The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,551 matching vulnerabilities · Page 56 of 772

authorizerdev1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-54072 · authorizerdev authorizer

Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

EPSS 0.5%public exploit CVSS 9.3

Linux46 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-80976 · Linux Linux

seg6: reset IP6CB after IPv6 decapsulation

EPSS 0.7%CVSS 9.8

CVE-2026-80980 · Linux Linux

net/smc: stop killed, freed and out_of_sync sharing a byte

EPSS 0.7%CVSS 9.8

CVE-2026-80981 · Linux Linux

net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()

EPSS 0.6%CVSS 9.8

CVE-2026-80986 · Linux Linux

net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages

EPSS 0.6%CVSS 9.8

CVE-2026-89482 · Linux Linux

nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone

EPSS 0.7%CVSS 9.8

CVE-2026-89485 · Linux Linux

lockd: pin next file across nlm_inspect_file lock-drop

EPSS 0.7%CVSS 9.8

CVE-2026-89492 · Linux Linux

ocfs2: validate directory-index entry counts when reading metadata

EPSS 0.7%CVSS 9.8

CVE-2026-89494 · Linux Linux

ocfs2: validate lengths in dlm_mig_lockres_handler

EPSS 0.7%CVSS 9.8

CVE-2026-89495 · Linux Linux

ocfs2: bound namelen in dlm_migrate_request_handler

EPSS 0.7%CVSS 9.8

CVE-2026-89526 · Linux Linux

svcrdma: Validate Read chunk positions before reconstruction

EPSS 0.7%CVSS 9.8

CVE-2026-89536 · Linux Linux

SUNRPC: wait for in-flight client TLS handshake callback

EPSS 0.6%CVSS 9.8

CVE-2026-89538 · Linux Linux

SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field

EPSS 0.7%CVSS 9.8

CVE-2026-89555 · Linux Linux

mpls: reload header after pskb_may_pull()

EPSS 0.7%CVSS 9.8

CVE-2026-89558 · Linux Linux

md/raid10: fix still_degraded being inverted in raid10_sync_request()

EPSS 0.6%CVSS 9.8

CVE-2026-89636 · Linux Linux

smb: client: clear ce->tgthint in free_tgts()

EPSS 0.7%CVSS 9.8

CVE-2026-89643 · Linux Linux

audit: avoid dropping live tree ref on fsnotify rule autoremove

EPSS 0.7%CVSS 9.8

CVE-2026-89651 · Linux Linux

ceph: bound MDSCapAuth path and fs_name decode in handle_session()

EPSS 0.6%CVSS 9.8

CVE-2026-89546 · Linux Linux

SUNRPC: close backchannel before destroying callback service

EPSS 0.6%CVSS 9.8

CVE-2026-89610 · Linux Linux

ntfs: verify run length exceeding volume boundary

EPSS 0.6%CVSS 9.8

CVE-2026-89611 · Linux Linux

ntfs: validate non-resident attribute offsets

EPSS 0.6%CVSS 9.8

CVE-2026-89612 · Linux Linux

ntfs: reject invalid MFT LCNs from boot sector

EPSS 0.6%CVSS 9.8

CVE-2026-89613 · Linux Linux

ntfs: reject invalid empty mapping pairs

EPSS 0.6%CVSS 9.8

CVE-2026-89614 · Linux Linux

ntfs: bound the free-cluster bitmap scan to the volume

EPSS 0.6%CVSS 9.8

CVE-2026-89633 · Linux Linux

smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

EPSS 0.6%CVSS 9.8

CVE-2026-89635 · Linux Linux

ksmbd: only rebind the reopened file's own oplock on durable reconnect

EPSS 0.6%CVSS 9.8

CVE-2026-89637 · Linux Linux

smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2

EPSS 0.6%CVSS 9.8

CVE-2026-81002 · Linux Linux

xdp: fix zero-copy frame layout

EPSS 0.5%CVSS 9.8

CVE-2026-89478 · Linux Linux

sctp: drop a chunk if its transport was removed

EPSS 0.5%CVSS 9.8

CVE-2026-89479 · Linux Linux

sctp: stop processing a packet once its association is deleted

EPSS 0.5%CVSS 9.8

CVE-2026-89530 · Linux Linux

svcrdma: Reject inline replies that overflow the pull-up buffer

EPSS 0.5%CVSS 9.8

CVE-2026-89533 · Linux Linux

svcrdma: Fix offset arithmetic in read_chunk_range

EPSS 0.5%CVSS 9.8

CVE-2026-89537 · Linux Linux

SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2

EPSS 0.7%CVSS 9.1

CVE-2026-89541 · Linux Linux

SUNRPC: harden gss_unwrap_resp_priv length checks

EPSS 0.5%CVSS 9.8

CVE-2026-89542 · Linux Linux

SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

EPSS 0.5%CVSS 9.8

CVE-2026-89550 · Linux Linux

SUNRPC: svcauth_gss: enforce krb5 token minimum length

EPSS 0.5%CVSS 9.8

CVE-2026-89551 · Linux Linux

SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow

EPSS 0.5%CVSS 9.8

CVE-2026-89634 · Linux Linux

smb: client: fix ALIGN() overflow in symlink_data() error context loop

EPSS 0.7%CVSS 9.1

CVE-2026-89649 · Linux Linux

ceph: bound xattr value length in __build_xattrs()

EPSS 0.7%CVSS 9.1

CVE-2026-89652 · Linux Linux

ceph: bound copied dentry name length in NFS export get_name

EPSS 0.5%CVSS 9.8

CVE-2026-80926 · Linux Linux

ksmbd: fix use-after-free in oplock break notification

EPSS 0.4%CVSS 9.8

CVE-2026-80945 · Linux Linux

crypto: iaa - unmap dst before software fallback on decompress

EPSS 0.5%CVSS 9.1

CVE-2026-89532 · Linux Linux

svcrdma: Fix pcl_for_each_segment for empty chunks

EPSS 0.5%CVSS 9.1

CVE-2026-89630 · Linux Linux

smb: client: restore the data_offset bound in is_valid_oplock_break()

EPSS 0.5%CVSS 9.1

CVE-2026-89631 · Linux Linux

smb: client: reject a tree connect response whose byte count is too small

EPSS 0.5%CVSS 9.1

CVE-2026-89650 · Linux Linux

ceph: bound num_export_targets array for mds info v2/v3

EPSS 0.5%CVSS 9.1

CVE-2026-89448 · Linux Linux

iommu/vt-d: Force requesting ACS when tboot is enabled

EPSS 0.1%CVSS 9.3

GetSimpleCMS-CE1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-53952 · GetSimpleCMS-CE GetSimpleCMS-CE

GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

EPSS 0.6%CVSS 9.8

ThemeRex1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-62105 · ThemeRex ThemeREX Addons

WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

wpeverest1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-62103 · wpeverest Everest Forms

WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8