2026 CVEs (page 300)
Page 300 of 463 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20195 | Medium | 5.3 | 2026-05-06 | A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affe… |
CVE-2026-20193 | Medium | 4.3 | 2026-05-06 | A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to g… |
CVE-2026-20189 | Medium | 4.3 | 2026-05-06 | A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary l… |
CVE-2026-20188 | Unrated | 7.5 | 2026-05-06 | Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Se… |
CVE-2026-20185 | High | 7.7 | 2026-05-06 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Ma… |
CVE-2026-20172 | Medium | 4.3 | 2026-05-06 | A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attac… |
CVE-2026-20169 | Medium | 6.4 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to… |
CVE-2026-20168 | Medium | 6.5 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to… |
CVE-2026-20167 | High | 7.7 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to… |
CVE-2026-20035 | High | 7.2 | 2026-05-06 | A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected d… |
CVE-2026-20034 | High | 8.8 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an a… |
CVE-2026-6863 | Medium | 6.8 | 2026-05-06 | Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organizat… |
CVE-2026-6788 | High | 7.8 | 2026-05-06 | Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files. |
CVE-2026-6787 | High | 7.8 | 2026-05-06 | Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process. |
CVE-2026-6691 | High | 7.8 | 2026-05-06 | The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authe… |
CVE-2026-41288 | High | 7.8 | 2026-05-06 | Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to eleva… |
CVE-2026-41286 | Medium | 6.5 | 2026-05-06 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same… |
CVE-2026-8028 | Low | 3.7 | 2026-05-06 | A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/account.se… |
CVE-2026-8027 | Medium | 4.3 | 2026-05-06 | A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller H… |
CVE-2026-41287 | Medium | 6.5 | 2026-05-06 | Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same… |
CVE-2026-36358 | Medium | 5.4 | 2026-05-06 | Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads functi… |
CVE-2026-8026 | Low | 3.7 | 2026-05-06 | A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packages/server/src/enterprise/services/accou… |
CVE-2026-5081 | Critical | 9.1 | 2026-05-06 | Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in ver… |
CVE-2026-40562 | High | 7.5 | 2026-05-06 | Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Tr… |
CVE-2026-6210 | | 2026-05-06 | A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. When processing SVG marker references, th… | |
CVE-2026-43283 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle dma_free_coherent() in error pa… |
CVE-2026-43282 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port The function ionic… |
CVE-2026-43281 | High | 7.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that… |
CVE-2026-43280 | High | 7.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise When user pro… |
CVE-2026-43279 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback U… |
CVE-2026-43278 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq->bio values h… |
CVE-2026-43277 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won't go past CPER allocated record The logic at ghes_new() preven… |
CVE-2026-43276 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroy_workqueue on service rescan PCI path While testing corner c… |
CVE-2026-43275 | Medium | 4.7 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Flush exception handling work when RPM level is zero Ensure that the exc… |
CVE-2026-43274 | High | 8.4 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq() The cl… |
CVE-2026-43273 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object… |
CVE-2026-43272 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_pa… |
CVE-2026-43271 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process_metadata_update The function process_… |
CVE-2026-43270 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdp_probe(), vpu_get_… |
CVE-2026-43269 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback After several com… |
CVE-2026-43268 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb63a33 ("vfs: catch i… |
CVE-2026-43267 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in beacon tracking During fuzz testing, i… |
CVE-2026-43266 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor CPER record buffer There's a logic inside GHES/… |
CVE-2026-43265 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Ignore -EBUSY when… |
CVE-2026-43264 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_get_display_timings() of_parse_phandle… |
CVE-2026-43263 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while testing fluster When multi instances… |
CVE-2026-43262 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we are calling iomap_fiemap() while holding… |
CVE-2026-43261 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable t… |
CVE-2026-43260 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need to free the corresponding RSS context VNIC … |
CVE-2026-43259 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: set platform driver data Add missing platform_set_drvdata() as the d… |
CVE-2026-43258 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory compaction Alpha systems can suffer sporad… |
CVE-2026-43257 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_params() In error path, add cx88_alsa_dma_u… |
CVE-2026-43256 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() vfe_isr() itera… |
CVE-2026-43255 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx… |
CVE-2026-43254 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When processing TCP stream data in ovpn_tcp… |
CVE-2026-43253 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completio… |
CVE-2026-43252 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a com… |
CVE-2026-43251 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 Fake USB devices can send their own repo… |
CVE-2026-43250 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() The ChipIdea UDC driver can enco… |
CVE-2026-43249 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front_free against concurrent calls The xenwatch thread can race… |
CVE-2026-43248 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating thes… |
CVE-2026-43247 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix SError of kernel panic when closed SError of kernel panic… |
CVE-2026-43246 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9906: Fix potential memory leak in tw9906_probe() In one of the error paths… |
CVE-2026-43245 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ntfs: ->d_compare() must not block ... so don't use __getname() there. Switch it (and nt… |
CVE-2026-43244 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in frag_list on partial sendmsg error Syzkaller reported a warning… |
CVE-2026-43243 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src Trying to access link… |
CVE-2026-43242 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: soc: ti: k3-socinfo: Fix regmap leak on probe failure The mmio regmap allocated during pr… |
CVE-2026-43241 | High | 7.1 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access Number of MW LUTs depends on… |
CVE-2026-43240 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: x86/kexec: add a sanity check on previous kernel's ima kexec buffer When the second-stage… |
CVE-2026-43239 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces() It was possible for two query interfac… |
CVE-2026-43238 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() Commit 38a6f0865796 ("ne… |
CVE-2026-43237 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Manag… |
CVE-2026-43236 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release The atmel_hlcdc_plan… |
CVE-2026-43235 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM… |
CVE-2026-43234 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEV_CHANGEMTU event when unregistering slave syzbot is reporting unregi… |
CVE-2026-43233 | High | 8.2 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() In decode_choice(), the bou… |
CVE-2026-43232 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync… |
CVE-2026-43231 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe()… |
CVE-2026-43230 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When canceling the reconnect worker, care must be ta… |
CVE-2026-43229 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix device cleanup order to prevent kernel panic Move video de… |
CVE-2026-43228 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, fo… |
CVE-2026-43227 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be… |
CVE-2026-43226 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDS_CONN_ERROR RDS connections carry a state "rds_conn_path… |
CVE-2026-43225 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may retur… |
CVE-2026-43224 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_… |
CVE-2026-43223 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits… |
CVE-2026-43222 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb… |
CVE-2026-43221 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: initialise event handler read bytes IPMB doesn't use i2c reads, but the handl… |
CVE-2026-43220 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurre… |
CVE-2026-43219 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet If an… |
CVE-2026-43218 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9903: Fix potential memory leak in tw9903_probe() In one of the error paths… |
CVE-2026-43217 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: media: iris: gen2: Add sanity check for session stop In iris_kill_session, inst->state is… |
CVE-2026-43216 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skb_may_tx_timestamp() skb_may_tx_timestamp() may acquire sock::sk_… |
CVE-2026-43215 | High | 8.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to use the cifs_tcp_ses_lock to protect a… |
CVE-2026-43214 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() Add SRCU read-side pro… |
CVE-2026-43213 | High | 7.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardware rarely reports a… |
CVE-2026-43212 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE The arch definition of cpum… |
CVE-2026-43211 | High | 7.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI: Add missing bridge… |
CVE-2026-43210 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check the event length befor… |
CVE-2026-43209 | Medium | 5.5 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: minix: Add required sanity checking to minix_check_superblock() The fs/minix implementati… |