CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 15:32 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-99131 New | LI Linux Linux | – | Oct 28 | xfs: fix capability check in xfs |
| CVE-2026-99130 New | LI Linux Linux | – | Oct 28 | io_uring/cancel: don't spin on local work the task can't run |
| CVE-2026-99129 New | LI Linux Linux | – | Oct 28 | selinux: fix BPF token permission checks |
| CVE-2026-99128 New | LI Linux Linux | – | Oct 28 | sctp: validate chunk length in the inqueue parser |
| CVE-2026-99127 New | LI Linux Linux | – | Oct 28 | page_pool: keep frag_offset aligned for odd-sized requests |
| CVE-2026-99126 New | LI Linux Linux | – | Oct 28 | s390/ctcm: Prevent XID null dereference |
| CVE-2026-99125 New | LI Linux Linux | – | Oct 28 | s390/pai: Handle multiple PMU stop callback invocations |
| CVE-2026-99124 New | LI Linux Linux | – | Oct 28 | s390/pci: Fix leak of uninitialized kernel data in SCLP report |
| CVE-2026-99123 New | LI Linux Linux | – | Oct 28 | vsock/virtio: validate packet source for connected sockets |
| CVE-2026-99122 New | LI Linux Linux | – | Oct 28 | vsock/vmci: validate packet source for connected sockets |
| CVE-2026-99121 New | LI Linux Linux | – | Oct 28 | ipv4: avoid divide by zero in fib_rebalance |
| CVE-2026-99120 New | LI Linux Linux | – | Oct 28 | KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes |
| CVE-2026-99119 New | LI Linux Linux | – | Oct 28 | drm/amdgpu/userq: actually validate userq BOs |
| CVE-2026-99118 New | LI Linux Linux | – | Oct 28 | drm/i915/dmc: Harden DMC firmware payload parsing |
| CVE-2026-99117 New | LI Linux Linux | – | Oct 28 | net: bridge: mcast: don't truncate the port group walk on teardown |
| CVE-2026-99116 New | LI Linux Linux | – | Oct 28 | net: psp: do not inherit the Rx association on clone |
| CVE-2026-99115 New | LI Linux Linux | – | Oct 28 | ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION |
| CVE-2026-99114 New | LI Linux Linux | – | Oct 28 | ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION |
| CVE-2026-99113 New | LI Linux Linux | – | Oct 28 | ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in |
| CVE-2026-99112 New | LI Linux Linux | – | Oct 28 | net/sched: cls_flower: validate mask pointer after nla_next() |
| CVE-2026-99111 New | LI Linux Linux | – | Oct 28 | smb: client: fix data corruption with concurrent writes and O_TRUNC |
| CVE-2026-99110 New | LI Linux Linux | – | Oct 28 | smb: client: fix heap overflow in cifs_do_set_acl() |
| CVE-2026-99109 New | LI Linux Linux | – | Oct 28 | smb: client: reject SetEA requests that do not fit the request buffer |
| CVE-2026-99108 New | LI Linux Linux | – | Oct 28 | ntfs: fix FITRIM range alignment |
| CVE-2026-99107 New | LI Linux Linux | – | Oct 28 | ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize |
| CVE-2026-99106 New | LI Linux Linux | – | Oct 28 | drm/amdgpu: free the userptr ranges when a CS fails after parser_bos |
| CVE-2026-99105 New | LI Linux Linux | – | Oct 28 | sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ |
| CVE-2026-99104 New | LI Linux Linux | – | Oct 28 | sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor |
| CVE-2026-99103 New | LI Linux Linux | – | Oct 28 | workqueue: Fix unbound pool lifetime for pending pwqs |
| CVE-2026-99102 New | LI Linux Linux | – | Oct 28 | ntfs: take invalidate_lock in ntfs_setattr_size() |
| CVE-2026-99101 New | LI Linux Linux | – | Oct 28 | ntfs: move attribute payload before shrinking its record |
| CVE-2026-110541 New | PD PowerProtect Data Domain Dell | 7.2 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-101272 New | Product not mapped yet | 2.3 | Oct 28 | Incorrect session validation for API-created shredder exports |
| CVE-2026-101274 New | Product not mapped yet | 6.9 | Oct 28 | When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an… |
| CVE-2026-110540 New | PD PowerProtect Data Domain Management Center Dell | 7.1 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-101273 New | Product not mapped yet | 5.3 | Oct 28 | Giftcard enumeration |
| CVE-2026-103792 New | PD PowerProtect Data Domain Management Center Dell | 9.6 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-103779 New | PD PowerProtect Data Domain Dell | 8.3 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-112198 New | ND NoviGest Desktop App Tactis | 8.3 | Oct 28 | Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App |
| CVE-2026-103799 New | PD PowerProtect Data Domain Management Center Dell | 9.6 | Oct 28 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions… |
| CVE-2026-112197 New | ND NoviGest Desktop App Tactis | 9.4 | Oct 28 | Missing Authentication for Critical Function in Tactis' NoviGest Desktop App |
| CVE-2026-103780 New | PD PowerProtect Data Domain Dell | 9.8 | Oct 28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… |
| CVE-2026-87879 New | AC Acronis Cyber Protect 17 Acronis | 5.9 | Oct 28 | Sensitive information disclosure due to improper token validation |
| CVE-2026-87878 New | AC Acronis Cyber Protect 17 Acronis | 6.3 | Oct 28 | Linux binaries have executable stack attribute enabled |
| CVE-2026-87102 New | AC Acronis Cyber Protect 17 Acronis | 7.4 | Oct 28 | Sensitive information disclosure and manipulation due to improper token validation |
| CVE-2026-87100 New | AC Acronis Cyber Protect 17 Acronis | 3.6 | Oct 28 | Protection mechanism failure due to missing binary hardening in Linux executables |
| CVE-2026-87099 New | AC Acronis Cyber Protect 17 Acronis | 5.7 | Oct 28 | Cross-site scripting (XSS) vulnerability due to improper input validation |
| CVE-2025-30414 New | AC Acronis Cyber Protect 17 Acronis | 7.1 | Oct 28 | Local privilege escalation due to improper authentication |
| CVE-2026-87098 New | AC Acronis Cyber Protect 17 Acronis | 3.1 | Oct 28 | Sensitive information disclosure due to improper authorization |
| CVE-2026-87880 New | AC Acronis Cyber Protect 17 Acronis | 6.8 | Oct 28 | Sensitive information disclosure due to missing SSL certificate verification affecting one component |