Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 643 of 1013.
- CVE-2026-43211 PCI: Fix pci_slot_trylock() error handling
- CVE-2026-43210 tracing: ring-buffer: Fix to check event length before using
- CVE-2026-4321 SQLi in Raera's Destekz
- CVE-2026-43209 minix: Add required sanity checking to minix_check_superblock()
- CVE-2026-43208 net: do not pass flow_id to set_rps_cpu()
- CVE-2026-43207 media: mtk-mdp: Fix error handling in probe function
- CVE-2026-43206 drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
- CVE-2026-43205 dpaa2-switch: validate num_ifs to prevent out-of-bounds write
- CVE-2026-43204 ASoC: qcom: q6asm: drop DSP responses for closed data streams
- CVE-2026-43203 atm: fore200e: fix use-after-free in tasklets during device removal
- CVE-2026-43202 fbdev: vt8500lcdfb: fix missing dma_free_coherent()
- CVE-2026-43201 APEI/GHES: ARM processor Error: don't go past allocated memory
- CVE-2026-43200 PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
- CVE-2026-4320 Authorization Bypass in ICMS Content Management by Creartia Internet Consulting
- CVE-2026-43199 net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query
- CVE-2026-43198 tcp: fix potential race in tcp_v6_syn_recv_sock()
- CVE-2026-43197 netconsole: avoid OOB reads, msg is not nul-terminated
- CVE-2026-43196 soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
- CVE-2026-43195 drm/amdgpu: validate user queue size constraints
- CVE-2026-43194 net: consume xmit errors of GSO frames
- CVE-2026-43193 nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()
- CVE-2026-43192 dm mpath: Add missing dm_put_device when failing to get scsi dh name
- CVE-2026-43191 drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35
- CVE-2026-43190 netfilter: xt_tcpmss: check remaining length before reading optlen
- CVE-2026-4319 code-projects Simple Food Order System add-item.php sql injection
- CVE-2026-43189 media: v4l2-async: Fix error handling on steps after finding a match
- CVE-2026-43188 ceph: do not propagate page array emplacement errors as batch errors
- CVE-2026-43187 xfs: delete attr leaf freemap entries when empty
- CVE-2026-43186 ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
- CVE-2026-43185 ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
- CVE-2026-43184 rnbd-srv: Zero the rsp buffer before using it
- CVE-2026-43183 media: cx25821: Fix a resource leak in cx25821_dev_setup()
- CVE-2026-43182 media: ccs: Avoid possible division by zero
- CVE-2026-43181 gpio: sysfs: fix chip removal with GPIOs exported over sysfs
- CVE-2026-43180 net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
- CVE-2026-4318 UTT HiPER 810G formApLbConfig strcpy buffer overflow
- CVE-2026-43179 erofs: fix incorrect early exits for invalid metabox-enabled images
- CVE-2026-43178 procfs: fix possible double mmput() in do_procmap_query()
- CVE-2026-43177 media: ipu6: Fix RPM reference leak in probe error paths
- CVE-2026-43176 wifi: rtw89: pci: validate release report content before using for RTL8922DE
- CVE-2026-43175 clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841
- CVE-2026-43174 io_uring/zcrx: fix post open error handling
- CVE-2026-43173 net: ethernet: xscale: Check for PTP support properly
- CVE-2026-43172 wifi: iwlwifi: fix 22000 series SMEM parsing
- CVE-2026-43171 EFI/CPER: don't dump the entire memory region
- CVE-2026-43170 usb: dwc3: gadget: Move vbus draw to workqueue context
- CVE-2026-4317 SQL inyection in Umami Software application
- CVE-2026-43169 drm/buddy: Prevent BUG_ON by validating rounded allocation
- CVE-2026-43168 ocfs2: fix reflink preserve cleanup issue
- CVE-2026-43167 xfrm: always flush state and policy upon NETDEV_UNREGISTER event
- CVE-2026-43166 erofs: fix interlaced plain identification for encoded extents
- CVE-2026-43165 hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin
- CVE-2026-43164 udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().
- CVE-2026-43163 md/bitmap: fix GPF in write_page caused by resize race
- CVE-2026-43162 media: tegra-video: Fix memory leak in __tegra_channel_try_format()
- CVE-2026-43161 iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode
- CVE-2026-43160 mfd: macsmc: Initialize mutex
- CVE-2026-4316 Reflected Cross-Site Scripting in software IsMyGym by Zuinq Studio
- CVE-2026-43159 staging: rtl8723bs: fix null dereference in find_network
- CVE-2026-43158 xfs: fix freemap adjustments when adding xattrs to leaf blocks
- CVE-2026-43157 octeontx2-af: CGX: fix bitmap leaks
- CVE-2026-43156 net: usb: pegasus: enable basic endpoint checking
- CVE-2026-43155 mux: mmio: fix regmap leak on probe failure
- CVE-2026-43154 erofs: fix incorrect early exits in volume label handling
- CVE-2026-43153 xfs: remove xfs_attr_leaf_hasname
- CVE-2026-43152 HID: hid-pl: handle probe errors
- CVE-2026-43151 Revert "media: iris: Add sanity check for stop streaming"
- CVE-2026-43150 perf/arm-cmn: Reject unsupported hardware configurations
- CVE-2026-4315 WatchGuard Firebox Cross-Site Request Forgery (CSRF) in Fireware Web UI
- CVE-2026-43149 net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
- CVE-2026-43148 powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
- CVE-2026-43147 Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
- CVE-2026-43146 media: iris: Add buffer to list only after successful allocation
- CVE-2026-43145 remoteproc: imx_rproc: Fix invalid loaded resource table detection
- CVE-2026-43144 wifi: brcmfmac: Fix potential kernel oops when probe fails
- CVE-2026-43143 mfd: core: Add locking around 'mfd_of_node_list'
- CVE-2026-43142 media: iris: gen1: Destroy internal buffers after FW releases
- CVE-2026-43141 ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
- CVE-2026-43140 HID: magicmouse: Do not crash on missing msc->input
- CVE-2026-4314 Privilege escalation in The Ultimate WordPress Toolkit – WP Extended
- CVE-2026-43139 xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
- CVE-2026-43138 reset: gpio: suppress bind attributes in sysfs
- CVE-2026-43137 ASoC: SOF: Intel: hda: Fix NULL pointer dereference
- CVE-2026-43136 HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
- CVE-2026-43135 media: cx23885: Add missing unmap in snd_cx23885_hw_params()
- CVE-2026-43134 Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
- CVE-2026-43133 KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
- CVE-2026-43132 dm-verity: correctly handle dm_bufio_client_create() failure
- CVE-2026-43131 drm/amd/pm: Fix null pointer dereference issue
- CVE-2026-43130 iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
- CVE-2026-4313 Stored XSS in AdaptiveGRC
- CVE-2026-43129 ima: verify the previous kernel's IMA buffer lies in addressable RAM
- CVE-2026-43128 RDMA/umem: Fix double dma_buf_unpin in failure path
- CVE-2026-43127 ntfs3: fix circular locking dependency in run_unpack_ex
- CVE-2026-43126 ALSA: mixer: oss: Add card disconnect checkpoints
- CVE-2026-43125 dlm: validate length in dlm_search_rsb_tree
- CVE-2026-43124 pstore: ram_core: fix incorrect success return when vmap() fails
- CVE-2026-43123 fbcon: check return value of con2fb_acquire_newinfo()
- CVE-2026-43121 io_uring/zcrx: fix user_ref race between scrub and refill paths
- CVE-2026-43120 RDMA/irdma: Fix double free related to rereg_user_mr