High-severity CVEs (page 68)
Page 68 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-90205 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode read Patch series "ocfs2: validate active orphan… |
CVE-2026-90204 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during inode read [BUG] A corrupted append-DIO dinode (hi… |
CVE-2026-90203 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If a negative offset is read off disk (for e… |
CVE-2026-90199 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_attr() In mi_enum_attr(), the start/end VCN… |
CVE-2026-90191 | High | 8.4 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls… |
CVE-2026-90177 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instr… |
CVE-2026-90176 | High | 8.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges check_lock_range() uses inclusive r… |
CVE-2026-90174 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() ksmbd_alloc_user() copies resp->… |
CVE-2026-90172 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdma_accept_failed e… |
CVE-2026-90162 | High | 8.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2_lock(), mid… |
CVE-2026-90161 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclusters On-disk sizes of interlaced pclusters should… |
CVE-2026-90153 | High | 8.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size smb_check_perm_dacl() validates… |
CVE-2026-90149 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0… |
CVE-2026-90146 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install() bpf_xdp_link_update() calls dev_xdp_i… |
CVE-2026-90145 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed Previ… |
CVE-2026-90143 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcm_parse_func_strparser() calls bp… |
CVE-2026-90142 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached, the virtnet_rx_re… |
CVE-2026-90141 | High | 7.3 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ip_vs_ftp_get_addrport() ac… |
CVE-2026-90137 | High | 7.7 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix password encoding bounds check The password PSWD_ENCODINGS… |
CVE-2026-90133 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib() ntfs_ir_to_ib copies all entries f… |
CVE-2026-90132 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ntfs: reject unprivileged writes to reserved $LX* xattrs Reject setxattr of the reserved… |
CVE-2026-90131 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize resident iomap reads with mrec_lock ntfs_read_iomap_begin_resident() walk… |
CVE-2026-90120 | High | 8.4 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing In gic_acpi… |
CVE-2026-90118 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one page overflow in ntfs_decompress() The per-token range check in ntfs… |
CVE-2026-90111 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: ip6mr: do not clone dst in ip6mr_cache_report() IPv6 input attaches a non-refcounted (NOR… |
CVE-2026-90103 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encode_layoutstats_maxsz budgets XDR_QUAD… |
CVE-2026-90102 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version nfs4_pnfs_ds_add() keys the per-… |
CVE-2026-90093 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Since commit b66774b48dd9 ("… |
CVE-2026-90092 | High | 8.0 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN New sk should not be added to… |
CVE-2026-90091 | High | 8.0 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan For L2CAP sockets wit… |
CVE-2026-90089 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxp_process_fw_dump() pulls the… |
CVE-2026-90071 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: restore skb->dev on the slave failure path teql_master_xmit() sets s… |
CVE-2026-90069 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - allocate async request context when cloning ACOMP_REQUEST_ON_STACK() rese… |
CVE-2026-90067 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: libceph: validate banner payload length When parsing the Ceph messenger v2 protocol banne… |
CVE-2026-90062 | High | 7.1 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: move hardware offload step after building the chain blob Allocate t… |
CVE-2026-90059 | High | 7.5 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: restore NET_IP_ALIGN in the RX DMA offset Since the RX path was converted to… |
CVE-2026-90057 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() Jaeyoung Chung and… |
CVE-2026-90051 | High | 7.8 | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx Devmem tcp tx doesn't work without zero-copy, however… |
CVE-2026-28326 | High | 8.8 | 2026-09-17 | SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static… |
CVE-2026-93014 | High | 7.1 | 2026-09-17 | RosarioSIS versions before 12.9 fail to validate the filename request parameter in Users and Students modules, allowing authenticated users to unlink allow-lis… |
CVE-2026-89036 | High | 8.8 | 2026-09-17 | Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute a… |
CVE-2026-86864 | High | 8.8 | 2026-09-17 | pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/<sid>/object request to the pg_dump argument vector as a bare traili… |
CVE-2026-86040 | High | 7.5 | 2026-09-17 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accepts unauthenticated RPC frames on /floodsub/1.0.0… |
CVE-2026-86039 | High | 8.2 | 2026-09-17 | libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses con… |
CVE-2026-86038 | High | 7.5 | 2026-09-17 | libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses the default StrictSign policy in package… |
CVE-2026-85721 | High | 7.5 | 2026-09-17 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 a… |
CVE-2026-85719 | High | 7.5 | 2026-09-17 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 a… |
CVE-2026-85715 | High | 7.5 | 2026-09-17 | ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEIC or AVIF ISO-BMFF files in getItems() within src… |
CVE-2026-81516 | High | 7.5 | 2026-09-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, ConsulDisc… |
