[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Sep 15 20:14:18 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b6abaef0 by security tracker role at 2026-09-15T19:14:11+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,220 +1,1152 @@
-CVE-2026-92079
+CVE-2026-92180 (pdfforge PDF Architect activation-service Update Service Uncontrolled ...)
+ TODO: check
+CVE-2026-92179 (pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Cod ...)
+ TODO: check
+CVE-2026-92178 (pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code ...)
+ TODO: check
+CVE-2026-92177 (pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Cod ...)
+ TODO: check
+CVE-2026-92176 (pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execu ...)
+ TODO: check
+CVE-2026-92082 (By default, Payara Server does not limit the number of failed login at ...)
+ TODO: check
+CVE-2026-92021 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
+ TODO: check
+CVE-2026-92014 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
+ TODO: check
+CVE-2026-92003 (Affected versions of MISP do not consistently apply the existing authe ...)
+ TODO: check
+CVE-2026-92002 (Affected versions of MISP use Redis to throttle repeated authenticatio ...)
+ TODO: check
+CVE-2026-91998 (Casdoor through 4.4.0 contains an authorization bypass vulnerability i ...)
+ TODO: check
+CVE-2026-91997 (evolution-api through 2.3.7 contains an incorrect array comparison in ...)
+ TODO: check
+CVE-2026-91996 (lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for a ...)
+ TODO: check
+CVE-2026-91995 (pig before 4.1.0 contains an authentication bypass vulnerability in th ...)
+ TODO: check
+CVE-2026-91994 (Semaphore UI through 2.19.12 exempts GET and HEAD requests from projec ...)
+ TODO: check
+CVE-2026-91993 (Jpom through 2.11.12 fails to validate workspace ownership when resolv ...)
+ TODO: check
+CVE-2026-91992 (Tornado before 6.5.7 contains a credential leak vulnerability in CurlA ...)
+ TODO: check
+CVE-2026-91991 (Tornado before 6.5.8 contains an incomplete fix for cookie attribute i ...)
+ TODO: check
+CVE-2026-91990 (Tornado before 6.5.8 contains a memory amplification vulnerability in ...)
+ TODO: check
+CVE-2026-91989 (atomic-agents-stack before 1.1.0 contains a path traversal vulnerabili ...)
+ TODO: check
+CVE-2026-91988 (atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the ...)
+ TODO: check
+CVE-2026-91987 (atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in t ...)
+ TODO: check
+CVE-2026-91986 (gitoxide gix-transport before 0.59.2 fails to filter control character ...)
+ TODO: check
+CVE-2026-91985 (Vikunja before 2.6.0 fails to properly restrict access to the link-sha ...)
+ TODO: check
+CVE-2026-91984 (Vikunja before 2.6.0 fails to validate that user-supplied project_view ...)
+ TODO: check
+CVE-2026-91983 (Vikunja before 2.6.0 contains an API token scope bypass vulnerability ...)
+ TODO: check
+CVE-2026-91982 (Vikunja before 2.6.0 continues to expose the raw TOTP shared secret af ...)
+ TODO: check
+CVE-2026-91981 (Vikunja versions before 2.6.0 fail to properly validate link-share tok ...)
+ TODO: check
+CVE-2026-91980 (vikunja before 2.6.0 fails to validate team access when attaching team ...)
+ TODO: check
+CVE-2026-91979 (Vikunja before 2.6.0 fails to limit archive expansion during data impo ...)
+ TODO: check
+CVE-2026-91973 (Vikunja before 2.6.0 contains an authentication bypass vulnerability i ...)
+ TODO: check
+CVE-2026-91972 (Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 p ...)
+ TODO: check
+CVE-2026-91971 (Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and ...)
+ TODO: check
+CVE-2026-91970 (Vikunja versions before 2.6.0 contain a resource exhaustion vulnerabil ...)
+ TODO: check
+CVE-2026-91969 (vikunja versions before 2.6.0 contain a resource exhaustion vulnerabil ...)
+ TODO: check
+CVE-2026-91968 (vikunja versions before 2.6.0 contain a resource exhaustion vulnerabil ...)
+ TODO: check
+CVE-2026-91967 (AVideo through 29.0 contains a blind server-side request forgery vulne ...)
+ TODO: check
+CVE-2026-91966 (AVideo through 29.0 contains an unauthenticated server-side request fo ...)
+ TODO: check
+CVE-2026-91965 (WWBN AVideo through 29.0 fails to enforce user-group restrictions in t ...)
+ TODO: check
+CVE-2026-91964 (FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in ...)
+ TODO: check
+CVE-2026-91963 (FreeRDP versions before 3.31.0 contain an uninitialized heap memory di ...)
+ TODO: check
+CVE-2026-91962 (FreeRDP before 3.31.0 contains an integer overflow in the audin Apple ...)
+ TODO: check
+CVE-2026-91961 (FreeRDP before 3.31.0 contains a denial-of-service vulnerability in th ...)
+ TODO: check
+CVE-2026-91960 (FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's ...)
+ TODO: check
+CVE-2026-91959 (FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the ...)
+ TODO: check
+CVE-2026-91958 (FreeRDP versions before 3.31.0 fail to validate MonitorIds array value ...)
+ TODO: check
+CVE-2026-91957 (FreeRDP before 3.31.0 contains a use-after-free vulnerability in the s ...)
+ TODO: check
+CVE-2026-91956 (FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in ...)
+ TODO: check
+CVE-2026-91955 (FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth a ...)
+ TODO: check
+CVE-2026-91954 (FreeRDP before 3.31.0 contains a null pointer dereference vulnerabilit ...)
+ TODO: check
+CVE-2026-91953 (FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerab ...)
+ TODO: check
+CVE-2026-91952 (FreeRDP versions before 3.31.0 contain an infinite-loop denial of serv ...)
+ TODO: check
+CVE-2026-91951 (FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerab ...)
+ TODO: check
+CVE-2026-91950 (FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in ...)
+ TODO: check
+CVE-2026-91949 (FreeRDP server versions before 3.31.0 contain a protocol negotiation b ...)
+ TODO: check
+CVE-2026-91948 (FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerab ...)
+ TODO: check
+CVE-2026-91947 (FreeRDP server versions before 3.31.0 contain a use-after-free vulnera ...)
+ TODO: check
+CVE-2026-91946 (FreeRDP versions before 3.31.0 contain an information disclosure vulne ...)
+ TODO: check
+CVE-2026-91945 (FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerabi ...)
+ TODO: check
+CVE-2026-91944 (crawl4ai versions before 0.9.3 contain a DOM-based cross-site scriptin ...)
+ TODO: check
+CVE-2026-91943 (Crawl4AI before 0.9.3 contains a server-side request forgery vulnerabi ...)
+ TODO: check
+CVE-2026-91942 (crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulner ...)
+ TODO: check
+CVE-2026-91941 (Crawl4AI before 0.9.3 contains an uncontrolled resource consumption vu ...)
+ TODO: check
+CVE-2026-91940 (crawl4ai before 0.9.3 contains an arbitrary file write vulnerability i ...)
+ TODO: check
+CVE-2026-91938 (Flowise versions before 3.1.4 contain a server-side request forgery vu ...)
+ TODO: check
+CVE-2026-91937 (Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId pa ...)
+ TODO: check
+CVE-2026-91936 (Flowise versions before 3.1.4 contain a script injection vulnerability ...)
+ TODO: check
+CVE-2026-91935 (Flowise before 3.1.4 fails to validate baseURL parameters in chat-mode ...)
+ TODO: check
+CVE-2026-91934 (Flowise versions before 3.1.4 fail to validate file paths in the SQL D ...)
