Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
4.3 MEDIUM
CVE-2026-7583 — Open5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of service

A flaw has been found in Open5GS up to 2.7.7. This issue affects the function bsf_sess_find_by_ipv6prefix of the file /src/bsf/context.c of the component BSF. This manipulation of the argument ipv6Pr…

Remote | Denial of Service
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
5.3 MEDIUM
CVE-2026-43507 — Prosody XML Parsing Resource Amplification Denial of Service

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by XML parsing resource amplification from unauthen…

Remote | Denial of Service
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
5.3 MEDIUM
CVE-2026-43506 — Prosody Denial of Service Vulnerability

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections.

Remote | Denial of Service
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
6.5 MEDIUM
CVE-2026-43505 — Prosody Mod Proxy65 Authentication Relaying Vulnerability

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activation scenario, relayin…

Remote | Authentication
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
6.5 MEDIUM
CVE-2026-43504 — Prosody Mod Proxy65 Authentication Bypass Vulnerability

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in a paused scenario, relaying of u…

Remote | Authentication
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43057 — net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only advertises support for checksum offload o…

| Misconfiguration
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43056 — net: mana: fix use-after-free in add_adev() error path

In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-after-free in add_adev() error path If auxiliary_device_add() fails, add_adev() jumps to add_fail and calls au…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43055 — scsi: target: file: Use kzalloc_flex for aio_cmd

In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd The target_core_file doesn't initialize the aio_cmd->iocb for the ki_write_strea…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43054 — scsi: target: tcm_loop: Drain commands in target_reset handler

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_reset handler tcm_loop_target_reset() violates the SCSI EH contract: it returns …

| Denial of Service
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43053 — xfs: close crash window in attr dabtree inactivation

In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format extended attributes, xfs_attr3_n…

| Misconfiguration
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43052 — wifi: mac80211: check tdls flag in ieee80211_tdls_oper

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the stati…

| Authorization
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43051 — HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq The wacom_intuos_bt_irq() function processes Bluetooth HID reports with…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43050 — atm: lec: fix use-after-free in sock_def_readable()

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable() A race condition exists between lec_atm_close() setting priv->lecd to NULL an…

| Race Condition
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43049 — HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure Presently, if the force feedback initialisat…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43048 — HID: core: Mitigate potential OOB by removing bogus memset()

In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by removing bogus memset() The memset() in hid_report_raw_event() has the good intention of cle…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43047 — HID: multitouch: Check to ensure report responses match the request

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious (or clumsy) device to respond …

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43046 — btrfs: reject root items with drop_progress and zero drop_level

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering relocation at mount time, merge_reloc_root(…

| Misconfiguration
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43045 — mshv: Fix error handling in mshv_region_pin

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: First, pin_user_pages_fast() can return a…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43044 — crypto: caam - fix DMA corruption on long hmac keys

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac keys When a key longer than block size is supplied, it is copied and then hashed i…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
0.0 NA
CVE-2026-43043 — crypto: af-alg - fix NULL pointer dereference in scatterwalk

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AF_ALG interface fails to unmark the end of a Scatter/Gather Lis…

| Memory Corruption
May 01, 2026 May 01, 2026
May 01, 2026
May 01, 2026
Showing 20 of 5916 Results