Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 562 of 1013.
- CVE-2026-53324 net: mana: Use pci_name() for debugfs directory naming
- CVE-2026-53323 net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops
- CVE-2026-53322 vfio/pci: Clean up DMABUFs before disabling function
- CVE-2026-53321 io_uring/napi: cap busy_poll_to 10 msec
- CVE-2026-53320 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
- CVE-2026-5332 Xiaopi Panel WAF Firewall demo.php cross site scripting
- CVE-2026-53319 blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
- CVE-2026-53318 wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr()
- CVE-2026-53317 wifi: mt76: mt7921: Place upper limit on station AID
- CVE-2026-53316 drm/amd/ras: Fix NULL deref in ras_core_ras_interrupt_detected()
- CVE-2026-53315 drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()
- CVE-2026-53314 padata: Put CPU offline callback in ONLINE section to allow failure
- CVE-2026-53313 drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths
- CVE-2026-53312 iommu/riscv: Remove overflows on the invalidation path
- CVE-2026-53311 fuse: fix uninit-value in fuse_dentry_revalidate()
- CVE-2026-53310 soc/tegra: cbb: Fix cross-fabric target timeout lookup
- CVE-2026-5331 OpenCart Extension Installer installer.php path traversal
- CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
- CVE-2026-53308 power: supply: max77705: Free allocated workqueue and fix removal order
- CVE-2026-53307 pinctrl: pinconf-generic: Fully validate 'pinmux' property
- CVE-2026-53306 tty: hvc_iucv: fix off-by-one in number of supported devices
- CVE-2026-53305 usb: typec: ps883x: Fix Oops at unbind
- CVE-2026-53304 scsi: sg: Resolve soft lockup issue when opening /dev/sgX
- CVE-2026-53303 f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
- CVE-2026-53302 crypto: eip93 - fix hmac setkey algo selection
- CVE-2026-53301 reset: amlogic: t7: Fix null reset ops
- CVE-2026-53300 net: enetc: fix NTMP DMA use-after-free issue
- CVE-2026-5330 SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control
- CVE-2026-53299 net: airoha: Move ndesc initialization at end of airoha_qdma_init_tx()
- CVE-2026-53298 net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue()
- CVE-2026-53297 net: mana: Guard mana_remove against double invocation
- CVE-2026-53296 mailbox: mailbox-test: free channels on probe error
- CVE-2026-53295 mailbox: add sanity check for channel array
- CVE-2026-53294 mailbox: mailbox-test: don't free the reused channel
- CVE-2026-53293 drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
- CVE-2026-53292 net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
- CVE-2026-53291 ALSA: hda/conexant: Fix missing error check for jack detection
- CVE-2026-53290 drm/xe/eustall: Fix drm_dev_put called before stream disable in close
- CVE-2026-5329 Rapid7 Velociraptor Improper Input Validation in Client Message Handler
- CVE-2026-53289 ice: fix NULL pointer dereference in ice_reset_all_vfs()
- CVE-2026-53288 arm64: Reserve an extra page for early kernel mapping
- CVE-2026-53287 audit: fix incorrect inheritable capability in CAPSET records
- CVE-2026-53286 idpf: fix double free and use-after-free in aux device error paths
- CVE-2026-53285 drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED
- CVE-2026-53284 btrfs: only release the dirty pages io tree after successful writes
- CVE-2026-53283 iommu/amd: Bounds-check devid in __rlookup_amd_iommu()
- CVE-2026-53282 x86/kexec: Push kjump return address even for non-kjump kexec
- CVE-2026-53281 iommu/vt-d: Avoid NULL pointer dereference or refcount corruption
- CVE-2026-53280 iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()
- CVE-2026-5328 shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection
- CVE-2026-53279 drm/gma500/oaktrail_lvds: fix hang on init failure
- CVE-2026-53278 arm_mpam: Check whether the config array is allocated before destroying it
- CVE-2026-53277 KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
- CVE-2026-53276 Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
- CVE-2026-53275 ipv6: mcast: Fix use-after-free when processing MLD queries
- CVE-2026-53274 net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
- CVE-2026-53273 tee: optee: prevent use-after-free when the client exits before the supplicant
- CVE-2026-53272 erofs: fix use-after-free on sbi->sync_decompress
- CVE-2026-53271 ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
- CVE-2026-53270 ipvs: clear the svc scheduler ptr early on edit
- CVE-2026-5327 efforthye fast-filesystem-mcp index.ts handleGetDiskUsage command injection
- CVE-2026-53269 netfilter: synproxy: add mutex to guard hook reference counting
- CVE-2026-53268 netfilter: conntrack_irc: fix possible out-of-bounds read
- CVE-2026-53267 netfilter: nft_ct: bail out on template ct in get eval
- CVE-2026-53266 Linux Kernel Out-of-Bounds Write
- CVE-2026-53265 dm cache policy smq: check allocation under invalidate lock
- CVE-2026-53264 net/sched: act_api: use RCU with deferred freeing for action lifecycle
- CVE-2026-53263 6lowpan: fix off-by-one in multicast context address compression
- CVE-2026-53262 l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
- CVE-2026-53261 devlink: Release nested relation on devlink free
- CVE-2026-53260 tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
- CVE-2026-5326 SourceCodester Leave Application System User Information index.php authorization
- CVE-2026-53259 ipv6: anycast: insert aca into global hash under idev->lock
- CVE-2026-53258 wifi: fix leak if split 6 GHz scanning fails
- CVE-2026-53257 wifi: cfg80211: enforce HE/EHT cap/oper consistency
- CVE-2026-53256 Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
- CVE-2026-53255 Bluetooth: MGMT: validate advertising TLV before type checks
- CVE-2026-53254 Bluetooth: RFCOMM: validate skb length in MCC handlers
- CVE-2026-53253 Bluetooth: bnep: reject short frames before parsing
- CVE-2026-53252 Bluetooth: fix memory leak in error path of hci_alloc_dev()
- CVE-2026-53251 Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
- CVE-2026-53250 xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata()
- CVE-2026-5325 SourceCodester Simple Customer Relationship Management System Create Ticket create-ticket.php cross site scripting
- CVE-2026-53249 ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
- CVE-2026-53248 net: airoha: Fix use-after-free in metadata dst teardown
- CVE-2026-53247 net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
- CVE-2026-53246 sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
- CVE-2026-53245 net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
- CVE-2026-53244 VFS: fix possible failure to unlock in nfsd4_create_file()
- CVE-2026-53243 rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
- CVE-2026-53242 ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
- CVE-2026-53241 ALSA: seq: dummy: fix UMP event stack overread
- CVE-2026-53240 xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload
- CVE-2026-5324 Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value
- CVE-2026-53239 xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
- CVE-2026-53238 netlabel: validate unlabeled address and mask attribute lengths
- CVE-2026-53237 gpio: mvebu: fix NULL pointer dereference in suspend/resume
- CVE-2026-53236 tcp: restrict SO_ATTACH_FILTER to priv users
- CVE-2026-53235 net: add pskb_may_pull() to skb_gro_receive_list()
- CVE-2026-53234 net: ibm: emac: Fix use-after-free during device removal