CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the Linux kernel's ext4 filesystem occurs when truncate() grows a file beyond inline data capacity without converting to extent-based storage. This leaves the inline flag set while the file size exceeds inline capacity, causing a BUG_ON() on subsequent write attempts.
In the Linux kernel ext4 filesystem, a vulnerability was found where the jinode pointer is published before full initialization. This can lead to dereferencing an uninitialized i_vfs_inode field, causing a kernel panic during fast commit operations.
A vulnerability has been identified in the Linux kernel in the ext4_ext_correct_indexes function, which does not validate the p_idx pointer before accessing indices. This can lead to out-of-bounds reads if the on-disk extent header is corrupted.
In the Linux kernel, a vulnerability was found in the ext4 filesystem that causes rejection of mounting partitions with bigalloc enabled when s_first_data_block is non-zero. This configuration is unsupported and may lead to filesystem instability.
In the Linux kernel, a use-after-free vulnerability was found in the ext4 filesystem's update_super_work function when racing with unmount. The issue occurs after moving ext4_unregister_sysfs() before flushing s_sb_upd_work, causing sysfs_notify() to access a freed kernfs_node.
A vulnerability has been identified in the Linux kernel related to memory access after a Function Level Reset (FLR). If the second FLR cannot allocate memory for the saved configuration, invalid memory access may occur.
A vulnerability in the Linux kernel has been fixed that caused all remaining subrequests from a read request to be abandoned during retry under certain circumstances. The abandonment process did not always have a valid value for the 'subreq' variable, which could lead to errors.
Incorrect default permissions in the pcvisit service binary on Windows allow a low-privileged local attacker to escalate privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot.
A flaw was found in camel-infinispan involving unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges can send specially crafted data, leading to arbitrary code execution. This allows full system compromise, affecting confidentiality, integrity, and availability.
A flaw was found in InstructLab that allows a local attacker to exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This enables the attacker to create new directories and write files to arbitrary locations on the system.
A heap-buffer-overflow vulnerability was found in binutils when processing a specially crafted XCOFF object file during linking. A local attacker could trick a user into processing this malicious file, leading to arbitrary code execution or denial of service.
Wtyczka HTTP Headers dla WordPressa jest podatna na zdalne wykonanie kodu z powodu zewnętrznej kontroli nazwy pliku lub ścieżki. Problem wynika z niewystarczającej walidacji ścieżki pliku oraz braku sanitizacji wartości opcji 'hh_www_authenticate_user'.
A vulnerability has been identified in the Linux kernel that allowed for out-of-bounds writes when processing compound requests in ksmbd. The issue occurred when the first command in a request consumed most of the response buffer, leading to errors in building the security descriptor.
A vulnerability was found in the Linux kernel's AEAD algorithm implementation via the algorithmic interface (algif_aead). It involves incorrect in-place operation, which may cause data processing errors. The patch reverts to out-of-place operation and simplifies the code.
The RadFilter control in Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421 is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client.
In Telerik UI for AJAX prior to version 2026.1.421, there is an uncontrolled resource consumption vulnerability in RadAsyncUpload that allows file uploads to exceed the configured maximum size due to missing cumulative size enforcement during chunk reassembly.
In Apache HttpClient 5.6, a missing critical step in authentication allows an attacker to force the client to accept SCRAM-SHA-256 authentication without proper mutual authentication verification. The issue is fixed in version 5.6.1.
A vulnerability in Spring Security allows authorization rules to be bypassed when an application uses <sec:intercept-url servlet-path="..."/> to define the servlet path. The servlet path is not included in path matching, leading to authorization bypass.
Podatność w Spring Security, która występuje, gdy aplikacja używa securityMatchers(String) oraz beana PathPatternRequestMatcher.Builder do dodawania prefiksu do ścieżki serwletu. Może to prowadzić do nieprawidłowego dopasowania żądań do łańcucha filtrów, co skutkuje brakiem aktywacji odpowiednich komponentów zabezpieczeń.
The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory.