Thu, Mar 12 · 03:16 PM CDTCVE-2026-21669
9.9/10 · Must read/watchNVDvuln
Summary
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVECVE-2026-21669
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 12 · 03:16 PM CDT
ModifiedSun, May 10 · 02:16 PM CDT
CVE-2026-21708
9.9/10 · Must read/watchNVDvuln
Summary
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
CVECVE-2026-21708
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 12 · 05:16 PM CDT
ModifiedSun, May 10 · 01:16 PM CDT
CVE-2025-70041
9.8/10 · Must read/watchNVDvuln
Summary
An issue pertaining to CWE-259: Use of Hard-coded Password was discovered in oslabs-beta ThermaKube master.
CVECVE-2025-70041
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 11 · 09:16 PM CDT
ModifiedSun, May 10 · 02:16 PM CDT
CVE-2026-22738
9.8/10 · Must read/watchNVDvuln
Summary
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor could exploit this to execute arbitrary code. Only applications that use SimpleVectorStore and pass user-supplied input as a filter expression key are affected. This
CVECVE-2026-22738
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 27 · 06:16 AM CDT
ModifiedSun, May 10 · 02:16 PM CDT
CVE-2026-2590
9.8/10 · Must read/watchNVDvuln
Summary
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenticated user to persist credentials in vault entries, potentially exposing sensitive information to other users, by creating or editing cert
CVECVE-2026-2590
SeverityCRITICAL
TypeUPDATED
PublishedTue, Mar 03 · 10:16 PM CST
ModifiedSun, May 10 · 01:16 PM CDT
CVE-2026-2786
9.8/10 · Must read/watchNVDvuln
Summary
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVECVE-2026-2786
SeverityCRITICAL
TypeUPDATED
PublishedTue, Feb 24 · 02:16 PM CST
ModifiedSun, May 10 · 01:16 PM CDT
CVE-2026-31789
9.8/10 · Must read/watchNVDvuln
Summary
Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker can supply a crafted X.5
CVECVE-2026-31789
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 07 · 10:16 PM CDT
ModifiedSun, May 10 · 09:16 PM CDT
CVE-2026-43304
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that the key material would fit into a fixed-size buffer in process_auth_done() and generally has a sane length. The new CEPH_MAX_KEY_LEN check replaces the existing check for a
CVECVE-2026-43304
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 02:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43341
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparound in trace fill ioam6_fill_trace_data() stores the schema contribution to the trace length in a u8. With bit 22 enabled and the largest schema payload, sclen becomes 1 + 1020 / 4, wraps from 256 to 0, and
CVECVE-2026-43341
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 02:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43376
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd currently frees oplock_info immediately using kfree(), even though it is accessed under RCU read-side critical sections in places like opinfo_get() and proc_show_files(). Since there i
CVECVE-2026-43376
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43379
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is being accessed after rcu_read_unlock() has been called. This creates a race condition where the memory could be freed by a con
CVECVE-2026-43379
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43384
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
CVECVE-2026-43384
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43402
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to prevent use-after-free Guillaume reported crashes via corrupted RCU callback function pointers during KUnit testing. The crash was traced back to the pidfs rhashtable conversion which replaced the 24-byte rb_n
CVECVE-2026-43402
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43414
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport double free In qla24xx_els_dcmd_iocb() sp->free is set to qla2x00_els_dcmd_sp_free(). When an error happens, this function is called by qla2x00_sp_release(), when kref_put() releases the first and the last reference
CVECVE-2026-43414
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-5735
9.8/10 · Must read/watchNVDvuln
Summary
Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.
CVECVE-2026-5735
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 07 · 01:16 PM CDT
ModifiedSun, May 10 · 09:16 PM CDT
CVE-2026-8153
9.8/10 · Must read/watchNVDvuln
Summary
OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.
CVECVE-2026-8153
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 12:16 PM CDT
ModifiedMon, May 11 · 10:16 AM CDT
CVE-2026-43383
9.4/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
CVECVE-2026-43383
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2025-54236
9.1/10 · Must read/watchNVDvuln
Summary
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue doe
CVECVE-2025-54236
SeverityCRITICAL
TypeUPDATED
PublishedTue, Sep 09 · 02:15 PM CDT
ModifiedTue, May 05 · 01:00 AM CDT
CVE-2026-21671
9.1/10 · Must read/watchNVDvuln
Summary
A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & Replication.
CVECVE-2026-21671
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 12 · 03:16 PM CDT
ModifiedSun, May 10 · 02:16 PM CDT
CVE-2026-43406
9.1/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in process_message_header() If the message frame is (maliciously) corrupted in a way that the length of the control segment ends up being less than the size of the message header or a different frame is ma
CVECVE-2026-43406
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-43407
9.1/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() This patch fixes an out-of-bounds access in ceph_handle_auth_reply() that can be triggered by a message of type CEPH_MSG_AUTH_REPLY. In ceph_handle_auth_reply(), the value of the p
CVECVE-2026-43407
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 08 · 03:16 PM CDT
ModifiedMon, May 11 · 08:16 AM CDT
CVE-2026-38949
8.9/10 · Worth your timeNVDvuln
Summary
Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user input, allowing injection of arbitrary code
CVECVE-2026-38949
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 28 · 07:37 PM CDT
ModifiedSun, May 10 · 08:16 PM CDT
CVE-2026-21668
8.8/10 · Worth your timeNVDvuln
Summary
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.
CVECVE-2026-21668
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 12 · 03:16 PM CDT
ModifiedSun, May 10 · 02:16 PM CDT
CVE-2026-21672
8.8/10 · Worth your timeNVDvuln
Summary
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
CVECVE-2026-21672
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 12 · 05:16 PM CDT
ModifiedSun, May 10 · 02:16 PM CDT
CVE-2026-25077
8.8/10 · Worth your timeNVDvuln
Summary
Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file name sanitization, an attacker can register malicious templates to execute arbitrary code on the KVM hosts. This can result in the compromise
CVECVE-2026-25077
SeverityHIGH
TypeUPDATED
PublishedFri, May 08 · 01:16 PM CDT
ModifiedSun, May 10 · 03:16 PM CDT
