CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CoreDNS versions prior to 1.14.3 have a vulnerability that allows oversized dns= query parameter values in DoH GET requests, leading to expensive processing before rejecting the request. This issue has been fixed in version 1.14.3.
CoreDNS versions prior to 1.14.3 have a vulnerability that allows a remote client to cause unbounded goroutine and memory growth by opening many QUIC streams and sending only 1 byte per stream. This issue has been fixed in version 1.14.3.
Bitcoin Core through version 28.x has a security issue, the details of which are not disclosed. The earliest affected version is 0.14.
Vulnerability in D-Link DI-8100 router version 16.07.26A1. The tggl_asp function in /tggl.asp is vulnerable to buffer overflow via manipulation of the Name argument. The attack can be carried out remotely.
A vulnerability in OpenStack Ironic before version 35.0.1 allows a user invoking 'molds' during import to request authorization to be sent to a remote endpoint. The forwarded credentials include a time-limited Keystone token (providing access to all OpenStack services Ironic is authorized for) or basic credentials configured for molds storage.
ModSecurity is an open source web application firewall engine that includes the libmodsecurity component. A segmentation fault occurs when a rule using the t:hexDecode transformation inspects a query string parameter containing a single character, potentially leading to worker process crashes and denial of service.
A vulnerability was found in D-Link DI-8100 version 16.07.26A1. The sprintf function in the yyxz.asp file is prone to a stack-based buffer overflow via the ID argument. The attack can be performed remotely and a public exploit exists.
RedisBloom is a probabilistic data structures module for Redis. In versions before 2.8.20, the module does not properly validate serialized values processed through the RESTORE command, which may lead to remote code execution.
RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14, the module does not properly validate serialized values processed through the RESTORE command, which may lead to invalid memory access and potential remote code execution.
A vulnerability in Redis up to version 8.6.3 allows an authenticated attacker to execute remote code via crafted data in the RESTORE command due to improper validation of serialized values.
Redis with Lua scripting enabled contains a use-after-free vulnerability in the master-replica synchronization mechanism. An authenticated attacker can exploit replicas with replica-read-only disabled to achieve remote code execution.
A use-after-free vulnerability in Redis-server versions 7.2.0 through 8.6.3 occurs when an error return from `processCommandAndResetClient` is not handled during blocked command re-execution. An authenticated attacker can exploit this to achieve remote code execution.
A command injection vulnerability was found in a hidden console command of Crestron devices. Passing control characters to the second argument causes the command to be passed to the popen function without proper sanitization. Attackers with authenticated SSH console access can execute underlying OS commands.
In Eclipse BaSyx Java Server SDK prior to version 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI. An unauthenticated attacker can force the BaSyx server to execute blind HTTP POST requests to arbitrary internal or external targets, bypassing network segmentation.
W jądrze systemu Linux zidentyfikowano podatność związaną z operacją BPF_END, która nieprawidłowo nie resetuje identyfikatora rejestru. To może prowadzić do błędnych wniosków o wartościach rejestrów, co stwarza ryzyko dostępu do pamięci poza dozwolonym zakresem.
W jądrze systemu Linux zidentyfikowano podatność, która została naprawiona. Problem dotyczy funkcji xfs_attri_recover_work, gdzie po błędzie w iget nie ustawiano wskaźnika @ip na poprawny adres, co prowadziło do dereferencji wiszącego wskaźnika.
A vulnerability in the Phoenix framework allows for a denial of service attack through unbounded processing of NDJSON request bodies in long-poll transport. An attacker can send a body consisting entirely of newline bytes, leading to BEAM memory exhaustion and node crashes.
There is an OS command injection vulnerability in the traceroute diagnostic handler in the ALTICE LABS / SFR France GR140DG Fibre Router. Unsanitized user input is inserted into a system() call, allowing authenticated remote attackers to execute arbitrary commands as root.
There is an OS command injection vulnerability in the ping diagnostic handler in ALTICE LABS / SFR France GR140DG Fibre Router. Due to improper handling of user input in the system() call, authenticated remote attackers can execute arbitrary commands.
An issue was discovered in Samsung Mobile Processors, including Exynos 980, 990, 850, 2100, and modems 5123 and 5300, related to incorrect handling of 5G NR NAS registration accept messages, leading to Denial of Service.