-Infinity
0

Trending

Last week
Last month
Last year

perwendel/spark/SparkJavaperwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink

Risk 22
Severity
2.1
First published (updated )
CVE-2026-17459

mf-yang/openclaw-cnmf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery

Risk 46
Severity
2.1
First published (updated )
CVE-2026-17458

mf-yang openclaw-cnmf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure

Risk 22
Severity
2.1
First published (updated )
CVE-2026-17457

Linux Linux kernelnet: nexthop: Increase weight to u16

Risk 12
First published (updated )
CVE-2024-14040

Linux Kernelnet/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

Risk 51
First published (updated )
CVE-2026-64530
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

datamodel-code-generatordatamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

Risk 69
Severity
7.5
First published (updated )
CVE-2026-63720

nanocoai NanoClawnanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

Risk 46
Severity
2.1
First published (updated )
CVE-2026-17434

nanocoai/NanoClawnanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization

Risk 39
Severity
1.9
First published (updated )
CVE-2026-17433

Fluent Forms Fluent Forms Pro Add On PackFluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field

Risk 79
Severity
8.8
First published (updated )
CVE-2026-15962

NousResearch hermes-agentNousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control

Risk 39
Severity
1.3
First published (updated )
CVE-2026-17432
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zephyr Project Zephyr OSSMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot

Risk 54
Severity
6.5
First published (updated )
CVE-2026-10681

SiYuan SiYuanSiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

Risk 87
Severity
10
First published (updated )
CVE-2026-66012

OpenRemote OpenRemoteOpenRemote before 1.26.2 Authentication Bypass via Console Registration

Risk 76
Severity
9.3
First published (updated )
CVE-2026-66013

ImageMagick ImageMagickImageMagick before 7.1.2-27 Memory Leak via Invalid CLI Options

Risk 22
Severity
4.8
First published (updated )
CVE-2026-66011

CVE-2026-64529crypto: qat - remove unused character device and IOCTLs

Risk 5
First published (updated )
CVE-2026-64529
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Linux Kerneldrm/hyperv: validate VMBus packet size in receive callback

Risk 33
First published (updated )
CVE-2026-64527

Linux Linux kerneltty: serial: samsung: Remove redundant port lock acquisition in rx helpers

Risk 37
First published (updated )
CVE-2026-64528

Linux Linux kernelethtool: tsconfig: fix missing ethnl_ops_complete()

Risk 8
First published (updated )
CVE-2026-64526

Linux Linux kernelxfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit

Risk 55
First published (updated )
CVE-2026-64525

Linux Linux kerneldrm/hyperv: validate resolution_count and fix WIN8 fallback

Risk 23
First published (updated )
CVE-2026-64524
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Linux Kernelnet/handshake: Take a long-lived file reference at submit

Risk 44
First published (updated )
CVE-2026-64523

Linux Linux kernelnet/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

Risk 27
First published (updated )
CVE-2026-64522

Linux Kernelpinctrl: meson: amlogic-a4: fix deadlock issue

Risk 15
First published (updated )
CVE-2026-64521

Linux Linux kernelfirmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

Risk 36
First published (updated )
CVE-2026-64520

Linux Linux kernelNFSD: Fix infinite loop in layout state revocation

Risk 37
First published (updated )
CVE-2026-64519
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Linux Linux kerneltcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().

Risk 37
First published (updated )
CVE-2026-64518

CVE-2026-64517drm/xe/gsc: Fix double-free of managed BO in error path

Risk 27
First published (updated )
CVE-2026-64517

Linux Linux kerneldrm/amdgpu/vce1: Fix VCE 1 firmware size and offsets

Risk 34
First published (updated )
CVE-2026-64516

Linux Kernelwifi: mac80211: fix MLE defragmentation

Risk 47
First published (updated )
CVE-2026-64515

Linux Linux kerneluserfaultfd: gate must_wait writability check on pte_present()

Risk 27
First published (updated )
CVE-2026-64514
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203