Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 242 of 1013.
- CVE-2026-93292 SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builders
- CVE-2026-93291 Improper certificate validation in Eufy Omni C20
- CVE-2026-93290 Use of Hard-coded Credentials in Eufy Omni C20
- CVE-2026-93289 OS command injection in Eufy Omni C20, Omni X10 Pro
- CVE-2026-93288 netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
- CVE-2026-93287 i2c: smbus: reject oversized block transfers in the common path
- CVE-2026-93286 net: appletalk: fix NULL pointer dereference in aarp_send_ddp()
- CVE-2026-93285 f2fs: embed f2fs_gc_kthread in f2fs_sb_info
- CVE-2026-93284 drm/pagemap: dma-unmap pages before handling migration errors
- CVE-2026-93283 i3c: master: Fix device_register() error path
- CVE-2026-93282 ksmbd: fix maximum allowed access checks
- CVE-2026-93281 wifi: rtw89: fix HE extended capability length check
- CVE-2026-93280 greybus: audio: bound the topology section sizes against the fetched size
- CVE-2026-93279 staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
- CVE-2026-93278 staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
- CVE-2026-93277 RDMA/bnxt_re: Validate udata before executing commands
- CVE-2026-93276 phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
- CVE-2026-93275 perf/x86/intel/pt: Fix stop/start with no update
- CVE-2026-93274 pinctrl: bcm2835: Don't remove an unregistered GPIO chip
- CVE-2026-93273 regulator: tps6594: Fix device node reference leaks in multiphase loop
- CVE-2026-93272 remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
- CVE-2026-93271 wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
- CVE-2026-93270 bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn
- CVE-2026-9327 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-93269 ext4: fix circular lock dependency in ext4_ext_migrate
- CVE-2026-93268 ext4: skip extra isize expansion during mount to prevent deadlock
- CVE-2026-93267 RDMA/core: Fix potential use after free in uverbs_free_dmah()
- CVE-2026-93266 arm64: RSI: fix field-spanning write warning in attestation token init
- CVE-2026-93265 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node
- CVE-2026-93264 RDMA/efa: Fix PBL chunk length computation
- CVE-2026-93263 clk: eswin: Zero-initialize stack-allocated clk_init_data
- CVE-2026-93262 md/raid5-ppl: fix use-after-free in ppl_do_flush()
- CVE-2026-93261 locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
- CVE-2026-93260 powerpc/xive: propagate IPI init errors to prevent use-after-free
- CVE-2026-93259 powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
- CVE-2026-93258 ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
- CVE-2026-93257 block: handle nogenerate/noverify properly in fs-integrity
- CVE-2026-93256 arm64: hibernate: mask DAIF before restoring hibernated kernel
- CVE-2026-93255 btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
- CVE-2026-93254 arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit
- CVE-2026-93253 sched/isolation: Defer freeing of cpumask memblock memory to initcall
- CVE-2026-93252 ocfs2: fix circular locking dependency in ocfs2_init_acl()
- CVE-2026-93251 ACPI: bus: Introduce acpi_bus_get_primary_device()
- CVE-2026-93250 vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()
- CVE-2026-93249 spi: amlogic-spisg: Make sure clk_init_data is fully initialized
- CVE-2026-93248 drm/xe: don't WARN on kernel job timeout when device already wedged
- CVE-2026-93247 Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
- CVE-2026-93246 octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity
- CVE-2026-93245 apparmor: policy_int make sure list heads are initialized before fail path
- CVE-2026-93244 drm/sysfb: simpledrm: Improve stride validation
- CVE-2026-93243 mm/secretmem: properly account locked pages
- CVE-2026-93242 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
- CVE-2026-93241 memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done
- CVE-2026-93240 memcg: make the v1 soft limit knob inert
- CVE-2026-93239 arm64: mm: Fix the lockless page-table walk in show_pte()
- CVE-2026-93238 s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
- CVE-2026-93237 LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
- CVE-2026-93236 media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
- CVE-2026-93235 f2fs: fix to zero post-EOF data when extending file size
- CVE-2026-93234 drm/gud: validate TV mode names before creating enum property
- CVE-2026-93233 drm/nouveau/dmem: fix callocated underflow on large folio split
- CVE-2026-93232 mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages
- CVE-2026-93231 lockd: fix swapped arguments in nlmsvc_match_ip()
- CVE-2026-93230 mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier
- CVE-2026-9323 Insecure PRNG and Information Exposure in urwid Web Display Backend
- CVE-2026-93229 nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry
- CVE-2026-93228 svcrdma: Reject Write/Reply chunks with segcount 0
- CVE-2026-93227 mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn
- CVE-2026-93226 ipv6: use RCU iterator to dump route exceptions
- CVE-2026-93225 phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
- CVE-2026-93224 svcrdma: Fix unmatched rn_unregister on failed accept
- CVE-2026-93223 staging: media: tegra-video: fix of_node_put() on VIP parse errors
- CVE-2026-93222 signal: avoid shared siginfo namespace rewrites
- CVE-2026-93221 nfsd: convert nfsd_net boolean flags to unsigned long flags word
- CVE-2026-93220 sched_ext: Keep kick_sync waiting on the rq's own CPU
- CVE-2026-9322 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- CVE-2026-93219 clocksource/drivers/timer-sun4i: Advertise a real minimum delta
- CVE-2026-93218 mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd
- CVE-2026-93217 mm/madvise: skip device-private PMDs in cold and pageout walks
- CVE-2026-93216 mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()
- CVE-2026-93215 cdx: Fix double free when sysfs file creation fails
- CVE-2026-93214 usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()
- CVE-2026-93213 of: fix out-of-bounds read in of_alias_scan() stem parser
- CVE-2026-93212 nfsd: guard nfsd_serv deref in nfsd_file_net_dispose
- CVE-2026-93211 nfsd: initialize DRC hash table before registering shrinker
- CVE-2026-93210 smb: client: harden DFS cache against invalid target hints
- CVE-2026-93209 Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
- CVE-2026-93208 kasan: fix cache shrink race with CPU hotplug
- CVE-2026-93207 SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
- CVE-2026-93206 PCI/proc: Use file_ns_capable() when checking config space read access
- CVE-2026-93205 iommu/arm-smmu-v3: Manage teardown with devm
- CVE-2026-93204 batman-adv: dat: atomically update mac addresses
- CVE-2026-93203 batman-adv: bla: avoid CRC corruption due to parallel claim add
- CVE-2026-93202 i3c: master: Fix recursive locking during device registration
- CVE-2026-93201 dm-pcache: validate seg_id fields from persistent memory
- CVE-2026-93200 i3c: master: Fix use-after-free of master->this
- CVE-2026-9320 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target
- CVE-2026-93198 dm-pcache: validate the persisted dirty_tail chain at load
- CVE-2026-93197 memcg: move LRU size accounting on reparenting instead of copying it