CVE-2026-81515 | High | 7.5 | 2026-09-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. From 4.0.0 until 4.3.0, EurekaDisc… |
CVE-2026-76834 | High | 8.1 | 2026-09-17 | b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in param_check_serialized_arra… |
CVE-2026-56795 | High | 8.2 | 2026-09-17 | Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access… |
CVE-2026-92987 | High | 7.5 | 2026-09-17 | roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML parsing without limits on attribute count. Attackers can craft X… |
CVE-2026-92986 | High | 8.8 | 2026-09-17 | SiYuan before 3.8.4 renders document titles as HTML in the backlink dock tree without escaping markup characters. Attackers can set malicious titles through th… |
CVE-2026-92985 | High | 8.8 | 2026-09-17 | SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .s… |
CVE-2026-92984 | High | 8.1 | 2026-09-17 | HUBzero CMS through 2.2.32 accepts session identifiers from query strings and request variables instead of cookies alone, allowing unauthenticated attackers to… |
CVE-2026-92983 | High | 7.5 | 2026-09-17 | InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session… |
CVE-2026-87742 | High | 7.5 | 2026-09-17 | A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming messages over a single… |
CVE-2026-85077 | High | 8.2 | 2026-09-17 | Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py… |
CVE-2026-81446 | High | 7.4 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with… |
CVE-2026-81445 | High | 7.2 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remo… |
CVE-2026-80356 | High | 7.3 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low p… |
CVE-2026-77614 | High | 8.8 | 2026-09-17 | Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default securit… |
CVE-2026-63460 | High | 7.5 | 2026-09-17 | Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop GraphQL API allows an unauthenticated caller to supply a catastrophically… |
CVE-2026-63459 | High | 8.7 | 2026-09-17 | Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/shared/table-cell/order-… |
CVE-2026-26950 | High | 8.1 | 2026-09-17 | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with rem… |
CVE-2026-92972 | High | 8.6 | 2026-09-17 | SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attack… |
CVE-2026-92971 | High | 7.5 | 2026-09-17 | InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to t… |
CVE-2026-92970 | High | 8.8 | 2026-09-17 | HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members to write arbitrary… |
CVE-2026-92961 | High | 7.5 | 2026-09-17 | vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allowing attackers to allocate arbitrary ho… |
CVE-2026-92959 | High | 7.1 | 2026-09-17 | vm2 before 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM. While localPromise.prototype.then is replaced with a handler that throw… |
CVE-2026-92958 | High | 8.5 | 2026-09-17 | vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries (e.g. requir… |
CVE-2026-92954 | High | 8.6 | 2026-09-17 | vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, Promises returned from the host realm into the sandb… |
CVE-2026-92950 | High | 8.6 | 2026-09-17 | vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attacker… |
CVE-2026-92942 | High | 7.5 | 2026-09-17 | vm2 before 3.11.7 (affected versions <= 3.11.6) does not enforce the VM({ timeout }) option on code executed outside the synchronous VM#run() call. The timeout… |
CVE-2026-90986 | High | 7.1 | 2026-09-17 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.21 versions. |
CVE-2026-90887 | High | 7.1 | 2026-09-17 | Unauthenticated Cross Site Scripting (XSS) in WP Inventory Manager <= 2.5.4 versions. |
CVE-2026-81442 | High | 8.1 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remot… |
CVE-2026-78295 | High | 8.8 | 2026-09-17 | Unauthenticated Cross Site Request Forgery (CSRF) in Xagio SEO <= 7.1.0.43 versions. |
CVE-2026-66631 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions. |
CVE-2026-66630 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in PublishPress Series <= 3.1.3 versions. |
CVE-2026-66628 | High | 7.6 | 2026-09-17 | Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions. |
CVE-2026-66626 | High | 7.6 | 2026-09-17 | Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions. |
CVE-2026-66625 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions. |
CVE-2026-66624 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions. |
CVE-2026-66619 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in Newsletters <= 4.18 versions. |
CVE-2026-66618 | High | 7.6 | 2026-09-17 | Administrator SQL Injection in WP Maps <= 4.9.9 versions. |
CVE-2026-66580 | High | 8.5 | 2026-09-17 | Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions. |
CVE-2026-66571 | High | 7.1 | 2026-09-17 | Unauthenticated Cross Site Request Forgery (CSRF) in Asset CleanUp: Page Speed Booster <= 1.4.0.5 versions. |
CVE-2026-92919 | High | 8.1 | 2026-09-17 | admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on… |
CVE-2026-92918 | High | 8.8 | 2026-09-17 | admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission ca… |
CVE-2026-81481 | High | 7.5 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… |
CVE-2026-92925 | High | 7.1 | 2026-09-17 | A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-ca… |
CVE-2026-92917 | High | 7.5 | 2026-09-17 | Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, vardump, js… |
CVE-2026-92916 | High | 7.5 | 2026-09-17 | Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.debugger.enabled: true, which is not the… |
CVE-2026-92915 | High | 7.3 | 2026-09-17 | WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/userVerifyEmail.php. The script disables t… |
CVE-2026-92914 | High | 8.1 | 2026-09-17 | AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equalit… |
CVE-2026-92913 | High | 7.4 | 2026-09-17 | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random number generator when creating account activation /… |
CVE-2026-81480 | High | 7.2 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote… |
CVE-2026-81478 | High | 8.1 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker wit… |