Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityCVE-2026-66822 · Microsoft · .NET 10.0 · CVE.org · FIRST EPSS · GitHub Advisory Database · linux, macosEPSS 0.7%Oct 13, 2026
Medium4.9Backstage is an open framework for building developer portals.CVE-2026-106499 · linuxfoundation · backstage/plugin-scaffolder-backend · CVE.org · NIST NVD · linuxOct 6, 2026
High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libipw_networkCVE-2026-98349 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.3%Oct 6, 2026
UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP station,CVE-2026-98332 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.2%Oct 6, 2026
UnknownIn the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp_rmem be set below 4096 We can hit a division by zero crash in tcp_rcvbuf_grow() and tcp_rcv_CVE-2026-98299 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.2%Oct 6, 2026
UnknownIn the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion andCVE-2026-98285 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.2%Oct 6, 2026
UnknownIn the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls brcms_del_timer() which uses the non-syncCVE-2026-98196 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.2%Oct 6, 2026
High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeroCVE-2026-98174 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.4%Oct 6, 2026
High8.6A flaw was found in libsoup.CVE-2026-102560 · Red Hat · Red Hat Enterprise Linux 9 · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · linux, redhatSep 29, 2026
High8.6A flaw was found in libsoup.CVE-2026-102559 · Red Hat · Red Hat Enterprise Linux 9 · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · linux, redhatSep 29, 2026
High8.6A flaw was found in libsoup.CVE-2026-102558 · Red Hat · Red Hat Enterprise Linux 9 · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · linux, redhatSep 29, 2026
High8.6A flaw was found in libsoup.CVE-2026-102557 · Red Hat · Red Hat Enterprise Linux 9 · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · linux, redhatSep 29, 2026
High8.6A flaw was found in libsoup.CVE-2026-102556 · Red Hat · Red Hat Enterprise Linux 9 · CIRCL Vulnerability Lookup · CVE.org · NIST NVD · linux, redhatSep 29, 2026
Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the l…CVE-2026-98159 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · linuxEPSS 0.2%Sep 25, 2026
High7.8In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no r…CVE-2026-98156 · linux · linux kernel · CVE.org · FIRST EPSS · NIST NVD · linuxEPSS 0.1%Sep 25, 2026
UnknownIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytCVE-2026-98158 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.2%Sep 25, 2026
High7.5In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each gCVE-2026-98056 · CVE.org · FIRST EPSS · OSV.dev · linux, ubuntuEPSS 0.6%Sep 25, 2026
Unknownperf/x86/intel/pt: Fix stop/start with no updateCVE-2026-93275 · CVE.org · FIRST EPSS · OSV.dev · linuxEPSS 0.2%Sep 24, 2026
Critical9.8NFSv4.1: zero referring call lists before decodingCVE-2026-90104 · CVE.org · FIRST EPSS · OSV.dev · linuxEPSS 0.6%Sep 17, 2026
High8.8Backstage is an open framework for building developer portals.CVE-2026-88064 · linuxfoundation · backstage plugin-techdocs-node · CVE.org · FIRST EPSS · NIST NVD · linuxEPSS 1.2%Sep 16, 2026
High8.8drm/amdkfd: Add TLB flush after MES queue eviction/suspensionCVE-2026-89811 · CVE.org · FIRST EPSS · OSV.dev · linuxEPSS 0.2%Sep 16, 2026
Medium5.5A flaw was found in SSSD (System Security Services Daemon).CVE-2026-90995 · fedoraproject · sssd · CVE.org · FIRST EPSS · NIST NVD · linux, redhatEPSS 0.2%Sep 14, 2026
High8.1A flaw was found in FreeIPA.CVE-2026-18147 · Red Hat · Red Hat Enterprise Linux 10 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · linux, redhatEPSS 0.3%Sep 9, 2026
High8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceCVE-2026-79678 · Red Hat · Red Hat Enterprise Linux 10 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · linux, redhatEPSS 0.7%Sep 7, 2026
Critical9.8A flaw was found in FreeIPA.CVE-2026-76578 · Red Hat · Red Hat Enterprise Linux 10 · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · linux, redhatEPSS 1.0%Sep 7, 2026