NetApp Black Box — ONTAP knowledge base

Home / Security / CVE index / 2026

2026 NetApp CVEs (page 5)

Showing 95 CVEs with a 2026 identifier — page 5 of 5. Sorted by CVE id.

Always verify. NetApp's advisory is authoritative for affected versions and fixes; NVD carries the CVSS record.
Showing 95 of 95
CVEPublishedSeverityCVSSSummary / Sources
CVE-2026-784042026-10-12MEDIUM6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility. NVD ↗ · NTAP-20261014-0010
CVE-2026-784372026-09-23HIGH7.3Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail. Thi NVD ↗ · NTAP-20261002-0009
CVE-2026-78842026-09-14MEDIUM5.4IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malic NVD ↗ · NTAP-20260917-0001
CVE-2026-796772026-09-23HIGH7.5Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lo NVD ↗ · NTAP-20261002-0006
CVE-2026-797682026-10-01MEDIUM5.3Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir direc NVD ↗ · NTAP-20261007-0018
CVE-2026-802742026-09-16HIGH7.5If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proo NVD ↗ · NTAP-20260930-0007
CVE-2026-803532026-10-20——Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauth NVD ↗ · NTAP-20261028-0009
CVE-2026-815632026-09-16HIGH7.5A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resou NVD ↗ · NTAP-20260930-0008
CVE-2026-817362026-09-16HIGH7.5If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CP NVD ↗ · NTAP-20260930-0009
CVE-2026-82862026-07-03HIGH8.1A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configurati NVD ↗ · NTAP-20261016-0008
CVE-2026-833742026-10-20MEDIUM5.9Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versio NVD ↗ · NTAP-20261030-0021
CVE-2026-833762026-10-20LOW3.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-833782026-10-20MEDIUM4.8Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit NVD ↗ · NTAP-20261030-0024
CVE-2026-833802026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-833812026-10-20MEDIUM4.8Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12 NVD ↗ · NTAP-20261030-0021
CVE-2026-833872026-10-20MEDIUM5.9Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-833952026-10-20MEDIUM6.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported vers NVD ↗ · NTAP-20261030-0021
CVE-2026-834002026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-844452026-09-14HIGH8.7gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go NVD ↗ · NTAP-20260917-0012
CVE-2026-847822026-09-29HIGH8.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message c NVD ↗ · NTAP-20261009-0020 · NTAP-20261006-0002
CVE-2026-847832026-09-29HIGH7.5Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is NVD ↗ · NTAP-20261006-0006
CVE-2026-847842026-09-29HIGH7.5Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the rem NVD ↗ · NTAP-20261006-0004
CVE-2026-857462026-10-16CRITICAL9.9MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyo NVD ↗ · NTAP-20261028-0001
CVE-2026-860872026-09-10MEDIUM4.3IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the s NVD ↗ · NTAP-20260917-0011
CVE-2026-860932026-09-10HIGH7.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute ar NVD ↗ · NTAP-20260917-0007
CVE-2026-862482026-09-23CRITICAL9.8CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache Tom NVD ↗ · NTAP-20261002-0001
CVE-2026-863502026-09-23CRITICAL9.1Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-412 NVD ↗ · NTAP-20261002-0003
CVE-2026-870222026-09-23HIGH7.5Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This iss NVD ↗ · NTAP-20261002-0005
CVE-2026-872552026-10-20LOW3.7Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerabil NVD ↗ · NTAP-20261028-0017
CVE-2026-872902026-10-20MEDIUM5.9Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-872912026-10-20MEDIUM5.3Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable NVD ↗ · NTAP-20261030-0024
CVE-2026-872922026-10-20LOW3.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported vers NVD ↗ · NTAP-20261030-0021
CVE-2026-872932026-10-20MEDIUM5.4Vulnerability in Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Editi NVD ↗ · NTAP-20261030-0019
CVE-2026-872942026-10-20MEDIUM6.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versio NVD ↗ · NTAP-20261030-0021
CVE-2026-873672026-10-20LOW3.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-879582026-09-10HIGH8.1IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by NVD ↗ · NTAP-20260917-0004
CVE-2026-880412026-10-20——Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects A NVD ↗ · NTAP-20261028-0008
CVE-2026-89242026-07-03CRITICAL9.1A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check. This enables an attacker-c NVD ↗ · NTAP-20260731-0006
CVE-2026-89252026-07-03CRITICAL9.8The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free() NVD ↗ · NTAP-20260731-0003
CVE-2026-89262026-07-03CRITICAL9.1When asking curl to use a `.netrc` file to find credentials and at the same time specifying a URL with a username (without a password), like `https://user@examp NVD ↗ · NTAP-20260731-0007
CVE-2026-89272026-07-03CRITICAL9.1When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state NVD ↗ · NTAP-20260731-0008
CVE-2026-894222026-09-22CRITICAL9.3Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended se NVD ↗ · NTAP-20261023-0012
CVE-2026-896622026-09-11CRITICAL9.8In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown __destroy_client() releases a NVD ↗ · NTAP-20261002-0013
CVE-2026-896692026-09-11CRITICAL9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4_copy_notify() finished initi NVD ↗ · NTAP-20261002-0014
CVE-2026-896742026-09-11CRITICAL9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget The XDR buffer size calculatio NVD ↗ · NTAP-20261002-0015
CVE-2026-897122026-09-11CRITICAL9.8In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock nfsd4_ssc_expire_umount() NVD ↗ · NTAP-20261002-0016
CVE-2026-90762026-06-09HIGH7.5Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher c NVD ↗ · NTAP-20260617-0008
