Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
56890
Total
4508
Critical
16896
High
16708
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-73468 | MEDIUM | 6.5 | A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the … | Sep 16, 2026 |
| CVE-2026-73455 | HIGH | 7.5 | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to … | Sep 16, 2026 |
| CVE-2026-73453 | CRITICAL | 10.0 | An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with … | Sep 16, 2026 |
| CVE-2026-73440 | MEDIUM | 4.2 | On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way … | Sep 16, 2026 |
| CVE-2026-73438 | MEDIUM | 5.3 | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can … | Sep 16, 2026 |
| CVE-2026-73436 | MEDIUM | 6.5 | On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause … | Sep 16, 2026 |
| CVE-2026-73435 | HIGH | 8.2 | On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on … | Sep 16, 2026 |
| CVE-2026-59969 | UNKNOWN | — | Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum … | Sep 16, 2026 |
| CVE-2026-59739 | UNKNOWN | — | Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can discover ACL-restricted paths by registering exists-watches on non-existent … | Sep 16, 2026 |
| CVE-2026-19640 | MEDIUM | 4.2 | On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentially allowing … | Sep 16, 2026 |
| CVE-2026-14917 | UNKNOWN | — | A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. … | Sep 16, 2026 |
| CVE-2026-92081 | MEDIUM | 5.9 | fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer() and is … | Sep 16, 2026 |
| CVE-2026-89792 | HIGH | 7.1 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before … | Sep 16, 2026 |
| CVE-2026-89791 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival races with the last munmap() perf_mmap_close() drops rb->mmap_count … | Sep 16, 2026 |
| CVE-2026-89790 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalance rt6_multipath_rebalance() calculates the total eligible nexthop weight in … | Sep 16, 2026 |
| CVE-2026-89789 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free gtp_newlink()'s error path frees tid_hash … | Sep 16, 2026 |
| CVE-2026-89788 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_tree_connect() ksmbd_tree_conn_connect() publishes a new tree connection in sess->tree_conns … | Sep 16, 2026 |
| CVE-2026-89787 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() For casefolded encrypted … | Sep 16, 2026 |
| CVE-2026-89786 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4_read_inline_dir() ext4_read_inline_dir() can read a dirent header past the end … | Sep 16, 2026 |
| CVE-2026-89785 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init ntfs_reparse_init() and ntfs_objid_init() parse the index … | Sep 16, 2026 |
| CVE-2026-89784 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 rpcb_register_inet4() and rpcb_register_inet6() store the result of rpc_sockaddr2uaddr() … | Sep 16, 2026 |
| CVE-2026-89783 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full The depth check in xfrm6_input_addr() … | Sep 16, 2026 |
| CVE-2026-89782 | HIGH | 8.4 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During $LogFile replay, log_replay() indexes the transaction … | Sep 16, 2026 |
| CVE-2026-89781 | HIGH | 8.4 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a caller buffer … | Sep 16, 2026 |
| CVE-2026-89780 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggregated frames rmnet_map_deaggregate() allocates each sub-frame with alloc_skb() and … | Sep 16, 2026 |