Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
56907
Total
4512
Critical
16897
High
16715
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-59739 | UNKNOWN | — | Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attacker can discover ACL-restricted paths by registering exists-watches on non-existent … | Sep 16, 2026 |
| CVE-2026-19640 | MEDIUM | 4.2 | On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentially allowing … | Sep 16, 2026 |
| CVE-2026-14917 | UNKNOWN | — | A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. … | Sep 16, 2026 |
| CVE-2026-92081 | MEDIUM | 5.9 | fastify is a fast and low-overhead web framework for Node.js. In versions before 5.12.5, when a route registers a response trailer via reply.trailer() and is … | Sep 16, 2026 |
| CVE-2026-89792 | HIGH | 7.1 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before … | Sep 16, 2026 |
| CVE-2026-89791 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival races with the last munmap() perf_mmap_close() drops rb->mmap_count … | Sep 16, 2026 |
| CVE-2026-89790 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_rebalance rt6_multipath_rebalance() calculates the total eligible nexthop weight in … | Sep 16, 2026 |
| CVE-2026-89789 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free gtp_newlink()'s error path frees tid_hash … | Sep 16, 2026 |
| CVE-2026-89788 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2_tree_connect() ksmbd_tree_conn_connect() publishes a new tree connection in sess->tree_conns … | Sep 16, 2026 |
| CVE-2026-89787 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() For casefolded encrypted … | Sep 16, 2026 |
| CVE-2026-89786 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bounds read in ext4_read_inline_dir() ext4_read_inline_dir() can read a dirent header past the end … | Sep 16, 2026 |
| CVE-2026-89785 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init ntfs_reparse_init() and ntfs_objid_init() parse the index … | Sep 16, 2026 |
| CVE-2026-89784 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 rpcb_register_inet4() and rpcb_register_inet6() store the result of rpc_sockaddr2uaddr() … | Sep 16, 2026 |
| CVE-2026-89783 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full The depth check in xfrm6_input_addr() … | Sep 16, 2026 |
| CVE-2026-89782 | HIGH | 8.4 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16_MAX entries During $LogFile replay, log_replay() indexes the transaction … | Sep 16, 2026 |
| CVE-2026-89781 | HIGH | 8.4 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() read_log_rec_buf() copies a log record into a caller buffer … | Sep 16, 2026 |
| CVE-2026-89780 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb->dev on deaggregated frames rmnet_map_deaggregate() allocates each sub-frame with alloc_skb() and … | Sep 16, 2026 |
| CVE-2026-89779 | CRITICAL | 9.1 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef->size covers the record's name and value When an EA record has a … | Sep 16, 2026 |
| CVE-2026-89778 | CRITICAL | 9.8 | In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofs_uncompress_block()'s empty-block fast path returns … | Sep 16, 2026 |
| CVE-2026-89777 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per-device MSI … | Sep 16, 2026 |
| CVE-2026-89776 | UNKNOWN | — | In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes The VXLAN VNI filter entry policy declares … | Sep 16, 2026 |
| CVE-2026-89775 | CRITICAL | 9.3 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Computing the effects … | Sep 16, 2026 |
| CVE-2026-89774 | HIGH | 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready sk deref in sco_conn_ready must be done either … | Sep 16, 2026 |
| CVE-2026-89186 | UNKNOWN | — | Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that … | Sep 16, 2026 |
| CVE-2026-88255 | UNKNOWN | — | Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed … | Sep 16, 2026 |