CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 08:35 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-57113 New | PR PraisonAI MervinPraison | 8.1 | Oct 23 | PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion |
| CVE-2026-98924 New | LI Linux Linux | – | Oct 23 | fs: avoid repeated scans in evict_inodes() |
| CVE-2026-98923 New | LI Linux Linux | – | Oct 23 | arm64: io: Reject non-user protection in ioremap_prot() |
| CVE-2026-98922 New | LI Linux Linux | – | Oct 23 | net: emac: move setting of netops to fix crash |
| CVE-2026-98921 New | LI Linux Linux | – | Oct 23 | ovl: fix UAF in ovl_do_mkdir() debug print |
| CVE-2026-98920 New | LI Linux Linux | – | Oct 23 | netfs: Fix missing alloc tagging of direct mempool allocations |
| CVE-2026-98919 New | LI Linux Linux | – | Oct 23 | drm/xe: harden adjust_idledly() against divide-by-zero and overflow |
| CVE-2026-98918 New | LI Linux Linux | – | Oct 23 | mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() |
| CVE-2026-98917 New | LI Linux Linux | – | Oct 23 | parisc: Increase kernel stack size to 32kb |
| CVE-2026-56840 New | PR PraisonAI MervinPraison | 8.8 | Oct 23 | PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools |
| CVE-2026-56838 New | PR PraisonAI MervinPraison | 7.8 | Oct 23 | PraisonAI recipe.run_stream skips dangerous-tool policy enforcement |
| CVE-2026-56837 New | PR PraisonAI MervinPraison | 8.6 | Oct 23 | PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing |
| CVE-2026-56836 New | PR PraisonAI MervinPraison | 8.2 | Oct 23 | PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard |
| CVE-2026-56835 New | PR PraisonAI MervinPraison | 8.3 | Oct 23 | PraisonAI Slack app_mention bypasses configured user/channel authorization |
| CVE-2026-56834 New | PR PraisonAI MervinPraison | 7.5 | Oct 23 | PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage |
| CVE-2026-56833 New | PR PraisonAI MervinPraison | 7.5 | Oct 23 | PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal |
| CVE-2026-56832 New | PR PraisonAI MervinPraison | 8.8 | Oct 23 | PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals |
| CVE-2026-98916 New | LI Linux Linux | – | Oct 23 | wifi: nl80211: check link is beaconing for color change |
| CVE-2026-98915 New | LI Linux Linux | – | Oct 23 | media: video-i2c: use vb2_video_unregister_device on driver removal |
| CVE-2026-98914 New | LI Linux Linux | – | Oct 23 | drm/amdgpu: cap ATOM command table nesting depth |
| CVE-2026-98913 New | LI Linux Linux | – | Oct 23 | net: thunderx: fix PTP device ref leak in nicvf_probe() |
| CVE-2026-98912 New | LI Linux Linux | – | Oct 23 | ALSA: seq: oss: Reject reads that cannot fit the next event |
| CVE-2026-98911 New | LI Linux Linux | 7.5 | Oct 23 | dpaa2-switch: fix the error path in dpaa2_switch_rx() |
| CVE-2026-98910 New | LI Linux Linux | – | Oct 23 | drm/amdkfd: Unwind debug trap enable on copy_to_user failure |
| CVE-2026-98909 New | LI Linux Linux | – | Oct 23 | net: cpsw_new: unregister devlink on port registration failure |
| CVE-2026-98908 New | LI Linux Linux | – | Oct 23 | net: microchip: sparx5: clean up PSFP resources on flower setup failure |
| CVE-2026-98907 New | LI Linux Linux | – | Oct 23 | btrfs: protect sb_write_pointer() with invalidate lock |
| CVE-2026-98906 New | LI Linux Linux | – | Oct 23 | net: lan966x: restore RX state on reload failure |
| CVE-2026-98905 New | LI Linux Linux | – | Oct 23 | drm/amdkfd: Properly acquire queue buffers in CRIU restore |
| CVE-2026-98904 New | LI Linux Linux | – | Oct 23 | mailbox: imx: Use devm_pm_runtime_enable() |
| CVE-2026-98903 New | LI Linux Linux | – | Oct 23 | mailbox: imx: Add a channel shutdown field |
| CVE-2026-98902 New | LI Linux Linux | – | Oct 23 | md/raid5: let stripe batch bm_seq comparison wrap-safe |
| CVE-2026-98901 New | LI Linux Linux | – | Oct 23 | ksmbd: fix lease break and ack state handling |
| CVE-2026-98900 New | LI Linux Linux | – | Oct 23 | xen/gntalloc: validate grant count before allocation |
| CVE-2026-98899 New | LI Linux Linux | 7.8 | Oct 23 | netfilter: ipset: mark the rcu locked areas properly |
| CVE-2026-98898 New | LI Linux Linux | – | Oct 23 | drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized |
| CVE-2026-98897 New | LI Linux Linux | – | Oct 23 | ksmbd: don't hold ci->m_lock while waiting for a lease break ack |
| CVE-2026-112904 New | VV Vvveb givanz | 8.7 | Oct 23 | Vvveb: Path Traversal in nextRestore() and nextBackup() |
| CVE-2026-98896 New | LI Linux Linux | – | Oct 23 | thunderbolt: Keep the domain reference while processing hotplug |
| CVE-2026-98895 New | LI Linux Linux | 7.0 | Oct 23 | net/mlx5: HWS, Handle destroying table that has a miss table |
| CVE-2026-98894 New | LI Linux Linux | – | Oct 23 | drm/amd/ras: reset CPER ring on corrupt entry size |
| CVE-2026-98893 New | LI Linux Linux | – | Oct 23 | firmware: arm_scmi: Validate SENSOR_UPDATE payload size |
| CVE-2026-98892 New | LI Linux Linux | – | Oct 23 | firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size |
| CVE-2026-98891 New | LI Linux Linux | – | Oct 23 | wifi: mac80211: validate deauth frame length before reason access |
| CVE-2026-98890 New | LI Linux Linux | – | Oct 23 | wifi: libertas: reject short monitor TX frames |
| CVE-2026-98889 New | LI Linux Linux | 7.8 | Oct 23 | wifi: iwlwifi: mvm: fix sched scan IE sizing |
| CVE-2026-98888 New | LI Linux Linux | – | Oct 23 | arm64: kprobes: Allow reentering kprobes while single-stepping |
| CVE-2026-98887 New | LI Linux Linux | – | Oct 23 | wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO |
| CVE-2026-98886 New | LI Linux Linux | – | Oct 23 | drm/gma500: return errors from Oaktrail HDMI I2C reads |
| CVE-2026-98885 New | LI Linux Linux | – | Oct 23 | ima: return error early if file xattr cannot be changed |