Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-90070 N/A tpm: st33zp24: Return zero on status read failure Linux
Linux
2026-09-17T16:05:51.585Z 2026-10-19T08:57:27.372Z
cve-2026-90069 crypto: acomp - allocate async request context when cloning Linux
Linux
2026-09-17T16:05:50.894Z 2026-10-19T08:57:26.441Z
cve-2026-90068 N/A ASoC: dapm: Fix off-by-one check on the second enum channel Linux
Linux
2026-09-17T16:05:50.251Z 2026-10-19T08:57:25.478Z
cve-2026-90067 libceph: validate banner payload length Linux
Linux
2026-09-17T16:05:49.600Z 2026-10-19T08:57:24.503Z
cve-2026-90066 N/A samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrac… Linux
Linux
2026-09-17T16:05:48.921Z 2026-10-30T12:34:00.306Z
cve-2026-90065 N/A net/smc: release the internal TCP sock on IPPROTO_SMC … Linux
Linux
2026-09-17T16:05:48.269Z 2026-10-19T08:57:22.598Z
cve-2026-90064 N/A drm/xe: Reject page faults from non-fault-mode scratch VMs Linux
Linux
2026-09-17T16:05:47.607Z 2026-10-19T08:57:21.604Z
cve-2026-90063 N/A virtio-net: Ensure that TCP packets don't overflow gso_segs Linux
Linux
2026-09-17T16:05:46.968Z 2026-10-19T08:57:20.621Z
cve-2026-90062 netfilter: nf_tables: move hardware offload step after… Linux
Linux
2026-09-17T16:05:45.853Z 2026-10-19T08:57:19.597Z
cve-2026-90061 N/A netfilter: nf_tables: skip double clone set expression… Linux
Linux
2026-09-17T16:05:45.182Z 2026-10-30T12:33:59.233Z
cve-2026-90060 N/A ALSA: control: Don't add invalid kcontrols to LED layer Linux
Linux
2026-09-17T16:05:44.515Z 2026-10-21T12:49:38.739Z
cve-2026-90059 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset Linux
Linux
2026-09-17T16:05:43.855Z 2026-10-19T08:57:16.635Z
cve-2026-90058 N/A net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup Linux
Linux
2026-09-17T16:05:43.184Z 2026-10-19T08:57:15.626Z
cve-2026-90057 slip: remove slip_hangup() to fix use-after-free in sl… Linux
Linux
2026-09-17T16:05:41.670Z 2026-10-19T08:57:14.597Z
cve-2026-90056 N/A net: fec: only stop PTP if it was initialized Linux
Linux
2026-09-17T16:05:41.003Z 2026-10-19T08:57:13.609Z
cve-2026-90055 N/A usb: atm: usbatm: fix invalid ci_range initialization Linux
Linux
2026-09-17T16:05:40.304Z 2026-10-19T08:57:12.606Z
cve-2026-90054 N/A tcp: fix corruption of urgent data on multi-segment re… Linux
Linux
2026-09-17T16:05:39.632Z 2026-10-19T08:57:11.615Z
cve-2026-90053 N/A net/sched: sch_htb: limit htb_classify inner-class fil… Linux
Linux
2026-09-17T16:05:38.957Z 2026-10-19T08:57:10.615Z
cve-2026-90052 N/A {'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}], 'providerMetadata': {'orgId': '416baaa9-dc9f-4396-8d5f-8c081fb06d67', 'shortName': 'Linux', 'dateUpdated': '2026-10-19T14:04:31.966Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}} N/A N/A 2026-09-17T16:05:38.281Z 2026-10-19T14:04:31.966Z
cve-2026-90051 tcp: reject non zerocopy devmem tx Linux
Linux
2026-09-17T16:05:37.620Z 2026-10-19T08:57:09.627Z
cve-2026-90050 N/A {'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}], 'providerMetadata': {'orgId': '416baaa9-dc9f-4396-8d5f-8c081fb06d67', 'shortName': 'Linux', 'dateUpdated': '2026-10-19T14:06:05.197Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}} N/A N/A 2026-09-17T16:05:36.970Z 2026-10-19T14:06:05.197Z
cve-2026-92980 8.6 (v4.0) 7.2 (v3.1) HortusFox-Web < 6.1 Remote Code Execution via Import/Export danielbrendel
hortusfox-web
2026-09-17T16:03:47.286Z 2026-10-01T15:21:56.296Z
cve-2026-85720 AsyncHttpClient: Origin credentials sent to the proxy … AsyncHttpClient
async-http-client
2026-09-17T16:00:01.615Z 2026-09-21T20:52:24.486Z
cve-2026-85718 AsyncHttpClient: Connection permit leak on TLS handsha… AsyncHttpClient
async-http-client
2026-09-17T15:58:40.719Z 2026-09-17T16:40:07.831Z
cve-2026-85721 AsyncHttpClient: Unbounded HTTP/1.1 response decompres… AsyncHttpClient
async-http-client
2026-09-17T15:55:32.018Z 2026-09-17T17:22:22.088Z
cve-2026-89036 8.7 (v4.0) 8.8 (v3.1) Appwrite < 2.0.0 Argument Injection via providerRootDi… appwrite
appwrite
2026-09-17T15:54:46.106Z 2026-10-01T15:21:54.929Z
cve-2026-85717 AsyncHttpClient: Client-wide realm credentials re-sent… AsyncHttpClient
async-http-client
2026-09-17T15:53:39.875Z 2026-09-23T18:46:54.135Z
cve-2026-85719 AsyncHttpClient: SOCKS proxy credentials sent to the o… AsyncHttpClient
async-http-client
2026-09-17T15:52:16.315Z 2026-09-18T14:45:01.238Z
cve-2026-61700 MariaDB Connector/J does not enforce allowLocalInfile=… mariadb-corporation
mariadb-connector-j
2026-09-17T15:49:15.207Z 2026-09-21T20:51:21.195Z
cve-2026-69197 Umbraco: Delivery API leaks protected (Public Access) … umbraco
Umbraco-CMS
2026-09-17T15:44:24.988Z 2026-09-17T17:23:18.418Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description