+ TODO: check
+CVE-2026-91933 (Flowise before 3.1.4 fails to enforce workspace-level authorization ch ...)
+ TODO: check
+CVE-2026-91932 (Flowise before 3.1.4 contains a validation bypass vulnerability in MCP ...)
+ TODO: check
+CVE-2026-91931 (Flowise before 3.1.4 contains a remote code execution vulnerability in ...)
+ TODO: check
+CVE-2026-91930 (Flowise before 3.1.4 fails to scope enterprise organization and worksp ...)
+ TODO: check
+CVE-2026-91929 (Flowise versions before 3.1.4 contain cross-tenant authorization gaps ...)
+ TODO: check
+CVE-2026-91926 (A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM targ ...)
+ TODO: check
+CVE-2026-91925 (Polyaxon through 2.16.4 renders operation specification fields with an ...)
+ TODO: check
+CVE-2026-91924 (pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded w ...)
+ TODO: check
+CVE-2026-91923 (KubeSphere through 4.1.3 contains a server-side request forgery vulner ...)
+ TODO: check
+CVE-2026-91922 (Steedos Platform through 3.0.15-beta.47 contains a reflected cross-sit ...)
+ TODO: check
+CVE-2026-91859 (Affected versions of MISP can record incorrect access-log data for req ...)
+ TODO: check
+CVE-2026-91857 (Affected versions of MISP expose several state-changing controller act ...)
+ TODO: check
+CVE-2026-91855 (A security flaw has been discovered in Open5GS up to 2.7.7. Affected b ...)
+ TODO: check
+CVE-2026-91854 (A vulnerability was identified in code-projects Record Management Syst ...)
+ TODO: check
+CVE-2026-91853 (A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B202112 ...)
+ TODO: check
+CVE-2026-91851 (Affected versions of MISP incorrectly filter dashboard templates that ...)
+ TODO: check
+CVE-2026-91849 (A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affe ...)
+ TODO: check
+CVE-2026-91848 (A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by th ...)
+ TODO: check
+CVE-2026-91846 (Affected versions of MISP allow a collection element to be created fro ...)
+ TODO: check
+CVE-2026-91842 (A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1 ...)
+ TODO: check
+CVE-2026-91836 (A flaw has been found in OpenClaw ClawScan up to 0.1.6. This affects a ...)
+ TODO: check
+CVE-2026-91835 (A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The imp ...)
+ TODO: check
+CVE-2026-91826 (Stack-based buffer overflow vulnerability in Samsung Opensource rLotti ...)
+ TODO: check
+CVE-2026-91825 (Affected versions of MISP fail to authorize a submitted sharing group ...)
+ TODO: check
+CVE-2026-91819 (Affected versions of MISP rely on CakePHP request-method override proc ...)
+ TODO: check
+CVE-2026-91786 (A flaw was found in GNOME Shell. When processing icons from a remote s ...)
+ TODO: check
+CVE-2026-91782 (A vulnerability was detected in GNU Binutils 2.47. Affected by this vu ...)
+ TODO: check
+CVE-2026-91781 (A security vulnerability has been detected in GNU Binutils 2.47. Affec ...)
+ TODO: check
+CVE-2026-91780 (A weakness has been identified in GNU Binutils 2.47. This impacts the ...)
+ TODO: check
+CVE-2026-91779 (A security flaw has been discovered in GNU Binutils 2.47. This affects ...)
+ TODO: check
+CVE-2026-91778 (In affected versions of Octopus Server, users with certain scoped perm ...)
+ TODO: check
+CVE-2026-91091 (A vulnerability was identified in GPAC up to f1219cde. The impacted el ...)
+ TODO: check
+CVE-2026-91090 (A vulnerability was determined in GPAC up to f1219cde. The affected el ...)
+ TODO: check
+CVE-2026-91089 (A vulnerability was found in GPAC up to f1219cde. Impacted is the func ...)
+ TODO: check
+CVE-2026-90650 (The MotoPress Hotel Booking plugin for WordPress is vulnerable to Stor ...)
+ TODO: check
+CVE-2026-90439 (NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)
+ TODO: check
+CVE-2026-89308 (An unauthenticated OS command injection vulnerability exists in thepin ...)
+ TODO: check
+CVE-2026-89307 (The "Firma Circolare" feature in the "Design Scuole Italia" WordPress ...)
+ TODO: check
+CVE-2026-89026 (The Issabel Framework, the web framework supporting Issabel PBX softwa ...)
+ TODO: check
+CVE-2026-89025 (Hirschmann HiOS Switch Platform devices contain a denial-of-service vu ...)
+ TODO: check
+CVE-2026-89022 (BookStack before 26.05.5 contains an authentication bypass vulnerabili ...)
+ TODO: check
+CVE-2026-88765 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
+ TODO: check
+CVE-2026-88621 (OneNav v1.2.4 contains an authenticated arbitrary file deletion vulner ...)
+ TODO: check
+CVE-2026-88620 (SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper ...)
+ TODO: check
+CVE-2026-88619 (1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerabi ...)
+ TODO: check
+CVE-2026-88618 (1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vul ...)
+ TODO: check
+CVE-2026-88617 (SmartAdmin v3.30.0 contains an authorization flaw in the configuration ...)
+ TODO: check
+CVE-2026-88616 (An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute a ...)
+ TODO: check
+CVE-2026-87793 (The "Design Scuole Italia" WordPress theme is affected by a Reflected ...)
+ TODO: check
+CVE-2026-87792 (The "Design Scuole Italia" WordPress theme is affected by multiple Aut ...)
+ TODO: check
+CVE-2026-87791 (A path traversal vulnerability exists in the reserved_file_check funct ...)
+ TODO: check
+CVE-2026-87730
+ REJECTED
+CVE-2026-86818 (fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by ...)
+ TODO: check
+CVE-2026-86472 (fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by ...)
+ TODO: check
+CVE-2026-85234 (A flaw was found in tftp-hpa. When the `in.tftpd` remap engine process ...)
+ TODO: check
+CVE-2026-82837 (GitLab has remediated an issue in GitLab CE/EE affecting all versions ...)
+ TODO: check
+CVE-2026-82191 (Joomla Extension - j2commerce.com - Unescaped request data reflected i ...)
+ TODO: check
+CVE-2026-82190 (Joomla Extension - j2commerce.com - Predictable/forgeable order access ...)
+ TODO: check
+CVE-2026-82189 (Joomla Extension - j2commerce.com - Any order can be marked Failed by ...)
+ TODO: check
+CVE-2026-81924 (Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery ...)
+ TODO: check
+CVE-2026-81923 (In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did ...)
+ TODO: check
+CVE-2026-81922 (Concrete CMS before 9.5.3 did not enforce a per-page authorization che ...)
+ TODO: check
+CVE-2026-81921 (Concrete CMS 8.5.3 through 9.5.2 enabled the OAuth 2.0 refresh-token g ...)
+ TODO: check
+CVE-2026-81920 (Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery ...)
+ TODO: check
+CVE-2026-81919 (Concrete CMS below 9.5.3 did not validate an anti-CSRF token on the bl ...)
+ TODO: check
+CVE-2026-81899 (Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitiza ...)
+ TODO: check
+CVE-2026-81898 (In Concrete CMS below version 9.5.3, the Address attribute's country-l ...)
+ TODO: check
+CVE-2026-81897 (In Concrete CMS below CMS 9.5.3, the save_control action in the Expres ...)
+ TODO: check
+CVE-2026-81896 (Concrete CMS before 9.5.3 does not apply HTML entity encoding to user- ...)
+ TODO: check
+CVE-2026-81895 (In Concrete CMS before 9.5.3, the Document Library block stored the fi ...)
