2026 CVEs (page 204)
Page 204 of 681 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-8445 | Critical | 9.8 | 2026-08-23 | justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed do… |
CVE-2026-7808 | Critical | 9.8 | 2026-08-23 | justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitizatio… |
CVE-2026-77088 | Medium | 6.1 | 2026-08-23 | justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code spans fail to account for blank lines as… |
CVE-2026-74793 | Medium | 6.1 | 2026-08-23 | justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections… |
CVE-2026-6827 | Medium | 6.1 | 2026-08-23 | justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign n… |
CVE-2026-5751 | Medium | 6.1 | 2026-08-23 | justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability when using a custom SanitizationPolicy… |
CVE-2026-5389 | Medium | 6.1 | 2026-08-23 | justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializing attacker-controlled pre content. At… |
CVE-2026-5388 | Critical | 9.8 | 2026-08-23 | justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown pas… |
CVE-2026-4671 | High | 7.5 | 2026-08-23 | justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-… |
CVE-2026-78155 | Critical | 9.9 | 2026-08-23 | privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges |
CVE-2026-78115 | Medium | 5.4 | 2026-08-23 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit_user_account.ph… |
CVE-2026-78112 | Medium | 6.3 | 2026-08-23 | A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This ma… |
CVE-2026-10053 | High | 8.5 | 2026-08-23 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain co… |
CVE-2026-77116 | Medium | 4.3 | 2026-08-23 | Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Cus… |
CVE-2026-77115 | High | 7.1 | 2026-08-23 | Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them. |
CVE-2026-77003 | Low | 2.7 | 2026-08-23 | The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as l… |
CVE-2026-14853 | Medium | 4.3 | 2026-08-23 | The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by o… |
CVE-2026-13598 | Critical | 9.8 | 2026-08-23 | The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to cre… |
CVE-2026-78063 | High | 7.4 | 2026-08-23 | A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipula… |
CVE-2026-78062 | High | 7.3 | 2026-08-23 | A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component… |
CVE-2026-78061 | Medium | 6.3 | 2026-08-23 | A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the compon… |
CVE-2026-78060 | Medium | 4.3 | 2026-08-23 | A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php_action/getOrderReport.php… |
CVE-2026-78059 | Medium | 4.3 | 2026-08-23 | A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /php_action/printOrder.php. S… |
CVE-2026-78057 | Medium | 6.3 | 2026-08-23 | A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Mana… |
CVE-2026-78056 | Medium | 6.3 | 2026-08-23 | A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown func… |
CVE-2026-78055 | Medium | 4.3 | 2026-08-23 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2026-78136 | High | 7.8 | 2026-08-23 | chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py. |
CVE-2026-78054 | Medium | 4.3 | 2026-08-23 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a man… |
CVE-2026-78051 | Medium | 5.3 | 2026-08-23 | A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of th… |
CVE-2026-78050 | Critical | 9.9 | 2026-08-23 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntp_t… |
CVE-2026-18027 | Medium | 6.5 | 2026-08-23 | The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versio… |
CVE-2026-16149 | High | 8.8 | 2026-08-23 | The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because… |
CVE-2026-0551 | High | 8.8 | 2026-08-23 | The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization o… |
CVE-2026-78122 | High | 7.4 | 2026-08-22 | docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers ca… |
CVE-2026-78049 | Low | 3.7 | 2026-08-22 | A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/Cli… |
CVE-2026-47895 | High | 7.5 | 2026-08-22 | In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly clone… |
CVE-2026-12999 | Medium | 5.3 | 2026-08-22 | The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for e… |
CVE-2026-74733 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the reg… |
CVE-2026-74731 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enab… |
CVE-2026-74730 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Dan Aloni reports that he was… |
CVE-2026-74729 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read put_fifo_with_discard()… | |
CVE-2026-74728 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free When xfs_buf_alloc_backing_mem() fails, xfs_buf_f… | |
CVE-2026-74727 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ovpn: skip rehash for peers already removed from by_id ovpn_nl_peer_set_doit() resolves t… |
CVE-2026-74726 | High | 7.3 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor bond_alb_monitor… |
CVE-2026-74725 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: enic: fix tx_hang_reset use-after-free on device removal enic_remove() cancels the reset… |
CVE-2026-74724 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Sashiko warns that local attacker can m… |
CVE-2026-74723 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers [BUG] For a crafted btrfs image… |
CVE-2026-74722 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak in btrfs_do_encoded_write() Local fuzzing of 6.12.94 has found the… | |
