Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
12,290 results · page 13 of 246
Oct 15, 2026A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.CVE-2026-79840 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.3
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
- Product
- HPE NonStop XABroker
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.CVE-2026-79839 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.3
A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.
- Product
- HPE NonStop ODBC/MX Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.CVE-2026-79838 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.3
A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.
- Product
- HPE NonStop ODBC/MX Services
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.CVE-2026-88794 · Other software · Sparx Systems · reported by cvd@cert.plHigh 8.2
Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's filesystem. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 17.1 but may also affect other versions.
- Product
- Enterprise Architect
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.plsparxsystems.com
Oct 15, 2026A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting inCVE-2026-79837 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.3
A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.
- Product
- HPE NonStop SQL/MX UDR SERVER
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to proCVE-2026-79836 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 6.4
A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure.
- Product
- HPE NonStop SQL/MX Run-Time Statistics
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.CVE-2026-79835 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comLow 2.8
A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.
- Product
- HPE Nonstop KMS Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.CVE-2026-79834 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.4
A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.
- Product
- HPE NonStop SQL/MX SQLCAT
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial ofCVE-2026-79833 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.5
A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.
- Product
- HPE NonStop ANSI SQLUTIL
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.CVE-2026-79832 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.6
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.
- Product
- HPE NonStop SQL/MX Executor
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.CVE-2026-79831 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 6.6
A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.
- Product
- HPE NonStop Posix User Threads
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.CVE-2026-79830 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 6.6
A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.
- Product
- HPE NonStop Kernel Level Thread Model Lib
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.CVE-2026-79829 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.2
A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
- Product
- HPE NonStop HTTP WEBSERVER
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.CVE-2026-79828 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.1
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
- Product
- HPE NonStop Debug Utilities
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.CVE-2026-79827 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.1
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
- Product
- HPE NonStop Inspect Subsystem
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.CVE-2026-79826 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.1
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
- Product
- HPE NonStop OCAX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.CVE-2026-79825 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.1
A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.
- Product
- HPE NonStop NDSREST
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a ..CVE-2026-79824 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.
- Product
- HPE NonStop Python 3.x
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.CVE-2026-79823 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 4
HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
- Product
- HPE NonStop EMS Distributor
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log.CVE-2026-104618 · Other software · SUSE · reported by meissner@suse.deMedium 6.9
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.
- Product
- SUSE Linux Enterprise Server 16.1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.suse.comsuse.com
Oct 15, 2026There are two invocations of `qrencode` to display a QR code for scanning.CVE-2026-104617 · Other software · SUSE · reported by meissner@suse.deMedium 5.9
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.
- Product
- SUSE Linux Enterprise Server 16.1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.suse.comsuse.com
Oct 15, 2026A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.CVE-2026-79822 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.1
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.
- Product
- HPE NonStop TNS/X Native Inspect
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.CVE-2026-79821 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.2
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.
- Product
- HPE NonStop SOAP 4.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.CVE-2026-76668 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 6.3
A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.
- Product
- HPE NonStop Kernel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.CVE-2026-76667 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 5.7
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
- Product
- HPE NonStop EXPAND
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.CVE-2026-76666 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 4.7
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.
- Product
- HPE NonStop EXPAND
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.CVE-2026-76665 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.1
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.
- Product
- HPE NonStop EXPAND
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operationsCVE-2026-76664 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 6.4
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations
- Product
- HPE NonStop EXPAND
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.CVE-2026-76663 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.5
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
- Product
- HPE NonStop TELSERV
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.CVE-2026-76662 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 5.9
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
- Product
- HPE NonStop TELSERV
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.CVE-2026-76661 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.6
A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.
- Product
- HPE NonStop QIOMON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.CVE-2026-76660 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.7
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.
- Product
- HPE NonStop CIPSAM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.CVE-2026-76659 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.5
A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.
- Product
- HPE NonStop TCP/IP UTILITIES
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed undeCVE-2026-76656 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 5.3
A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.
- Product
- HPE NonStop TCP/IP UTILITIES
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionCVE-2026-73799 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.5
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption
- Product
- HPE NonStop SNMP Trap Multiplexer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-CVE-2026-110842 · Other software · n8n-io · reported by VulnCheckHigh 7.7
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA.
- Product
- n8n
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comvulncheck.com
Oct 14, 2026A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2.CVE-2026-110695 · Other software · turboderp · reported by VulDBLow 2.1
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Product
- ExLlamaV2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated uCVE-2026-110645 · Other software · ArsalanDotMe · reported by VulnCheckCritical 9.3
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.
- Product
- video-stitch
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescapeCVE-2026-110642 · Other software · xhtml2pdf · reported by VulnCheckHigh 8.5
xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS commands as the invoking user when the pisa tool is used with -s/--start-viewer.
- Product
- xhtml2pdf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege users to chaCVE-2026-110615 · Other software · jishenghua · reported by VulnCheckHigh 7.1
jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege users to change other users' account status. Attackers can submit crafted ids and status values to disable every non-owner account in their tenant, locking out administrators, or re-enable disabled accounts.