CVE-2026-90792026-07-03CRITICAL9.8libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for su NVD ↗ · NTAP-20260731-0004
CVE-2026-913322026-10-20MEDIUM5.3Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 2 NVD ↗ · NTAP-20261030-0025
CVE-2026-913332026-10-20LOW3.7Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit NVD ↗ · NTAP-20261030-0024
CVE-2026-913342026-10-20LOW3.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported version NVD ↗ · NTAP-20261030-0021
CVE-2026-913352026-10-20LOW2.6Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions th NVD ↗ · NTAP-20261030-0021
CVE-2026-913732026-10-20MEDIUM5.3Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, NVD ↗ · NTAP-20261030-0023
CVE-2026-913742026-10-20MEDIUM4.8Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported NVD ↗ · NTAP-20261030-0021
CVE-2026-913752026-10-20MEDIUM4.7Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25 NVD ↗ · NTAP-20261030-0025
CVE-2026-913792026-10-20MEDIUM4.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools). Supported versi NVD ↗ · NTAP-20261030-0025
CVE-2026-913802026-10-20MEDIUM4.0Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported version NVD ↗ · NTAP-20261030-0021
CVE-2026-913812026-10-20LOW3.7Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracl NVD ↗ · NTAP-20261030-0019
CVE-2026-913822026-10-20MEDIUM6.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions tha NVD ↗ · NTAP-20261028-0014
CVE-2026-913852026-10-20MEDIUM5.4Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are NVD ↗ · NTAP-20261030-0020
CVE-2026-913942026-10-20MEDIUM5.9Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle J NVD ↗ · NTAP-20261028-0016
CVE-2026-913952026-10-20MEDIUM6.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported version NVD ↗ · NTAP-20261030-0022
CVE-2026-913962026-10-20MEDIUM6.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported version NVD ↗ · NTAP-20261030-0022
CVE-2026-913972026-10-20LOW3.6Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported NVD ↗ · NTAP-20261030-0021
CVE-2026-913982026-10-20MEDIUM6.8Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported vers NVD ↗ · NTAP-20261030-0021
CVE-2026-914002026-10-20LOW3.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions NVD ↗ · NTAP-20261030-0021
CVE-2026-914022026-10-20LOW3.1Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are NVD ↗ · NTAP-20261030-0020
CVE-2026-914032026-10-21CRITICAL9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions t NVD ↗ · NTAP-20261028-0013
CVE-2026-914092026-10-20LOW3.7Vulnerability in Oracle Java SE (component: Networking). The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability allows NVD ↗ · NTAP-20261028-0018
CVE-2026-914102026-10-20MEDIUM5.3Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.1 NVD ↗ · NTAP-20261030-0023
CVE-2026-914112026-10-20MEDIUM6.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions t NVD ↗ · NTAP-20261030-0022
CVE-2026-914152026-10-20HIGH7.0Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions tha NVD ↗ · NTAP-20261030-0021
CVE-2026-914172026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Or NVD ↗ · NTAP-20261030-0019
CVE-2026-914182026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Su NVD ↗ · NTAP-20261030-0021
CVE-2026-914512026-10-20MEDIUM5.3Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0. NVD ↗ · NTAP-20261030-0023
CVE-2026-914522026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported vers NVD ↗ · NTAP-20261030-0021
CVE-2026-914532026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). S NVD ↗ · NTAP-20261030-0021
CVE-2026-914612026-10-20LOW3.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-914622026-10-20MEDIUM5.9Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-914632026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-914642026-10-20MEDIUM5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions t NVD ↗ · NTAP-20261030-0021
CVE-2026-914842026-10-20HIGH7.5Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vu NVD ↗ · NTAP-20261030-0019
CVE-2026-914872026-10-20MEDIUM4.8Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25. NVD ↗ · NTAP-20261030-0025
CVE-2026-922622026-10-16CRITICAL9.9MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass pre NVD ↗ · NTAP-20261028-0002
CVE-2026-923922026-10-14HIGH8.1During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free NVD ↗ · NTAP-20261016-0009
CVE-2026-92562026-05-22HIGH8.1NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pat NVD ↗ · NTAP-20260605-0012
CVE-2026-934462026-10-20——Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 thro NVD ↗ · NTAP-20261028-0007
CVE-2026-935462026-10-01HIGH8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persis NVD ↗ · NTAP-20261007-0004
CVE-2026-95472026-07-03HIGH7.4When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an unt NVD ↗ · NTAP-20261030-0001 · NTAP-20261016-0010
CVE-2026-973132026-10-21HIGH7.5A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulti NVD ↗ · NTAP-20261030-0018
CVE-2026-97622026-07-17HIGH7.8IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. NVD ↗ · NTAP-20260717-0003
CVE-2026-976312026-10-22CRITICAL9.5EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remot NVD ↗ · NTAP-20261030-0004
CVE-2026-98282026-05-28LOW2.9Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection a NVD ↗ · NTAP-20260731-0012
CVE-2026-984322026-10-15CRITICAL9.8In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers NVD ↗ · NTAP-20261102-0001
CVE-2026-999992026-10-15CRITICAL9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metad NVD ↗ · NTAP-20261021-0001

Years: 2026 · 2025 · 2024 · 2023 · 2022 · 2021 · 2020 · 2019 · 2018 · 2017 · 2016 · 2015 · 2014 · 2013 · 2012 · 2011 · 2010 · 2009 · 2008 · 2007 · 2006 · 2005 · 2004 · 2003 · 2002 · 1999

← CVE index · Security hub