+ TODO: check
+CVE-2026-81894 (Concrete CMS 9.5.2 and below is vulnerable to stored DOM-based Cross-s ...)
+ TODO: check
+CVE-2026-81568 (Joomla Extension - j2commerce.com - Arbitrary file read via `task=down ...)
+ TODO: check
+CVE-2026-81567 (Joomla Extension - j2commerce.com - Unauthenticated blind SQL injectio ...)
+ TODO: check
+CVE-2026-81240 (Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an ...)
+ TODO: check
+CVE-2026-81239 (Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an ...)
+ TODO: check
+CVE-2026-81238 (Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a ...)
+ TODO: check
+CVE-2026-81237 (Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an ...)
+ TODO: check
+CVE-2026-81236 (Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an ...)
+ TODO: check
+CVE-2026-81235 (Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a ...)
+ TODO: check
+CVE-2026-80217 (Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, whic ...)
+ TODO: check
+CVE-2026-79705 (A flaw was found in the buildah/copier Go package. When used outside o ...)
+ TODO: check
+CVE-2026-79699 (A flaw was found in the containers/storage library. A crafted tar arch ...)
+ TODO: check
+CVE-2026-79551 (Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to ...)
+ TODO: check
+CVE-2026-79425 (An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/f ...)
+ TODO: check
+CVE-2026-79411 (Incorrect privilege assignment in the admin user-management component ...)
+ TODO: check
+CVE-2026-79410 (Improper validation of the quantity parameter in the add-to-cart path ...)
+ TODO: check
+CVE-2026-79409 (An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain se ...)
+ TODO: check
+CVE-2026-79303 (kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injecti ...)
+ TODO: check
+CVE-2026-78081 (Joomla Extension - j2commerce.com - Missing CSRF protection on cart, c ...)
+ TODO: check
+CVE-2026-77972 (Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allo ...)
+ TODO: check
+CVE-2026-77866 (Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allow ...)
+ TODO: check
+CVE-2026-77853 (Improper neutralization of special elements used in an OS command ('OS ...)
+ TODO: check
+CVE-2026-77179 (On macOS, the virtio-fs host server used by Docker Sandboxes improperl ...)
+ TODO: check
+CVE-2026-76159 (Incorrect Permission Assignment for Critical Resource in the configur ...)
+ TODO: check
+CVE-2026-75092 (A privilege escalation flaw was found in the scan_mysql actor of leapp ...)
+ TODO: check
+CVE-2026-73467 (On affected platforms running Arista EOS, under certain circumstances ...)
+ TODO: check
+CVE-2026-73466 (On affected platforms running Arista EOS, under certain circumstances ...)
+ TODO: check
+CVE-2026-73465 (On affected platforms running Arista EOS, under certain circumstances ...)
+ TODO: check
+CVE-2026-73451 (On affected platforms running Arista EOS with dual switch cards and wi ...)
+ TODO: check
+CVE-2026-69211 (Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1. ...)
+ TODO: check
+CVE-2026-69209 (Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1. ...)
+ TODO: check
+CVE-2026-69208 (Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1. ...)
+ TODO: check
+CVE-2026-69204 (Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1. ...)
+ TODO: check
+CVE-2026-68534 (Concrete CMS before 9.5.3 rendered Express entry labels as raw HTML wh ...)
+ TODO: check
+CVE-2026-68533 (Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imp ...)
+ TODO: check
+CVE-2026-68532 (Concrete CMS 9.0.0 to dashboard group type controller did not validate ...)
+ TODO: check
+CVE-2026-65831 (ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user ca ...)
+ TODO: check
+CVE-2026-63696 (Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a ...)
+ TODO: check
+CVE-2026-63695 (Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a ...)
+ TODO: check
+CVE-2026-63443 (Coder allows organizations to provision remote development environment ...)
+ TODO: check
+CVE-2026-62379 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-62280 (Open Access Management (OpenAM) is an access management solution. From ...)
+ TODO: check
+CVE-2026-62263 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-61668 (DIRAC is an interware, meaning a software framework for distributed co ...)
+ TODO: check
+CVE-2026-61667 (DIRAC is an interware, meaning a software framework for distributed co ...)
+ TODO: check
+CVE-2026-61549 (Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backen ...)
+ TODO: check
+CVE-2026-59973 (FrontMCP is a TypeScript-first framework for the Model Context Protoco ...)
+ TODO: check
+CVE-2026-59971 (MySQL MCP Server is a Model Context Protocol server that enables secur ...)
+ TODO: check
+CVE-2026-59965 (Payload Plugins is a collection of plugins designed to enhance Payload ...)
+ TODO: check
+CVE-2026-59341 (A security vulnerability exists in the Sealed Secrets controller's una ...)
+ TODO: check
+CVE-2026-59160 (Yeger is a monorepo for npm packages maintained under the yeger scope. ...)
+ TODO: check
+CVE-2026-59157 (webhookd is a minimalist webhook server that triggers shell scripts an ...)
+ TODO: check
+CVE-2026-58773 (In link_load_gnss_image of link_device.c, there is a possible out-of-b ...)
+ TODO: check
+CVE-2026-58767 (In multiple functions of arm-smmu-v3.c, there is a possible escalation ...)
+ TODO: check
+CVE-2026-58766 (In multiple functions of arm-smmu-v3.c, there is a possible escalation ...)
+ TODO: check
+CVE-2026-58765 (In GPU, there is a possible permission bypass due to a logic error in ...)
+ TODO: check
+CVE-2026-58755 (In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escal ...)
+ TODO: check
+CVE-2026-58751 (In multiple functions of arm-smmu-v3.c, there is a possible use-after- ...)
+ TODO: check
+CVE-2026-58747 (In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission by ...)
+ TODO: check
+CVE-2026-58744 (In multiple locations, there is a possible escalation of privilege due ...)
+ TODO: check
+CVE-2026-58739 (In platform_msg_handler_init of default_msg_handlers.c, there is a pos ...)
+ TODO: check
+CVE-2026-58734 (In google_mba_recv_msg of google_mba_poll.c, there is a possible out-o ...)
+ TODO: check
+CVE-2026-58731 (In multiple functions of physmem_extmem_linux.c, there is a possible o ...)
+ TODO: check
+CVE-2026-58728 (In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a ...)
+ TODO: check
+CVE-2026-58726 (In FsmReleaseKey of fsm.c, there is a possible permission bypass due t ...)
+ TODO: check
+CVE-2026-58724 (In multiple locations, there is a possible use-after-free due to a rac ...)
+ TODO: check
+CVE-2026-58721 (In multiple locations, there is a possible information disclosure due ...)
+ TODO: check
+CVE-2026-58718 (In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escala ...)
+ TODO: check
+CVE-2026-58716 (In multiple locations, there is a possible time-of-check to time-of-us ...)
+ TODO: check
+CVE-2026-58710 (In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out ...)
+ TODO: check
+CVE-2026-58704 (In Cellular Modem, there is a possible permission bypass due to a logi ...)
+ TODO: check
+CVE-2026-58701 (In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of- ...)
+ TODO: check
+CVE-2026-58699 (In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-b ...)
+ TODO: check
+CVE-2026-58698 (In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible perm ...)
+ TODO: check
+CVE-2026-58695 (In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possi ...)
+ TODO: check
+CVE-2026-58691 (In FsmReleaseKey of fsm.c, there is a possible permission bypass due t ...)
+ TODO: check
+CVE-2026-58683 (In IP Multimedia Subsystem, there is a possible out-of-bounds write du ...)
+ TODO: check
+CVE-2026-58679 (In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buf ...)
+ TODO: check
+CVE-2026-58678 (In Bootloader, there is a possible permission bypass due to a logic er ...)
