|
cve-2026-91123
|
|
Discourse: Reject literal backslash path separators in…
|
discourse
|
discourse
|
2026-09-24T16:54:59.357Z |
2026-09-24T17:11:34.752Z |
|
cve-2026-91133
|
|
Discourse: Escape LIKE metacharacters in upload paths …
|
discourse
|
discourse
|
2026-09-24T16:53:00.147Z |
2026-09-24T17:12:50.099Z |
|
cve-2026-91134
|
|
Discourse: Block post iframes whose encoded userinfo b…
|
discourse
|
discourse
|
2026-09-24T16:51:34.057Z |
2026-09-29T02:56:30.376Z |
|
cve-2026-84302
|
|
Discourse: Non-participant moderators can read, edit, …
|
discourse
|
discourse
|
2026-09-24T16:49:56.499Z |
2026-09-24T17:04:51.257Z |
|
cve-2026-26054
|
|
SumatraPDF: Heap out-of-bounds read in MOBI header parser.
|
sumatrapdfreader
|
sumatrapdf
|
2026-09-24T16:48:03.247Z |
2026-09-28T15:33:32.202Z |
|
cve-2026-91161
|
|
OpenWA: VIEWER API keys can read WhatsApp group invite codes
|
rmyndharis
|
OpenWA
|
2026-09-24T16:46:33.707Z |
2026-10-05T15:33:22.106Z |
|
cve-2026-97231
|
|
volotat Anagnorisis Socket.IO Connect app.py missing a…
|
volotat
|
Anagnorisis
|
2026-09-24T16:45:15.773Z |
2026-09-29T02:55:40.542Z |
|
cve-2026-91160
|
|
OpenWA: A read-only API key can receive a session pair…
|
rmyndharis
|
OpenWA
|
2026-09-24T16:42:02.788Z |
2026-10-05T15:33:28.155Z |
|
cve-2026-62368
|
|
Snipe-IT: Stored XSS via Custom Field name in asset-li…
|
grokability
|
snipe-it
|
2026-09-24T16:40:34.110Z |
2026-09-24T17:13:38.717Z |
|
cve-2026-63493
|
|
Snipe-IT: 2FA bypass via the API token flow
|
grokability
|
snipe-it
|
2026-09-24T16:37:09.832Z |
2026-09-29T02:54:32.742Z |
|
cve-2026-47132
|
|
phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Sea…
|
thorsten
|
phpMyFAQ
|
2026-09-24T16:36:52.875Z |
2026-09-24T17:06:31.893Z |
|
cve-2026-56738
|
|
phpMyFAQ has SQL Injection in `StopWords::add()` — Une…
|
thorsten
|
phpMyFAQ
|
2026-09-24T16:35:02.670Z |
2026-10-05T15:33:34.610Z |
|
cve-2026-63498
|
|
Snipe-IT: Stored XSS via Inline XML Rendering in the U…
|
grokability
|
snipe-it
|
2026-09-24T16:29:57.380Z |
2026-09-28T15:39:50.853Z |
|
cve-2026-94281
|
6.5 (v3.1)
|
Out-of-bounds read in libXi's XListInputDevices() clas…
|
x.org
|
libXi
|
2026-09-24T16:23:50.110Z |
2026-09-24T17:14:17.652Z |
|
cve-2026-94606
|
|
authentik: MFA Bypass via State Confusion / Parameter …
|
goauthentik
|
authentik
|
2026-09-24T16:23:30.925Z |
2026-10-05T15:33:40.648Z |
|
cve-2026-94609
|
|
authentik: Privilege Escalation to Superuser via Group…
|
goauthentik
|
authentik
|
2026-09-24T16:20:45.703Z |
2026-09-28T15:41:52.662Z |
|
cve-2026-93545
|
6.5 (v3.1)
|
Out-of-bounds read in libXi's XListInputDevices()
|
x.org
|
libXi
|
2026-09-24T16:20:35.334Z |
2026-09-24T17:14:46.750Z |
|
cve-2026-94611
|
|
authentik: Stored credentials are readable with view p…
|
goauthentik
|
authentik
|
2026-09-24T16:18:46.592Z |
2026-09-24T17:08:17.710Z |
|
cve-2026-94612
|
|
authentik: Authentication bypass via assertion confusi…
|
goauthentik
|
authentik
|
2026-09-24T16:16:33.503Z |
2026-09-24T17:15:23.385Z |
|
cve-2026-93544
|
6.5 (v3.1)
|
Out-of-bounds read in libXi's XI2 XIQueryDevice reply …
|
x.org
|
libXi
|
2026-09-24T16:13:29.067Z |
2026-09-24T17:16:35.659Z |
|
cve-2026-94613
|
|
authentik: Denial of Service via Document Type Declara…
|
goauthentik
|
authentik
|
2026-09-24T16:13:17.785Z |
2026-09-29T02:53:23.285Z |
|
cve-2026-93543
|
7.4 (v3.1)
|
Out-of-bounds read in libXi's XI2 class parser
|
x.org
|
libXi
|
2026-09-24T16:09:51.221Z |
2026-09-24T17:17:07.094Z |
|
cve-2026-79763
|
|
Termix: MFA-critical operations accept the account pas…
|
Termix-SSH
|
Termix
|
2026-09-24T16:06:16.816Z |
2026-09-24T17:09:04.634Z |
|
cve-2026-97521
|
N/A
|
gfs2: fix quota init duplicate scan
|
Linux
|
Linux
|
2026-09-24T16:05:21.667Z |
2026-09-28T05:30:59.436Z |
|
cve-2026-97520
|
|
gfs2: move quota_init qc iterator increment
|
Linux
|
Linux
|
2026-09-24T16:05:20.188Z |
2026-09-28T05:30:58.172Z |
|
cve-2026-97519
|
N/A
|
drm/xe: Fix null pointer dereference in devcoredump cleanup
|
Linux
|
Linux
|
2026-09-24T16:05:19.278Z |
2026-09-28T05:30:56.941Z |
|
cve-2026-97518
|
N/A
|
wifi: cfg80211: reject duplicate wiphy cipher suite entries
|
Linux
|
Linux
|
2026-09-24T16:05:18.072Z |
2026-10-30T12:37:09.335Z |
|
cve-2026-97517
|
N/A
|
wifi: nl80211: reject beacons with bad HE operation
|
Linux
|
Linux
|
2026-09-24T16:05:16.009Z |
2026-10-03T10:59:11.955Z |
|
cve-2026-97516
|
N/A
|
wifi: rtw88: Add NULL check for chip->edcca_th in rtw_…
|
Linux
|
Linux
|
2026-09-24T16:05:14.263Z |
2026-10-03T10:59:10.452Z |
|
cve-2026-97515
|
N/A
|
i3c: master: svc: Prevent IRQ storm from false SLVSTAR…
|
Linux
|
Linux
|
2026-09-24T16:05:13.124Z |
2026-10-21T12:53:00.686Z |