Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-116855 — WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My aucti…

Remote | Authorization
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99216 — Drivers: hv: Don't reset VMBus connection state on error/exit paths

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbus_connection.conn_stat…

linux_kernel | Misconfiguration
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99215 — power: supply: core: prevent unregistering a power supply while a callback runs

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power supply while a callback runs Once a power supply is registered, its callbacks …

linux_kernel | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99214 — drm/vc4: hdmi: Move packet RAM enable to PM runtime

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD handler and start up before video has been …

linux_kernel | Misconfiguration
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99213 — vsock: treat TCP_CLOSING as once-established

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING transition on OP_RST, which can race with …

linux_kernel | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99212 — net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_event_handler_cmn() hands the return val…

linux_kernel | Misconfiguration
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99211 — netlink: reset skb headers before unicast and multicast filtering

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKF_NET_OFF and SKF_LL_OFF to read relat…

linux_kernel | Information Disclosure
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99210 — accel/rocket: clear rdev on device init failure

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket_probe() stores the return value from rocket_device_init() in the file-scop…

linux_kernel | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99209 — drm/xe: skip eviction of a BO with no resource

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_evict_flags() switches on tbo->resource->mem_type to choose an eviction placeme…

Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99208 — drm/xe/oa: Zero OA buffer at allocation

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_type_kernel BOs are not guaranteed to be zeroed on allocation and may contain data…

linux_kernel | Information Disclosure
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99207 — scsi: target: Disable interrupts while holding delayed_cmd_lock

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed_cmd_lock target_do_delayed_work() takes dev->delayed_cmd_lock with a plain…

linux_kernel | Race Condition
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99206 — scsi: target: iscsi: Fix race in discovery auth updates

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod …

linux_kernel | Race Condition
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99205 — sched/core: Call wakeup_preempt() for queued tasks during class change

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks during class change Paul reported recent RCU changes exposed a lost resched wh…

linux_kernel | Race Condition
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99204 — ocfs2/dlm: Protect the recovery list during debugfs reads

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive while debug_state_print(…

linux_kernel | Race Condition
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99203 — pipe: preserve existing fasync readers on writer setup failure

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure F_SETFL and FIOASYNC decide whether to invoke ->fasync() before pi…

linux_kernel | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99202 — scsi: libsas: Fix SMP IO deadlock during HA resume

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume smp_execute_task_sg() calls pm_runtime_get_sync() on the host before issuing a…

linux_kernel | Race Condition
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99201 — netlink: avoid hashing the network namespace pointer

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-cont…

linux_kernel | Information Disclosure
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99200 — net: hisilicon: hisi_femac: Move setting of netops to fix crash

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops to fix crash hisi_femac_drv_probe() connects the PHY before dev->netdev_ops is…

linux_kernel | Misconfiguration
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99199 — net: hisilicon: hip04_eth: Move setting of netops to fix crash

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hip04_eth: Move setting of netops to fix crash hip04_mac_probe() calls of_phy_connect() before ndev->netdev_ops i…

linux_kernel | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
0.0 NA
CVE-2026-99198 — net: ethernet: actions: Move setting of netops to fix crash

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fix crash owl_emac_probe() calls owl_emac_phy_init(), which connects the PHY, b…

linux_kernel | Memory Corruption
Oct 28, 2026 Oct 28, 2026
Oct 28, 2026
Oct 28, 2026
Showing 20 of 16944 Results