+ TODO: check
+CVE-2026-58502 (githubtoplanguages generates a user's top GitHub languages as an SVG. ...)
+ TODO: check
+CVE-2026-58485 (mcp-searxng is a Model Context Protocol server that gives AI assistant ...)
+ TODO: check
+CVE-2026-58483 (mcp-searxng is a Model Context Protocol server that gives AI assistant ...)
+ TODO: check
+CVE-2026-58201 (Lokka is a Model Context Protocol server for Microsoft 365, including ...)
+ TODO: check
+CVE-2026-58200 (Payload Plugins is a collection of plugins designed to enhance Payload ...)
+ TODO: check
+CVE-2026-58196 (ToolHive is a utility designed to simplify the deployment and manageme ...)
+ TODO: check
+CVE-2026-57586 (CodeRAG is a lightweight semantic code search and distillation utility ...)
+ TODO: check
+CVE-2026-57442 (MCPVault is a lightweight Model Context Protocol server for safe acces ...)
+ TODO: check
+CVE-2026-57441 (MCPVault is a lightweight Model Context Protocol server for safe acces ...)
+ TODO: check
+CVE-2026-57148 (PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_pla ...)
+ TODO: check
+CVE-2026-57147 (PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_pla ...)
+ TODO: check
+CVE-2026-57141 (PraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode ...)
+ TODO: check
+CVE-2026-57140 (PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, Agent ...)
+ TODO: check
+CVE-2026-57139 (PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPSe ...)
+ TODO: check
+CVE-2026-57138 (PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeM ...)
+ TODO: check
+CVE-2026-57137 (PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, creat ...)
+ TODO: check
+CVE-2026-57136 (PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, Comma ...)
+ TODO: check
+CVE-2026-57135 (PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, Sandb ...)
+ TODO: check
+CVE-2026-57134 (PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSe ...)
+ TODO: check
+CVE-2026-57133 (PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the s ...)
+ TODO: check
+CVE-2026-57112 (PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 un ...)
+ TODO: check
+CVE-2026-57042 (In multiple functions of DreamPickerReceiver.kt, there is a possible p ...)
+ TODO: check
+CVE-2026-57035 (In multiple locations, there is a possible out-of-bounds write due to ...)
+ TODO: check
+CVE-2026-57014 (In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there i ...)
+ TODO: check
+CVE-2026-57012 (In the Setup Wizard, there is a possible remote package install due to ...)
+ TODO: check
+CVE-2026-57008 (In Modem, there is a possible information disclosure due to improper i ...)
+ TODO: check
+CVE-2026-57006 (In acfw_ffa.c, there is a possible secret read due to a logic error in ...)
+ TODO: check
+CVE-2026-56997 (In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of- ...)
+ TODO: check
+CVE-2026-56992 (In multiple files, there is a possible permission bypass due to a conf ...)
+ TODO: check
+CVE-2026-56989 (In multiple locations, there is a possible out-of-bounds write due to ...)
+ TODO: check
+CVE-2026-56988 (In multiple functions of bluetooth_cco.cc, there is a possible use-aft ...)
+ TODO: check
+CVE-2026-56986 (In multiple files, there is a possible out-of-bounds read due to type ...)
+ TODO: check
+CVE-2026-56985 (In multiple files, there is a possible way to obtain signatures due to ...)
+ TODO: check
+CVE-2026-56982 (In VPU, there is a possible permission bypass due to a missing permiss ...)
+ TODO: check
+CVE-2026-56979 (In multiple locations, there is a possible permission bypass due to a ...)
+ TODO: check
+CVE-2026-56978 (In get_global_config_item_addr of gc.c, there is a possible out-of-bou ...)
+ TODO: check
+CVE-2026-56975 (In Cellular Modem, there is a possible denial of service due to improp ...)
+ TODO: check
+CVE-2026-56974 (In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of ...)
+ TODO: check
+CVE-2026-56973 (In multiple locations, there is a possible escalation of privilege due ...)
+ TODO: check
+CVE-2026-56972 (In multiple locations, there is a possible out-of-bounds write due to ...)
+ TODO: check
+CVE-2026-56970 (In multiple locations, there is a possible permission bypass due to a ...)
+ TODO: check
+CVE-2026-56967 (In Cellular Modem, there is a possible out-of-bounds write due to a he ...)
+ TODO: check
+CVE-2026-56964 (In multiple locations, there is a possible use-after-free due to a rac ...)
+ TODO: check
+CVE-2026-56960 (In multiple locations, there is a possible use-after-free due to a log ...)
+ TODO: check
+CVE-2026-56958 (In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out- ...)
+ TODO: check
+CVE-2026-56950 (In validate_ns_buf of mbu_class.rs, there is a possible information di ...)
+ TODO: check
+CVE-2026-56945 (In VPU, there is a possible out-of-bounds write due to a confused depu ...)
+ TODO: check
+CVE-2026-56942 (In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bound ...)
+ TODO: check
+CVE-2026-56941 (In multiple functions of fpc_tee_hal.c, there is a possible use-after- ...)
+ TODO: check
+CVE-2026-56932 (In Trusted Execution Environment, there is a possible memory corruptio ...)
+ TODO: check
+CVE-2026-56923 (In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory c ...)
+ TODO: check
+CVE-2026-56922 (In CPM, there is a possible permission bypass due to a confused deputy ...)
+ TODO: check
+CVE-2026-56920 (In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out ...)
+ TODO: check
+CVE-2026-56915 (In bigo_worker_thread of bigo.c, there is a possible escalation of pri ...)
+ TODO: check
+CVE-2026-56914 (In multiple locations, there is a possible use-after-free due to impro ...)
+ TODO: check
+CVE-2026-56907 (In VPU, there is a possible shared memory overwrite due to improper in ...)
+ TODO: check
+CVE-2026-56892 (In ReadDataElement of common.c, there is a possible information disclo ...)
+ TODO: check
+CVE-2026-56889 (In multiple locations, there is a possible permission bypass due to an ...)
+ TODO: check
+CVE-2026-56888 (In multiple locations, there is a possible permission bypass due to si ...)
+ TODO: check
+CVE-2026-56882 (In Cellular Modem, there is a possible information disclosure due to a ...)
+ TODO: check
+CVE-2026-56881 (In enable_segment of remap.c, there is a possible permission bypass du ...)
+ TODO: check
+CVE-2026-56879 (In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corrupt ...)
+ TODO: check
+CVE-2026-56831 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpa ...)
+ TODO: check
+CVE-2026-56830 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earli ...)
+ TODO: check
+CVE-2026-56829 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages ...)
+ TODO: check
+CVE-2026-56827 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedB ...)
+ TODO: check
+CVE-2026-56825 (Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages ...)
+ TODO: check
+CVE-2026-55887 (MCP Gateway allows easy and secure running and deployment of MCP serve ...)
+ TODO: check
+CVE-2026-55864 (GeoNetwork is a catalog application to manage spatially referenced res ...)
+ TODO: check
+CVE-2026-55863 (motionEye (mEye) is an online interface for a piece of software called ...)
+ TODO: check
+CVE-2026-55828 (qbee transport is a remote access transport protocol implementation. P ...)
+ TODO: check
+CVE-2026-55776 (OpenBao is an open source identity-based secrets management system. Pr ...)
+ TODO: check
+CVE-2026-55775 (OpenBao is an open source identity-based secrets management system. Pr ...)
+ TODO: check
+CVE-2026-55774 (OpenBao is an open source identity-based secrets management system. Pr ...)
+ TODO: check
+CVE-2026-55770 (OpenBao is an open source identity-based secrets management system. Pr ...)