CVE-2026-74721 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Two error paths in amdx… |
CVE-2026-74720 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in… |
CVE-2026-74719 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler(… | |
CVE-2026-74718 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink_nl_reload_doit() calls devlin… | |
CVE-2026-74717 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, return NULL on create error Tracer creation can fail by returning ei… |
CVE-2026-74716 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() In amdxdna_insert… | |
CVE-2026-74715 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in conntrack kfuncs The opts argument of the BPF connt… |
CVE-2026-74714 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() reqsk_queue_hash_req() p… |
CVE-2026-74713 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_range vhost_iotlb_add_range_ctx() only retires a… |
CVE-2026-74712 | Critical | 9.3 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_keys() We have seen in our CI the following… |
CVE-2026-74711 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notification logic Sashiko reports: At the start of… |
CVE-2026-74710 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as smal… |
CVE-2026-74709 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata… | |
CVE-2026-74708 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16… |
CVE-2026-74707 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: xsk: validate metadata when processing requests The zero-copy path validates TX metadata… |
CVE-2026-74706 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bnge: Fix NULL pointer dereference in aux device release If allocation of auxr_dev fails… | |
CVE-2026-74705 | Critical | 10.0 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets… |
CVE-2026-74704 | High | 8.2 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter The sch_cake ACK… |
CVE-2026-74703 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi spli… |
CVE-2026-74702 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost_scsi_setup_vq_cmds() runs from VH… |
CVE-2026-74701 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in key_extract() When a packet arrives on a… |
CVE-2026-74700 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Another c… |
CVE-2026-74699 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() The q->replay_state is blin… | |
CVE-2026-74698 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e_queue_start() deactivates and re-activ… | |
CVE-2026-74697 | High | 8.2 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame pa… |
CVE-2026-74696 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max_qlen accounting across reuseport migration A listener's TCP_FASTOPEN max… |
CVE-2026-74695 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Incoming skbs… |
CVE-2026-74694 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length ncsi_send_cmd_nl() takes… | |
CVE-2026-74693 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware… | |
CVE-2026-74692 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix TOCTOU race between smc_listen_out() and listener close smc_listen_out() rea… |
CVE-2026-74691 | High | 8.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet_tear_down() stops b… |
CVE-2026-74690 | High | 8.4 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() A ism interrupt handler can be act… |
CVE-2026-74689 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() vcc_setsockopt() contained an in… |
CVE-2026-74688 | Critical | 9.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctp_make_heartbeat_ack() cach… |
CVE-2026-74687 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rearm during teardown at91_ping() rearms the watchd… |
CVE-2026-74686 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of th… | |
CVE-2026-74685 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Clamp negative current limits When a negative value is passed to ltc4282… | |
CVE-2026-74684 | High | 7.1 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() The commit… |
CVE-2026-74683 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied even… | |
CVE-2026-74682 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs data_ep_set_params() sizes each UR… | |
CVE-2026-74681 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (r… | |
CVE-2026-74680 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() If cxacru_cm() encounters… | |
CVE-2026-74679 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigned int for ndp_index The variable ndp_index is declared as… | |
CVE-2026-74678 | High | 7.5 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the interface has NETIF_F… |
CVE-2026-74677 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnect ipheth_sndbulk_callback() re-arms th… | |
CVE-2026-74676 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but la… | |
CVE-2026-74675 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get kbd_keycode() reads vc->… |
CVE-2026-74674 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page table reclaim When zap_pte_range reclaims… |
CVE-2026-74673 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdev_pass_values() In evdev_pass_values(), the in… | |
CVE-2026-74672 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix U… | |
CVE-2026-74671 | | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattr_verify() The digest-length check in xattr_verify() m… | |
CVE-2026-74670 | High | 7.8 | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroe… |