Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.6 HIGH
CVE-2026-114355 — DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root

OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process to execute arbitrary c…

| Injection
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
8.6 HIGH
CVE-2026-114354 — DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with …

| Authorization
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
7.0 HIGH
CVE-2026-114353 — DJI CrystalSky ZS600C USB-gadget backdoor allows root command execution

Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with…

| Authentication
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
8.7 HIGH
CVE-2026-10632 — Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document…

A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript through the packages parameter of the /h/rest docu…

collaboration_suite | Remote | Cross-Site Scripting
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99087 — dm-integrity: fix NULL pointer dereference when the 'R' flag is used

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SB_FLAG_DIRTY_BITMAP flag…

linux_kernel | Memory Corruption
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99086 — dm-integrity: validate the superblock on resume

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dm_integrity_resume() re-reads the superblock from the device so that it picks up…

linux_kernel | Misconfiguration
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99085 — sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler A CPU going down has to empty its own rq. Its h…

linux_kernel | Race Condition
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99084 — readdir: take no inode lock on an immutable directory

In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable directory iterate_dir() takes the directory's i_rwsem shared and holds it across ->it…

linux_kernel | Race Condition
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99083 — ksmbd: fix heap out-of-bounds write in krb5_authenticate()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5_authenticate() In krb5_authenticate(), out_len is calculated to determine available h…

linux_kernel | Memory Corruption
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99082 — KVM: x86: Use active memslots for the per-vCPU MMIO cache

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a memslot generation so that a me…

linux_kernel | Misconfiguration
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99081 — bnxt_en: fix DMA mapping length for padded small packets

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetX…

linux_kernel | Memory Corruption
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99080 — fs: Free any excess xarray nodes in clear_inode()

In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode() For many years we've had a hard to hit leak of xarray nodes. Hugh documented i…

Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99079 — net/mlx5e: Prevent stale XSK buffer release on refill retry

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on refill retry When an XDP redirect to an AF_XDP socket fails because its RX ring is…

linux_kernel | Race Condition
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99078 — net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF_XDP on a striding RQ, mlx5e defers releasing XSK buffer…

linux_kernel | Memory Corruption
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99077 — ipv4: udp: Create exceptions before socket matching

In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are lo…

linux_kernel | Information Disclosure
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99076 — ipv6: udp: Create exceptions before socket matching

In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet Too Big and Redirect Message packets are locall…

linux_kernel | Information Disclosure
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99075 — rust_binder: reschedule node refcount update on thread exit

In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount update on thread exit When a thread exits via BINDER_THREAD_EXIT, its pending work items ar…

linux_kernel | Race Condition
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99074 — ipv4: stop PMTU walk when nexthop group shrinks

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 ("net: ipv4: Cache pmtu for all packet paths if multipath ena…

linux_kernel | Memory Corruption
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99073 — ipv4: stop exception dump when nexthop group shrinks

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de ("inet: switch inet_dump_fib() to RCU protection") allow…

linux_kernel | Race Condition
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
0.0 NA
CVE-2026-99072 — ipv4: stop route notification sizing when nexthop group shrinks

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit 680aea08e78c ("net: ipv4: Emit notification when fib hardw…

linux_kernel | Memory Corruption
Oct 23, 2026 Oct 23, 2026
Oct 23, 2026
Oct 23, 2026
Showing 20 of 16946 Results