+ TODO: check
+CVE-2026-55701 (The OpenTelemetry Collector Contrib repository contains components for ...)
+ TODO: check
+CVE-2026-55692 (The EmbedVideo Extension is a MediaWiki extension which adds a parser ...)
+ TODO: check
+CVE-2026-55691 (The EmbedVideo Extension is a MediaWiki extension which adds a parser ...)
+ TODO: check
+CVE-2026-55690 (The EmbedVideo Extension is a MediaWiki extension which adds a parser ...)
+ TODO: check
+CVE-2026-55650 (Outerbase Studio is a lightweight browser-based database GUI supportin ...)
+ TODO: check
+CVE-2026-55636 (Capsule is a multi-tenancy and policy-based framework for Kubernetes. ...)
+ TODO: check
+CVE-2026-55630 (Kiwi TCMS is an open source test management system. Prior to 16.1, Tes ...)
+ TODO: check
+CVE-2026-55617 (Hydro is a next-generation high-performance online judge platform. Fro ...)
+ TODO: check
+CVE-2026-55591 (Signal K Server is a server application that runs on a central hub in ...)
+ TODO: check
+CVE-2026-55375 (canto-saas-api is a PHP library for interacting with the Canto SaaS AP ...)
+ TODO: check
+CVE-2026-55374 (canto-saas-api is a PHP library for interacting with the Canto SaaS AP ...)
+ TODO: check
+CVE-2026-55366 (In IP Multimedia Subsystem, there is a possible authentication bypass ...)
+ TODO: check
+CVE-2026-55365 (In multiple functions of remap.c, there is a possible out-of-bounds wr ...)
+ TODO: check
+CVE-2026-55359 (In multiple locations, there is a possible permission bypass due to a ...)
+ TODO: check
+CVE-2026-55351 (In VPU, there is a possible out-of-bounds write due to an integer over ...)
+ TODO: check
+CVE-2026-55343 (In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bo ...)
+ TODO: check
+CVE-2026-55332 (In multiple locations, there is a possible out-of-bounds write due to ...)
+ TODO: check
+CVE-2026-55331 (In IP Multimedia Subsystem, there is a possible out-of-bounds write du ...)
+ TODO: check
+CVE-2026-55323 (In gf_base_update_finger_base of gf_base.c, there is a possible out-of ...)
+ TODO: check
+CVE-2026-55318 (In multiple locations, there is a possible use-after-free due to a rac ...)
+ TODO: check
+CVE-2026-55317 (In printf of printf.c, there is a possible out-of-bounds write due to ...)
+ TODO: check
+CVE-2026-55306 (In Cellular Modem, there is a possible denial of service due to improp ...)
+ TODO: check
+CVE-2026-55304 (In addr_remap_address_map of remap.c, there is a possible escalation o ...)
+ TODO: check
+CVE-2026-55302 (In multiple locations, there is a possible permission bypass due to a ...)
+ TODO: check
+CVE-2026-55301 (In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds writ ...)
+ TODO: check
+CVE-2026-55211 (Surfio is a library for reading and writing surface files. Prior to 0. ...)
+ TODO: check
+CVE-2026-55178 (GeoLens is a self-hosted geospatial data catalog with semantic search, ...)
+ TODO: check
+CVE-2026-55158 (Conflibot warns in advance when merging a pull request will cause conf ...)
+ TODO: check
+CVE-2026-55149 (Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using th ...)
+ TODO: check
+CVE-2026-54724 (Kiwi TCMS is an open source test management system. Prior to 16.1, the ...)
+ TODO: check
+CVE-2026-54689 (mcp-searxng is a Model Context Protocol server that gives AI assistant ...)
+ TODO: check
+CVE-2026-54688 (mcp-searxng is a Model Context Protocol server that gives AI assistant ...)
+ TODO: check
+CVE-2026-54637 (Dragonfly is an open source P2P-based file distribution and image acce ...)
+ TODO: check
+CVE-2026-54561 (MCP Memory Keeper is an MCP server for persistent context management i ...)
+ TODO: check
+CVE-2026-54549 (Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI ass ...)
+ TODO: check
+CVE-2026-54547 (Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI ass ...)
+ TODO: check
+CVE-2026-54450 (ToolHive is a utility designed to simplify the deployment and manageme ...)
+ TODO: check
+CVE-2026-54254 (Cyberdrop-DL is a bulk asynchronous downloader for multiple file hosts ...)
+ TODO: check
+CVE-2026-54251 (netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway ...)
+ TODO: check
+CVE-2026-54168 (Pipelines-as-Code is a CI/CD system that lets users define Tekton pipe ...)
+ TODO: check
+CVE-2026-54167 (Pipelines-as-Code is a CI/CD system that lets users define Tekton pipe ...)
+ TODO: check
+CVE-2026-54077 (ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the IMPORT DATABASE s ...)
+ TODO: check
+CVE-2026-54076 (ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026- ...)
+ TODO: check
+CVE-2026-54050 (Sakai is a Collaboration and Learning Environment (CLE). From 23.0 unt ...)
+ TODO: check
+CVE-2026-53966 (XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10. ...)
+ TODO: check
+CVE-2026-53957 (Contentful MCP Server is a Model Context Protocol server for the Conte ...)
+ TODO: check
+CVE-2026-53954 (Bugsink is a self-hosted error tracking tool. Prior to version 2.2.2, ...)
+ TODO: check
+CVE-2026-53941 (Inspektor Gadget is a set of tools and framework for data collection a ...)
+ TODO: check
+CVE-2026-53710 (MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, ...)
+ TODO: check
+CVE-2026-53660 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-53658 (Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to ...)
+ TODO: check
+CVE-2026-53459 (Bambuddy is a self-hosted print archive and management system for Bamb ...)
+ TODO: check
+CVE-2026-52828 (Kimai is an open-source time tracking application. Prior to 2.58.0, Ex ...)
+ TODO: check
+CVE-2026-52827 (Kimai is an open-source time tracking application. Prior to 2.59.0, th ...)
+ TODO: check
+CVE-2026-52826 (Kimai is an open-source time tracking application. Prior to 2.57.0, GE ...)
+ TODO: check
+CVE-2026-52825 (Kimai is an open-source time tracking application. Prior to 2.58.0, PO ...)
+ TODO: check
+CVE-2026-52824 (Kimai is an open-source time tracking application. Prior to 2.58.0, th ...)
+ TODO: check
+CVE-2026-52823 (Kimai is an open-source time tracking application. Prior to 2.58.0, Ti ...)
+ TODO: check
+CVE-2026-52822 (Kimai is an open-source time tracking application. Prior to 2.58.0, PA ...)
+ TODO: check
+CVE-2026-52821 (Kimai is an open-source time tracking application. Prior to 2.57.0, GE ...)
+ TODO: check
+CVE-2026-52820 (Kimai is an open-source time tracking application. Prior to 2.57.0, PA ...)
+ TODO: check
+CVE-2026-52819 (Kimai is an open-source time tracking application. Prior to 2.57.0, th ...)
+ TODO: check
+CVE-2026-52724 (Kuma is a modern Envoy-based service mesh that can run on every cloud ...)
+ TODO: check
+CVE-2026-52484 (An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows a ...)
+ TODO: check
+CVE-2026-50166 (Kuma is a modern Envoy-based service mesh that can run on every cloud ...)
+ TODO: check
+CVE-2026-50024 (GitHacker is a tool that restores Git repositories from exposed .git d ...)
+ TODO: check
+CVE-2026-49446 (Cosmos provides users the ability self-host a home server by acting as ...)
+ TODO: check
+CVE-2026-49254 (Dragonfly is an open source P2P-based file distribution and image acce ...)
