Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how gnu compares to other vendors in security performance

View Risk Score →

oss-secFwd: The GNU C Library version 2.44 is now available, fixes 3 CVEs

First published (updated )
https://seclists.org/oss-sec/2026/q3/275

oss-secGNU Inetutils talkd buffer overflow with long DNS names.

First published (updated )
https://seclists.org/oss-sec/2026/q3/277

oss-secCVE-2026-53910: GNU diffutils bug, and some thoughts on "security" ports

First published (updated )
https://seclists.org/oss-sec/2026/q3/276

GNU coreutils (unexpand)Heap-based Buffer Overflow in GNU coreutils

Risk 21
Severity
1.8
First published (updated )
CVE-2026-56392

GNU coreutils uniqOut‑of‑bounds Read in GNU coreutils

Risk 32
Severity
4.6
First published (updated )
CVE-2026-56391
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GNU diffutils (diff3 tool)Heap-based Buffer Overflow in GNU diffutils

Risk 34
Severity
2.1
First published (updated )
CVE-2026-53910

GNU gawkStack-based buffer overflow in gawk

Risk 43
Severity
5.1
First published (updated )
CVE-2026-40553

GNU gawkHeap buffer overflow in gawk

Risk 66
Severity
2.1
First published (updated )
CVE-2026-40468

GNU LibreDWGGNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

Risk 39
Severity
1.9
First published (updated )
CVE-2026-15520

GNU WgetSSRF

Risk 42
Severity
5.9
First published (updated )
CVE-2026-15146
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GNU LibreDWGGNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

Risk 18
Severity
1.9
First published (updated )
CVE-2026-15184

GNU LibreDWGGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow

Risk 39
Severity
1.9
First published (updated )
CVE-2026-15182

GNU patchLoop with Unreachable Exit Condition in GNU patch

Risk 32
Severity
4.6
First published (updated )
CVE-2026-56289

GNU patchNULL Pointer Dereference in GNU patch

Risk 32
Severity
4.6
First published (updated )
CVE-2026-56288

GNU WgetGNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding

Risk 47
Severity
6
First published (updated )
CVE-2026-58472
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GNU WgetGNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

Risk 47
Severity
6
First published (updated )
CVE-2026-58471

GNU WgetGNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

Risk 33
Severity
6.9
First published (updated )
CVE-2026-58470

GNU WgetGNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing

Risk 47
Severity
8.7
First published (updated )
CVE-2026-58469

oss-secSymlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl

First published (updated )
https://seclists.org/oss-sec/2026/q2/1050

GNU gzipGlobal Buffer Overflow in GNU gzip

Risk 43
Severity
6.9
First published (updated )
CVE-2026-41992
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GNU gzipPredictable Temporary File in GNU gzip

Risk 28
Severity
2
First published (updated )
CVE-2026-41991

Rapid7 InsightConnect Sed PluginArbitrary File Read in Rapid7 InsightConnect Sed Plugin

Risk 27
Severity
6.5
EPSS
0.31%
First published (updated )
CVE-2026-9153

Rapid7 InsightConnect Sed PluginArbitrary File Write in Rapid7 InsightConnect Sed Plugin

Risk 35
Severity
7.1
EPSS
0.27%
First published (updated )
CVE-2026-9154

Rapid7 InsightConnect Sed PluginOS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

Risk 57
Severity
8.8
EPSS
0.92%
First published (updated )
CVE-2026-9155

GNU libidnLast updated 9 July 2026

Risk 27
Severity
4
First published (updated )
CVE-2026-57053
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GNU GNU SASLGNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM…

Risk 27
Severity
5.3
First published (updated )
CVE-2026-56968

GNU SavaneGNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Risk 20
Severity
3.7
First published (updated )
CVE-2026-56355

GNU aclacl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl

Risk 54
Severity
7.2
First published (updated )
CVE-2026-54370

GNU tarPath Traversal (Zip-Slip) in unarchive module

Risk 31
Severity
5.3
First published (updated )
CVE-2026-12565

oss-secFwd: gsasl-2.2.4 leased - fixes heap disclosu

First published (updated )
https://seclists.org/oss-sec/2026/q2/939
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203