| CVE-2026-94290 | CRITICAL | 9.1 | SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fle… | 2026-11-02 |
| CVE-2026-99217 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
fork: release the files of a failed fork … | 2026-11-02 |
| CVE-2026-99218 | HIGH | 7.0 | In the Linux kernel, the following vulnerability has been resolved:
coredump: hold RCU while releasing parked… | 2026-11-02 |
| CVE-2026-99219 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ftrace: Initialize modname and offset in … | 2026-11-02 |
| CVE-2026-99220 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
asymmetric_keys: reject trust keys withou… | 2026-11-02 |
| CVE-2026-99221 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
keys/trusted_keys: return immediately aft… | 2026-11-02 |
| CVE-2026-99222 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
keys: Protect the read method check again… | 2026-11-02 |
| CVE-2026-99223 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
keys: make keyring indexes independent of… | 2026-11-02 |
| CVE-2026-99224 | HIGH | 7.0 | In the Linux kernel, the following vulnerability has been resolved:
keys: Protect the type name while describ… | 2026-11-02 |
| CVE-2026-99225 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
keys: Check the authorization payload in … | 2026-11-02 |
| CVE-2026-99226 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
keys: Avoid the owner account dereference… | 2026-11-02 |
| CVE-2026-99227 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
io_uring/waitid: prevent cancel reference… | 2026-11-02 |
| CVE-2026-99228 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/io-wq: don't lose the signal tha… | 2026-11-02 |
| CVE-2026-99229 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/wait: don't spin on a stuck over… | 2026-11-02 |
| CVE-2026-99230 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
io_uring/cmd: don't leave list poison in … | 2026-11-02 |
| CVE-2026-99231 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
io_uring/waitid: own the request before c… | 2026-11-02 |
| CVE-2026-99232 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
tracing/syscalls: Use copy_from_user for … | 2026-11-02 |
| CVE-2026-99233 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
tracing/histograms: Verify event_call ide… | 2026-11-02 |
| CVE-2026-99234 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
tracing: Unregister field variable histog… | 2026-11-02 |
| CVE-2026-99235 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
tracing: Save the event file instead of t… | 2026-11-02 |
| CVE-2026-99236 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
tracing: Reject incomplete event filter e… | 2026-11-02 |
| CVE-2026-99237 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
tracing: Hold trace_types_lock when reset… | 2026-11-02 |
| CVE-2026-99238 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
tracing: Hold trace_types_lock when updat… | 2026-11-02 |
| CVE-2026-99239 | HIGH | 7.8 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: refuse __l2cap_chan_add… | 2026-11-02 |
| CVE-2026-99240 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
mm/damon/core: error damos_commit_quota_g… | 2026-11-02 |
| CVE-2026-99241 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ntfs: take invalidate_lock in ntfs_filema… | 2026-11-02 |
| CVE-2026-99242 | NA | N/A | In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix race between fallocate and mmap… | 2026-11-02 |
| CVE-2026-105769 | CRITICAL | 9.3 | kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an a… | 2026-11-02 |
| CVE-2026-106803 | NA | N/A | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When pro… | 2026-11-02 |
| CVE-2026-106804 | HIGH | 7.5 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_reg… | 2026-11-02 |
| CVE-2026-106805 | NA | N/A | A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When … | 2026-11-02 |
| CVE-2026-106807 | NA | N/A | A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFC… | 2026-11-02 |
| CVE-2026-119301 | HIGH | 7.9 | Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component… | 2026-11-02 |
| CVE-2026-120596 | HIGH | 7.5 | A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP … | 2026-11-02 |
| CVE-2026-65059 | NA | N/A | Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses.
Fu… | 2026-11-02 |
| CVE-2026-88810 | HIGH | 7.2 | A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNames… | 2026-11-02 |
| CVE-2026-88811 | CRITICAL | 9.1 | Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leake… | 2026-11-02 |
| CVE-2024-12139 | MEDIUM | 4.3 | The error handling implementation fails to properly sanitize or validate user-supplied input within URL parame… | 2026-11-02 |
| CVE-2026-106806 | NA | N/A | A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previ… | 2026-11-02 |
| CVE-2026-106808 | HIGH | 7.5 | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_… | 2026-11-02 |
| CVE-2026-111048 | NA | N/A | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/suppor… | 2026-11-02 |
| CVE-2026-117067 | NA | N/A | An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.… | 2026-11-02 |
| CVE-2026-117068 | NA | N/A | An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unau… | 2026-11-02 |
| CVE-2026-119085 | HIGH | 8.8 | Improper neutralization of special elements used in a template engine in the publishing component of Amazon Vi… | 2026-11-02 |
| CVE-2026-120416 | MEDIUM | 5.3 | A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function A… | 2026-11-02 |
| CVE-2026-120627 | NA | N/A | The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler,… | 2026-11-02 |
| CVE-2026-120630 | NA | N/A | CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious cont… | 2026-11-02 |
| CVE-2026-105603 | NA | N/A | Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Jo… | 2026-11-02 |
| CVE-2026-105604 | NA | N/A | Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla e… | 2026-11-02 |
| CVE-2026-105605 | NA | N/A | Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds <… | 2026-11-02 |