+ TODO: check
+CVE-2026-48987 (pyLoad is a free and open-source download manager written in Python. P ...)
+ TODO: check
+CVE-2026-48737 (pyLoad is a free and open-source download manager written in Python. P ...)
+ TODO: check
+CVE-2026-48722 (Nextflow is a DSL for data-driven computational pipelines. From 25.09. ...)
+ TODO: check
+CVE-2026-48717 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-47780 (free5GC is an open-source implementation of the 5G core network. In 4. ...)
+ TODO: check
+CVE-2026-47426 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-47424 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-46623 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-46619 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-46498 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-46495 (OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.1, the J ...)
+ TODO: check
+CVE-2026-46488 (motionEye (mEye) is an online interface for a piece of software called ...)
+ TODO: check
+CVE-2026-45794 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-45579 (DIRAC is an interware, meaning a software framework for distributed co ...)
+ TODO: check
+CVE-2026-45052 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-45051 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-45048 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-44793 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-44778 (Inspektor Gadget is a set of tools and framework for data collection a ...)
+ TODO: check
+CVE-2026-44300 (OpenCost provides cost monitoring for Kubernetes workloads and cloud c ...)
+ TODO: check
+CVE-2026-44282 (Decidim is a participatory democracy framework. Prior to 0.32.0, a low ...)
+ TODO: check
+CVE-2026-44203 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-44202 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-44163 (fluent-plugin-opentelemetry is a Fluentd input and output plugin for f ...)
+ TODO: check
+CVE-2026-41573 (Open Access Management (OpenAM) is an access management solution. Prio ...)
+ TODO: check
+CVE-2026-40058 (CrowdStrike released a security update to address a vulnerability in t ...)
+ TODO: check
+CVE-2026-39919 (Ghostscript before 10.08.0 contains a heap-based buffer overflow vulne ...)
+ TODO: check
+CVE-2026-39040 (BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Sc ...)
+ TODO: check
+CVE-2026-39039 (In BharatMLStack up to and including v1.3.0, Trufflebox UI stores the ...)
+ TODO: check
+CVE-2026-39038 (BharatMLStack up to and including v1.3.0 is vulnerable to Cross Site S ...)
+ TODO: check
+CVE-2026-37152 (TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a ha ...)
+ TODO: check
+CVE-2026-25827 (An issue was discovered in Keyfactor SignServer before 7.6.0. A number ...)
+ TODO: check
+CVE-2026-25826 (An issue was discovered in Keyfactor SignServer before 7.6.0. The attr ...)
+ TODO: check
+CVE-2026-25825 (An issue was discovered in Keyfactor SignServer before 7.6.0. The outp ...)
+ TODO: check
+CVE-2026-21588 (This High severity DoS (Denial of Service) vulnerability was introduce ...)
+ TODO: check
+CVE-2026-21587 (This High severity Improper Authorization vulnerability was introduced ...)
+ TODO: check
+CVE-2026-21586 (This High severity Improper Authorization vulnerability was introduced ...)
+ TODO: check
+CVE-2026-1759 (Improper handling of insufficient permissions or privileges vulnerabil ...)
+ TODO: check
+CVE-2026-1758 (Session fixation vulnerability in Secomea GateManager (webserver modul ...)
+ TODO: check
+CVE-2026-19886 (OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code ...)
+ TODO: check
+CVE-2026-19885 (OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote C ...)
+ TODO: check
+CVE-2026-19781 (Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote ...)
+ TODO: check
+CVE-2026-19780 (Koha Eval Code Injection Remote Code Execution Vulnerability. This vul ...)
+ TODO: check
+CVE-2026-19774 (BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2026-19773 (libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Rem ...)
+ TODO: check
+CVE-2026-19641 (On affected platforms running Arista EOS with password authentication ...)
+ TODO: check
+CVE-2026-19515 (The WSO2 Integrator MI VS Code extension fails to properly sanitize or ...)
+ TODO: check
+CVE-2026-19504 (Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This ...)
+ TODO: check
+CVE-2026-19407 (Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK ...)
+ TODO: check
+CVE-2026-18115 (Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_proper ...)
+ TODO: check
+CVE-2026-18113 (In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTM ...)
+ TODO: check
+CVE-2026-18111 (Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site script ...)
+ TODO: check
+CVE-2026-18110 (Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization ...)
+ TODO: check
+CVE-2026-16141 (OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic fl ...)
+ TODO: check
+CVE-2026-16140 (OpenBMC's IPMI implementation, phosphor-net-ipmid, is vulnerable to a ...)
+ TODO: check
+CVE-2026-15609 (The Bridge - Creative Multipurpose WordPress Theme theme for WordPress ...)
+ TODO: check
+CVE-2026-14805 (The Consulting theme for WordPress is vulnerable to Privilege Escalati ...)
+ TODO: check
+CVE-2026-13210 (GitLab has remediated an issue in GitLab CE/EE affecting all versions ...)
+ TODO: check
+CVE-2026-12910 (GitLab has remediated an issue in GitLab CE/EE affecting all versions ...)
+ TODO: check
+CVE-2026-12752 (IBM Business Automation Workflow containers and traditional is vulnera ...)
+ TODO: check
+CVE-2026-12751 (IBM Cloud Pak for Business Automation is vulnerable to HTML injection. ...)
+ TODO: check
+CVE-2026-12750 (IBM Cloud Pak for Business Automation is vulnerable to stored cross-si ...)
+ TODO: check
+CVE-2026-12749 (IBM Cloud Pak for Business Automation is vulnerable to stored cross-si ...)
+ TODO: check
+CVE-2026-12742 (IBM Business Automation Workflow containers and traditional could allo ...)
+ TODO: check
+CVE-2026-12728 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-12667 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-12666 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-12358 (IBM Verify Identity Access could allow a remote attacker to cause a de ...)
+ TODO: check
+CVE-2026-12355 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-12354 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-12351 (IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0 ...)
+ TODO: check
+CVE-2026-12150 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-12101 (IBM Verify Identity Access could allow an administrator to execute add ...)
+ TODO: check
+CVE-2026-11934 (IBM Verify Identity Access could allow an administrator to execute add ...)
+ TODO: check
+CVE-2026-11929 (IBM Security Verify Identity Access Reverse Proxy in certain configura ...)
+ TODO: check
+CVE-2026-11928 (IBM Verify Identity Access is vulnerable to a buffer overflow attack.)
+ TODO: check
+CVE-2026-11927 (IBM Security Verify Identity Access reverse proxy may allow parameters ...)
+ TODO: check
+CVE-2026-11926 (IBM Verify Identity Access could allow a remote attacker to cause a de ...)
+ TODO: check
+CVE-2026-11921 (IBM Verify Identity Access containers may not apply management passwor ...)
+ TODO: check
+CVE-2026-11918 (IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could all ...)
+ TODO: check
+CVE-2026-11864 (IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fi ...)
+ TODO: check
+CVE-2026-11729 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-11728 (IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3 ...)
+ TODO: check
+CVE-2026-0200 (In Cellular Modem, there is a possible out-of-bounds write due to a he ...)
+ TODO: check
+CVE-2026-0199 (In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-b ...)
+ TODO: check
+CVE-2026-0197 (In VPU, there is a possible information dislclosure due to a logic err ...)
+ TODO: check
+CVE-2026-0194 (In multiple locations, there is a possible permission bypass due to an ...)
+ TODO: check
+CVE-2026-0192 (In Bootloader, there is a possible escalation of privilege due to a mi ...)
+ TODO: check
+CVE-2026-0189 (In ac_init_policy of init.c, there is a possible permission bypass due ...)
+ TODO: check
+CVE-2026-0187 (In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible esc ...)
