Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-74594 — sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() psi_schedule_rtpoll_work() is called locklessly from the scheduler hotpath…

linux_kernel | Race Condition
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74593 — sched_ext: Take cgroup_lock() first in scx_cgroup_lock()

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_lock() scx_cgroup_lock() write-locks scx_cgroup_ops_rwsem and then takes cgroup…

linux_kernel | Race Condition
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74592 — ima: Instantiate file_truncate and path_truncate hooks

In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and path_truncate LSM hooks to reset the act…

Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74591 — mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index before retrying In __filemap_add_folio()'s split-a-conflict loop, xas_set_order()…

linux_kernel | Race Condition
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74590 — fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory spa…

linux_kernel | Race Condition
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74589 — bpf, sockmap: Fix sk_redir use-after-free in send verdict

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send verdict sk_psock_msg_verdict() takes a socket reference for psock->sk_redir. tc…

linux_kernel | Memory Corruption
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74588 — sctp: keep chunk->transport in step with the list it is queued on

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list it is queued on __sctp_outq_flush_rtx() moves a gap-acked chunk onto another tr…

linux_kernel | Memory Corruption
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74587 — sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF…

linux_kernel | Memory Corruption
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74586 — sctp: clear new_transport when removing a peer

In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly added peer transport in asoc->new_trans…

linux_kernel | Memory Corruption
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
0.0 NA
CVE-2026-74585 — thunderbolt: Bound the DROM dual link port number before indexing sw->ports

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw->ports tb_drom_parse_entry_port() validates the device-suppl…

linux_kernel | Memory Corruption
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
9.8 CRITICAL
CVE-2026-4703 — WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission

The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input fro…

ws_form | Remote | Injection
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
9.5 CRITICAL
CVE-2026-77992 — Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabr…

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.

Remote | Authorization
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
8.6 HIGH
CVE-2026-77027 — Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.

Remote | Cross-Site Scripting
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
6.9 MEDIUM
CVE-2026-76609 — Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik <…

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.

Remote | Authorization
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
6.9 MEDIUM
CVE-2026-76608 — Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email add…

Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks.

Remote | Authorization
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
10.0 CRITICAL
CVE-2026-76607 — Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???.

Remote | Authorization
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
10.0 CRITICAL
CVE-2026-76606 — Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.

Remote | Path Traversal
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
10.0 CRITICAL
CVE-2026-76605 — Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7…

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.

Remote | Injection
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
10.0 CRITICAL
CVE-2026-76604 — Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form elem…

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.3 - The PHP form element is vulnerable to the execution of user provided codes.

Remote | Injection
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
6.9 MEDIUM
CVE-2026-76603 — Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in F…

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.3 - The inineedit form controller does not perform any access checks, disclosing items to unauthor…

Remote | Authorization
Aug 22, 2026 Aug 22, 2026
Aug 22, 2026
Aug 22, 2026
Showing 20 of 11641 Results