- Product
- jshERP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026In the Linux kernel, the following vulnerability has been resolved: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() KUAP means kernel cannot CVE-2026-98396 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
In the Linux kernel, the following vulnerability has been resolved: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() KUAP means kernel cannot touch user memory unless it explicitly is enabled. In the kernel it should stay AMR_KUAP_BLOCKED. While returning to userspace just before RFI, kernel should restore the user AMR value back. Looks like GENERIC_ENTRY might be treating arch_exit_to_user_mode_prepare() as the last architecture step before returning to userspace. commit bee25f97ad24 ("powerpc: Enable GENERIC_ENTRY feature") therefore called kuap_user_restore() from that hook. But on PowerPC that is too early. After irqentry_exit() / syscall_exit_to_user_mode() we still run platform specific exit routines. e.g. code snippets showing both exception handling and system call handling as the callers of function arch_exit_to_user_mode_prepare() which does kuap_user_restore(). The below path shows that calling kuap_user_restore() is too early when called from arch_exit_to_user_mode_prepare(). Exception handling in exceptions-64s.S ======================================= bl CFUNC(do_page_fault) ..DEFINE_INTERRUPT_HANDLER_ASYNC(do_page_fault) arch_interrupt
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Oct 14, 2026In the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When __replay_soft_CVE-2026-98395 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
In the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When __replay_soft_interrupts() replays a pending interrupt (e.g. PACA_IRQ_DEC -> timer_interrupt), it calls the handler directly with a synthetic pt_regs. The DEFINE_INTERRUPT_HANDLER_ASYNC wrapper around each handler calls arch_interrupt_async_exit_prepare() on the way out, which calls arch_interrupt_exit_prepare() -> local_irq_disable() -> arch_local_irq_disable(), which does: irq_soft_mask_set(IRQS_DISABLED) /* 0x1 */ This unconditionally overwrites irq_soft_mask with IRQS_DISABLED (0x1), stripping the IRQS_PMI_DISABLED (0x2) bit. The result is that irq_soft_mask is 0x1 instead of IRQS_ALL_DISABLED (0x3) when the handler returns to __replay_soft_interrupts(). For a normally-taken interrupt this is harmless: the next interrupt always enters through arch_interrupt_enter_prepare() which unconditionally sets irq_soft_mask to IRQS_ALL_DISABLED. But during replay, next_interrupt() is called directly between replayed handlers without going back through arch_interrupt_enter_prepare(), so the stripped bit is never restored. next_interrupt(
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Oct 14, 2026A flaw was found in the clevis PKCS#11 pin.CVE-2026-109968 · Other software · Red Hat · reported by Red HatMedium 5.5
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read the log file to obtain the LUKS passphrase.
- Product
- Red Hat Enterprise Linux 10
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Oct 14, 2026A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code executionCVE-2026-76655 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.5
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution
- Product
- HPE NonStop SNMP Trap Multiplexer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.CVE-2026-73798 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.2
A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.
- Product
- HPE NonStop DNS 9.2.3 Non Secure Version
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.CVE-2026-73797 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 5.3
A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.
- Product
- HPE NonStop TSQLFIL
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-73796 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 4.4
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.
- Product
- HPE NonStop TSQLEXE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.CVE-2026-73795 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 6.4
A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.
- Product
- HPE NonStop TMF Auditread2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2026The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting.CVE-2026-104795 · Other software · Red Hat · reported by Red HatHigh 8.8
The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. **fork()s** a child process 2. **setns()** into the target container's PID and mount namespaces 3. **fchdir()** back to an orphaned FD pointing at the extractor's own root filesystem (where `/crio.sock` is hostPath-mounted) 4. Calls **only `seteuid(target_uid)`** — changing the effective UID but leaving the **real UID and saved-set-UID at 0** and **retaining the permitted capability set** 5. The `check_no_privileged_perms()` guard inspects only the Effective capability set (so it passes), and is **skipped entirely when the target runs as uid 0** 6. The `VersionExecutable` fingerprint invokes `fpr_kind_executable` with `process.command_line[0]` — the target's argv[0], read from `/proc/<pid>/cmdline` and **fully controlled by the workload** 7. `fpr_kind_executable` calls `exec.Command(executable, "--version").Output()` — executing the **workload's own binary** inside the workload's mount namespace while **ruid=0 in the host user namespace** The executed process can call `setu
- Product
- Red Hat OpenShift Container Platform 4.19
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comaccess.redhat.com
Oct 14, 2026A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers).CVE-2026-100229 · Other software · Red Hat · reported by Red HatMedium 6.5
A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could exploit this by providing a specially crafted H.266 bitstream to a third-party application that uses this library API, potentially causing a crash or memory corruption. No standard GStreamer pipeline element currently invokes the affected code path.
- Product
- Red Hat Enterprise Linux 10
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.