+ TODO: check
+CVE-2026-0186 (In ac_init_one_sswrp of init.c, there is a possible escalation of priv ...)
+ TODO: check
+CVE-2026-0183 (In CPM, there is a possible information disclosure due to a confused d ...)
+ TODO: check
+CVE-2026-0179 (In Bootloader, there is a possible permission bypass due to a missing ...)
+ TODO: check
+CVE-2026-0177 (In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-b ...)
+ TODO: check
+CVE-2026-0171 (In multiple locations, there is a possible out-of-bounds write due to ...)
+ TODO: check
+CVE-2026-0170 (In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of- ...)
+ TODO: check
+CVE-2026-0159 (In Cellular Modem, there is a possible out-of-bounds write due to a mi ...)
+ TODO: check
+CVE-2025-66974 (An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi ...)
+ TODO: check
+CVE-2025-5802 (The self-registration flow accepts user-supplied input for usernames w ...)
+ TODO: check
+CVE-2025-13166 (The SMS OTP flow fails to adequately handle error messages, allowing a ...)
+ TODO: check
+CVE-2024-58385 (Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability ...)
+ TODO: check
+CVE-2024-58384 (Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAs ...)
+ TODO: check
+CVE-2024-14029 (Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked head ...)
+ TODO: check
+CVE-2023-54398 (Yonyou U8 Cloud contains an unauthenticated Java deserialization vulne ...)
+ TODO: check
+CVE-2023-54397 (Tornado before 6.3.3 contains an HTTP request smuggling vulnerability ...)
+ TODO: check
+CVE-2026-92079 (Mitigation bypass in the Widget: Win32 component. This vulnerability w ...)
- firefox <not-affected> (Only affects Firefox on Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92079
-CVE-2026-92078
+CVE-2026-92078 (Denial-of-service in the Security component. This vulnerability was fi ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92078
-CVE-2026-92077
+CVE-2026-92077 (Denial-of-service in the SVG component. This vulnerability was fixed i ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92077
-CVE-2026-92076
+CVE-2026-92076 (Incorrect boundary conditions in the Networking component. This vulner ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92076
-CVE-2026-92075
+CVE-2026-92075 (Mitigation bypass in the Networking component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92075
-CVE-2026-92074
+CVE-2026-92074 (Mitigation bypass in the Popup Blocker component. This vulnerability w ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92074
-CVE-2026-92073
+CVE-2026-92073 (Privilege escalation in the Enterprise Policies component. This vulner ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92073
-CVE-2026-92072
+CVE-2026-92072 (Incorrect boundary conditions in the Safe Browsing component. This vul ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92072
-CVE-2026-92071
+CVE-2026-92071 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
- firefox <not-affected> (Only affects Firefox on Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92071
-CVE-2026-92070
+CVE-2026-92070 (Information disclosure in the Networking component. This vulnerability ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92070
-CVE-2026-92069
+CVE-2026-92069 (Spoofing issue in the DOM: Navigation component. This vulnerability wa ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92069
-CVE-2026-92068
+CVE-2026-92068 (Site isolation issue in the Reader Mode component. This vulnerability ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92068
-CVE-2026-92067
+CVE-2026-92067 (Use-after-free in the Widget: Gtk component. This vulnerability was fi ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92067
-CVE-2026-92066
+CVE-2026-92066 (Sandbox escape in the Profile Backup component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92066
-CVE-2026-92065
+CVE-2026-92065 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
- firefox <not-affected> (Only affects Firefox on Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92065
-CVE-2026-92064
+CVE-2026-92064 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
- firefox <not-affected> (Only affects Firefox on Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92064
-CVE-2026-92063
+CVE-2026-92063 (Denial-of-service in the Audio/Video component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92063
-CVE-2026-92062
+CVE-2026-92062 (Privilege escalation in the Session Restore component. This vulnerabil ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92062
-CVE-2026-92061
+CVE-2026-92061 (Incorrect boundary conditions in the Security: Process Sandboxing comp ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92061
-CVE-2026-92060
+CVE-2026-92060 (Use-after-free in the Internationalization component. This vulnerabili ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92060
-CVE-2026-92059
+CVE-2026-92059 (Incorrect boundary conditions in the DOM: Editor component. This vulne ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92059
-CVE-2026-92058
+CVE-2026-92058 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92058
-CVE-2026-92032
+CVE-2026-92032 (Sandbox escape due to invalid pointer in the Graphics component. This ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92032
-CVE-2026-92031
+CVE-2026-92031 (Information disclosure in the Graphics: ImageLib component. This vulne ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92031
-CVE-2026-92057
+CVE-2026-92057 (Mitigation bypass in the Enterprise Policies component. This vulnerabi ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92057
-CVE-2026-92056
+CVE-2026-92056 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92056
-CVE-2026-92055
+CVE-2026-92055 (Privilege escalation in the DevTools component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92055
-CVE-2026-92054
+CVE-2026-92054 (Privilege escalation in the Memory component. This vulnerability was f ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92054
-CVE-2026-92053
+CVE-2026-92053 (Privilege escalation in the Graphics: CanvasWebGL component. This vuln ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92053
-CVE-2026-92052
+CVE-2026-92052 (Privilege escalation due to uninitialized memory in the Graphics: Canv ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92052
-CVE-2026-92051
+CVE-2026-92051 (Spoofing issue due to invalid pointer in the Graphics component. This ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92051
-CVE-2026-92050
+CVE-2026-92050 (Sandbox escape due to race condition in the XPConnect component. This ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92050
-CVE-2026-92049
+CVE-2026-92049 (Use-after-free in the Widget: Win32 component. This vulnerability was ...)
- firefox <not-affected> (Only affects Firefox on Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92049
-CVE-2026-92048
+CVE-2026-92048 (Sandbox escape due to incorrect boundary conditions in the Widget: Win ...)
