVE-2026-83397 (Vulnerability in the Oracle Data Integrator product of Oracle Fu
CVE-2026-83396 (Vulnerability in the Oracle Data Integrator product of Oracle Fusion M ...)
NOT-FOR-US: Oracle
CVE-2026-83395 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7489,7 +8463,7 @@ CVE-2026-83389 (Vulnerability in the Oracle HRMS (UK) product of Oracle E-Busine
CVE-2026-83388 (Vulnerability in the Oracle Applications Manager product of Oracle E-B ...)
NOT-FOR-US: Oracle
CVE-2026-83387 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7508,7 +8482,7 @@ CVE-2026-83383 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Busine
CVE-2026-83382 (Vulnerability in the Oracle Report Manager product of Oracle E-Busines ...)
NOT-FOR-US: Oracle
CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supported vers ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7517,7 +8491,7 @@ CVE-2026-83381 (Vulnerability in Oracle Java SE (component: Security). Supporte
- openjdk-27 27.0.1+9-1
NOTE: https://openjdk.org/groups/vulnerability/advisories/2026-10-20
CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7528,6 +8502,7 @@ CVE-2026-83380 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-83379 (Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of O ...)
NOT-FOR-US: Oracle
CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler). Supported vers ...)
+ {DSA-6588-1}
- openjdk-21 21.0.13+9-1
- openjdk-25 25.0.5+8-1
- openjdk-27 27.0.1+9-1
@@ -7535,7 +8510,7 @@ CVE-2026-83378 (Vulnerability in Oracle Java SE (component: Compiler). Supporte
CVE-2026-83377 (Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Sui ...)
NOT-FOR-US: Oracle
CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -7546,7 +8521,7 @@ CVE-2026-83376 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Ora
CVE-2026-83375 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources product ...)
NOT-FOR-US: Oracle
CVE-2026-83374 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
- {DLA-4861-1}
+ {DSA-6588-1 DLA-4861-1}
- openjdk-8 <unfixed> (bug #1151673)
- openjdk-11 <unfixed>
- openjdk-17 17.0.21+9-1
@@ -11818,6 +12793,7 @@ CVE-2026-11319 (TickTick Android application (com.ticktick.task) 8.2.2.0 contain
CVE-2026-112377 (CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to b ...)
NOT-FOR-US: CCC Attestation SIG attested-tls-poc
CVE-2026-112368 (An uncontrolled recursion weakness in the BSON decoding logic of the M ...)
+ {DSA-6589-1}
- php-mongodb <unfixed> (bug #1151934)
NOTE: https://jira.mongodb.org/browse/PHPC-276
NOTE: Fixed by: https://github.com/mongodb/mongo-php-driver/commit/795e914e6f7cc631a2f80c89aedcdd2a1df4ada9 (2.5.5, 2.1.12, 1.21.12)
@@ -29320,6 +30296,7 @@ CVE-2026-106437 (The BSON buffer-reservation API in the MongoDB C Driver can rec
NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/6c593a59a9dce87e42298b85779ca02a9357dd74 (2.5.6)
NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/b7f1f5742351741c068020196fd88f196551aad2 (1.30.13)
CVE-2026-106436 (The BSON encoder in the MongoDB PHP Driver does not check some return ...)
+ {DSA-6589-1}
- php-mongodb <unfixed> (bug #1150514)
NOTE: https://jira.mongodb.org/browse/PHPC-2739
NOTE: Fixed by: https://github.com/mongodb/mongo-php-driver/commit/79036dd7a4c946cfef2d0105f8102f26d685b260 (2.5.4, 2.1.11, 1.21.11)
@@ -29342,6 +30319,7 @@ CVE-2026-106433 (Improper state management in MongoDB libmongocrypt can cause pr
NOTE: Fixed by: https://github.com/mongodb/libmongocrypt/commit/556bcb70b6efecb7f568d824b03469df3a3bc91a (1.20.5)
NOTE: Fixed by: https://github.com/mongodb/libmongocrypt/commit/8bc580ea69eea13a932197221edf72830fbc38a1 (1.20.5)
CVE-2026-106432 (The BSON encoder in the MongoDB PHP Driver converts a string length to ...)
+ {DSA-6589-1}
- php-mongodb <unfixed> (bug #1150514)
NOTE: https://jira.mongodb.org/browse/PHPC-2741
NOTE: Fixed by: https://github.com/mongodb/mongo-php-driver/commit/79036dd7a4c946cfef2d0105f8102f26d685b260 (2.5.4, 2.1.11, 1.21.11)
@@ -31311,7 +32289,7 @@ CVE-2026-101027 (When `[migrations] ALLOWED_DOMAINS` was configured, a hostname
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-101023 (Gitea's OAuth2 token endpoint verified the signature and grant of a to ...)
NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
-CVE-2026-88812 [XKB SetGeometry TextDoodad Double Free]
+CVE-2026-88812 (A double free inXKB SetGeometryin X.Org X Server before 21.1.25 and X ...)
- xorg-server 2:21.1.25-1 (bug #1150214)
- xwayland 2:24.1.14-1 (bug #1150213; unimportant)
NOTE: Xwayland shouldn't be running as root, cf. README.Debian.security
@@ -42309,7 +43287,7 @@ CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write pat
NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
-CVE-2026-109088 [libXtst RECORD EnableContext Reply Endless Loop]
+CVE-2026-109088 (A malicious X server could send malformedRECORD EnableContextreolies t ...)
- libxtst 2:1.2.6-1
[trixie] - libxtst <no-dsa> (Minor issue)
NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
@@ -46564,13 +47542,13 @@ CVE-2026-94604
REJECTED
CVE-2026-94416 (An authorization bypass was found in the Ansible Automation Platform ( ...)
NOT-FOR-US: Red Hat Ansible Automation Platform
-CVE-2026-109090 [libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow]
+CVE-2026-109090 (A malicious X server could cause a heap overflow by injecting a largeD ...)
- libxi 2:1.8.4-1
[trixie] - libxi <no-dsa> (Minor issue)
NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/26
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b67034ace1abdf785fd8dcba7b6dc739d
-CVE-2026-109089 [libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow]
+CVE-2026-109089 (A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8. ...)
- libxi 2:1.8.4-1
[trixie] - libxi <no-dsa> (Minor issue)
NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html
@@ -76729,7 +77707,7 @@ CVE-2026-19795 (Qiskit could allow a local attacker to cause a denial of service
NOT-FOR-US: IBM
CVE-2026-19224 (The Hummingbird Performance WordPress plugin before 3.21.2 does not r ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-18330 (A hard-coded cryptographic key vulnerability exists in theweb module o ...)
+CVE-2026-18330 (A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V ...)
NOT-FOR-US: TPLink
CVE-2026-18167 (A stack-based buffer overflow vulnerability exists in the EasyMesh mod ...)
NOT-FOR-US: TPLink
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c5436ea4f248fef23b1973b10168939c1a0bc9d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c5436ea4f248fef23b1973b10168939c1a0bc9d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/e7463f9c/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list