Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
3.3 LOW
CVE-2026-111993 — Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation…

studentmanagement | Cryptography
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
6.5 MEDIUM
CVE-2026-111992 — itsmeravitejak Online-Examination-System Exam exam.php startExam sql injection

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the co…

online-examination-system | Remote | Injection
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98868 — dm-pcache: reject a kset that overruns its segment

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache_replay(), the writeback worker and the GC worker read a kset of get_kset…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98867 — dm-pcache: bound the logical key offset from persistent memory

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cache_key_decode() takes a key's logical off from the cache device…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98866 — sched/cache: Introduce task_struct->sched_cache_grp to fix UAF

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a sched_cache_grp pointer to task_struct so that scheduler cod…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98865 — sched_ext: Don't run ops.dequeue() with a DSQ lock held

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock held ops.dequeue() is invoked with the source user DSQ's lock still held on th…

linux_kernel | Race Condition
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98864 — sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task ebf1ccff79c4 ("sched_ext: Fix ops.dequeue() semantics") moved…

linux_kernel | Race Condition
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98863 — KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Re-pend GET_NESTED_STATE_PAGES before exiting to userspace i…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98862 — audit: fix exe mark UAF in kill_rules()

In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules() kill_rules() removes mixed AUDIT_DIR and AUDIT_EXE rules when an audit tree is pruned. It…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98861 — fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()

In the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() unregister_fprobe() and unregister_fprobe_async() (used by BPF k…

linux_kernel | Race Condition
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98860 — HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request As reported by Sashiko: If a transport driver encounters a hardwa…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98859 — HID: multitouch: stop the release timer from being rearmed on remove

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mt_remove() quiesces the sticky-finger timer before stopping…

linux_kernel | Race Condition
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98858 — io_uring: fix task_work add use-after-free with SQPOLL

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs task_work off its own list and doesn't …

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98857 — ipvs: bound LBLCR and LBLC cache growth

In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for every previously unseen d…

linux_kernel | Denial of Service
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98856 — kprobes: Skip disarmed probes when checking optkprobe overlap

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a dis…

linux_kernel | Race Condition
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98855 — of/overlay: put property on deadprops only after changeset add succeeds

In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-ye…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98854 — of/overlay: only treat a positive changeset id as registered

In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered of_overlay_fdt_apply() stores the idr_alloc() return value in ovcs->…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98853 — net: gso: limit recursive IP-in-IP segmentation

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment() for each neste…

linux_kernel | Denial of Service
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98852 — net: extend IPv6 exthdr detection of tunneled packets

In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b ("net: correctly handle tunneled traffic on IPV6_CSUM G…

linux_kernel | Misconfiguration
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
0.0 NA
CVE-2026-98851 — netfilter: nft_flow_offload: drop flowtable reference on init error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error path nft_flow_offload_init() bumps the flowtable use count wi…

linux_kernel | Memory Corruption
Oct 18, 2026 Oct 18, 2026
Oct 18, 2026
Oct 18, 2026
Showing 20 of 14431 Results