- firefox <not-affected> (Only affects Firefox on Windows)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92048
-CVE-2026-92047
+CVE-2026-92047 (Privilege escalation in the Crash Reporting component. This vulnerabil ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92047
-CVE-2026-92046
+CVE-2026-92046 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92046
-CVE-2026-92030
+CVE-2026-92030 (Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92030
-CVE-2026-92045
+CVE-2026-92045 (Sandbox escape due to incorrect boundary conditions in the WebRTC comp ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92045
-CVE-2026-92044
+CVE-2026-92044 (Information disclosure in the Networking: HTTP component. This vulnera ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92044
-CVE-2026-92043
+CVE-2026-92043 (Privilege escalation due to incorrect boundary conditions in the Audio ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92043
-CVE-2026-92042
+CVE-2026-92042 (Race condition in the DOM: Content Processes component. This vulnerabi ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92042
-CVE-2026-92041
+CVE-2026-92041 (Mitigation bypass in the DOM: Networking component. This vulnerability ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92041
-CVE-2026-92040
+CVE-2026-92040 (Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92040
-CVE-2026-92039
+CVE-2026-92039 (Mitigation bypass in the DOM: Notifications component. This vulnerabil ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92039
-CVE-2026-92038
+CVE-2026-92038 (Mitigation bypass in the Remote Settings Client component. This vulner ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92038
-CVE-2026-92037
+CVE-2026-92037 (Incorrect boundary conditions in the DOM: Animation component. This vu ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92037
-CVE-2026-92029
+CVE-2026-92029 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92029
-CVE-2026-92028
+CVE-2026-92028 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92028
-CVE-2026-92027
+CVE-2026-92027 (Use-after-free in the DOM: Streams component. This vulnerability was f ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92027
-CVE-2026-92036
+CVE-2026-92036 (Incorrect boundary conditions in the Networking: HTTP component. This ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92036
-CVE-2026-92026
+CVE-2026-92026 (Use-after-free in the Networking component. This vulnerability was fix ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92026
-CVE-2026-92025
+CVE-2026-92025 (Use-after-free in the DOM: Navigation component. This vulnerability wa ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92025
-CVE-2026-92024
+CVE-2026-92024 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92024
-CVE-2026-92023
+CVE-2026-92023 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92023
-CVE-2026-92022
+CVE-2026-92022 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92022
-CVE-2026-92020
+CVE-2026-92020 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92020
-CVE-2026-92019
+CVE-2026-92019 (Mitigation bypass in the Remote Settings Client component. This vulner ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92019
-CVE-2026-92018
+CVE-2026-92018 (Sandbox escape in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92018
-CVE-2026-92017
+CVE-2026-92017 (Privilege escalation in the DOM: Service Workers component. This vulne ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92017
-CVE-2026-92016
+CVE-2026-92016 (Use-after-free in the Disability Access APIs component. This vulnerabi ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92016
-CVE-2026-92035
+CVE-2026-92035 (Sandbox escape due to incorrect boundary conditions in the Graphics co ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92035
-CVE-2026-92034
+CVE-2026-92034 (Site isolation issue in the Graphics component. This vulnerability was ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92034
-CVE-2026-92015
+CVE-2026-92015 (Privilege escalation in the WebExtensions component. This vulnerabilit ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92015
-CVE-2026-92013
+CVE-2026-92013 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92013
-CVE-2026-92012
+CVE-2026-92012 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92012
-CVE-2026-92011
+CVE-2026-92011 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92011
-CVE-2026-92010
+CVE-2026-92010 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92010
-CVE-2026-92009
+CVE-2026-92009 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92009
-CVE-2026-92008
+CVE-2026-92008 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92008
-CVE-2026-92007
+CVE-2026-92007 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92007
-CVE-2026-92006
+CVE-2026-92006 (Privilege escalation due to incorrect boundary conditions in the Graph ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92006
-CVE-2026-92005
+CVE-2026-92005 (Use-after-free in the Audio/Video: Web Codecs component. This vulnerab ...)
- firefox <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92005
-CVE-2026-92033
+CVE-2026-92033 (Privilege escalation in Firefox for Android. This vulnerability was fi ...)
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/#CVE-2026-92033
CVE-2026-91774 (Yao through v1.0.0-rc22 authenticates but fails to authorize the GET / ...)
@@ -362,6 +1294,7 @@ CVE-2026-90816 (A vulnerability was found in FFmpeg 8.0.x. This affects the func
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4ebf8dbbdbdc2296f21a03548b5fc (n8.1)
CVE-2026-90815 (A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3 ...)
+ {DSA-6276-1 DSA-6268-1}
- ffmpeg 7:8.1-1
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1cb62d663ece0b6cacf4a1f465da3 (n8.1)
@@ -10798,7 +11731,7 @@ CVE-2026-20500 (In Modem, there is a possible system crash due to improper input
NOT-FOR-US: MediaTek
CVE-2026-16876 (An authentication bypass vulnerability exists in the WebGUI of Series ...)
NOT-FOR-US: NEC
-CVE-2026-85013
+CVE-2026-85013 (A flaw was found in environment-modules. A local attacker can exploit ...)
- modules 5.6.1-3
[trixie] - modules <no-dsa> (Minor issue; will be fixed via point release)
NOTE: Fixed by: https://github.com/envmodules/modules/commit/d401b76a863386f9064637c71b66837805f82881 (v5.6.2)
@@ -19703,7 +20636,7 @@ CVE-2026-81893 (A flaw was found in gdk-pixbuf. When loading a specially crafted
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/efe658674bd103d1c9bf50809d5767a3f6dd5a01
NOTE: The introducing commit is the fix for CVE-2025-7345.
NOTE: Since gdk-pixbuf >= 2.44.5+dfsg-3 gdk-pixbuf loads most image formats using glycin
-CVE-2026-80489
+CVE-2026-80489 (Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide ch ...)
- glibc 2.43-5 (bug #1145987)
[trixie] - glibc <no-dsa> (Minor issue)
[bookworm] - glibc <postponed> (Minor issue)
@@ -20763,7 +21696,7 @@ CVE-2026-80158 (A flaw was found in the ipa_getkeytab module of the community.ge
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2524651
CVE-2026-78360
NOT-FOR-US: fedora-infra/anitya
-CVE-2026-77117
+CVE-2026-77117 (Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide ...)
- glibc 2.43-5 (bug #1145880)
[trixie] - glibc <no-dsa> (Minor issue)
[bookworm] - glibc <postponed> (Minor issue)
@@ -88552,15 +89485,15 @@ CVE-2026-12064 (When a user invokes curl using a schemeless URL combined with `-
NOTE: https://curl.se/docs/CVE-2026-12064.html
NOTE: Introduced with: https://github.com/curl/curl/commit/18270893abdb19f0ca170c118f8a2847dbd304be (curl-7_81_0)
NOTE: Fixed by: https://github.com/curl/curl/commit/ab3bb8cd8be8f9d4acb97da0418abc279182041e (rc-8_21_0-3, curl-8_21_0)
-CVE-2026-47215
+CVE-2026-47215 (SingularityCE and SingularityPRO are open source container platforms. ...)
- singularity-container <removed>
NOTE: https://github.com/sylabs/singularity/security/advisories/GHSA-wqcr-7rf3-f64m
-CVE-2026-48785
+CVE-2026-48785 (Apptainer is an open source container platform. Prior to version 1.5.1 ...)
- apptainer <unfixed> (bug #1140649)
NOTE: https://github.com/apptainer/apptainer/security/advisories/GHSA-cr2j-534f-mf3g
NOTE: Fixed by: https://github.com/apptainer/apptainer/commit/0ff35257420e0c6cb97dac11d305749c893e5214 (v1.5.1)
NOTE: Fixed by: https://github.com/apptainer/apptainer/commit/4ce069ed6e56e1acd8cbfbfc0d57ccce3311bf92 (v1.5.1)
-CVE-2026-54503
+CVE-2026-54503 (plone.app.textfield provides a zope.schema-style field type called Ric ...)
NOT-FOR-US: Plone
CVE-2026-55830 (RestrictedPython is a tool that helps to define a subset of the Python ...)
NOT-FOR-US: Plone
@@ -89718,7 +90651,7 @@ CVE-2026-6653 (Use After Free in libxml2's xmlParseInternalSubset from GNOME lib
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/libxml2/-/commit/463bbeeca1805b5c4828f50d0fefc4eebaf620df (v2.11.0)
NOTE: Mark 2.14.5+dfsg-0.1 as the first version fixed in unstable as from 2.12.7+dfsg-1
NOTE: the version was reverted back to a 2.9.14 based one.
-CVE-2026-55226
+CVE-2026-55226 (Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or ...)
NOT-FOR-US: Strimzi
CVE-2026-8918 (A permissive list of allowed inputs in ASUS Armoury Crate allows a loc ...)
NOT-FOR-US: ASUS
@@ -90462,7 +91395,7 @@ CVE-2026-50195 (containerd is an open-source container runtime. Versions prior t
[bookworm] - containerd <not-affected> (Vulnerable code not present, only affects 2.x)
[bullseye] - containerd <not-affected> (Vulnerable code not present, only affects 2.x)
NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574
-CVE-2026-55225
+CVE-2026-55225 (Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or ...)
NOT-FOR-US: Strimzi
CVE-2026-3865
NOT-FOR-US: Kubernetes CSI Driver for SMB
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6abaef06f49dbf2fc10b57fff2d7a34536333ce
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6abaef06f49dbf2fc10b57fff2d7a34536333ce
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260915/07f90383/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list