CVE 2026 document archive · 16

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 16 / 264

751. CVE-2026-104721ch.qos.logback/logback-classic: logback-classic: Arbitrary file write via path traversal in MDC discriminator→
752. CVE-2026-104715cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass→
753. CVE-2026-104712org.apache.struts/struts2-core: Apache Struts: Denial of Service via resource amplification in tag library→
754. CVE-2026-104711org.apache.struts/struts2-core: Apache Struts: Arbitrary code execution via expression injection in legacy RESTful action mapper→
755. CVE-2026-104635protobuf: protobuf: Denial of Service via deeply nested JSON input→
756. CVE-2026-104150http-server: http-server: Denial of Service via inefficient regular expression in slug route matcher→
757. CVE-2026-104048sssd: sssd: Authorization bypass via cross-domain username collision in HBAC evaluation→
758. CVE-2026-104047sssd: sssd: Information disclosure via query injection in Entra ID lookups→
759. CVE-2026-104046sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests→
760. CVE-2026-104045sssd: sssd: Denial of Service via race condition in autofs responder→
761. CVE-2026-104044sssd: sssd: Denial of Service via crafted passkey Kerberos authentication request→
762. CVE-2026-104043sssd: sssd: Denial of Service via undersized packet parsing in NSS responder→
763. CVE-2026-104042sssd: sssd: Denial of Service via out-of-bounds read in PAM responder→
764. CVE-2026-104041sssd: sssd: Denial of Service via unbounded negative cache growth→
765. CVE-2026-104040sssd: sssd: Information disclosure via OData injection in Entra ID lookups→
766. CVE-2026-104039sssd: sssd: Denial of service via stale connection state reuse in PAM GSSAPI responder→
767. CVE-2026-104038sssd: sssd: Denial of Service via missing SID extension in certificate mapping→
768. CVE-2026-104037sssd: sssd: Denial of Service via packet length underflow in autofs responder→
769. CVE-2026-104036sssd: sssd: Denial of service via out-of-bounds write in NFS idmap plugin→
770. CVE-2026-104035sssd: sssd: Denial of Service via memory exhaustion in KCM responder→
771. CVE-2026-104034sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewal→
772. CVE-2026-104033sssd: sssd: Access control bypass via improper LDAP shadow expiration check→
773. CVE-2026-104032sssd: sssd: Denial of Service via unprivileged autofs cache invalidation→
774. CVE-2026-104031sssd: SSSD: Denial of Service via memory exhaustion in autofs responder→
775. CVE-2026-104030sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing→
776. CVE-2026-104029sssd: sssd: Denial of Service via out-of-bounds read in autofs responder→
777. CVE-2026-103963glib-networking: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service→
778. CVE-2026-103658aspell: aspell: Arbitrary code execution via crafted dictionary file→
779. CVE-2026-103641gegl: gegl04: gegl: out-of-bounds read in the Radiance HDR uncompressed scanline decoder→
780. CVE-2026-103629chromium-browser: skia: Integer overflow in Skia→
781. CVE-2026-103531opensc: opensc: Arbitrary code execution via stack-based buffer overflow in card-setcos→
782. CVE-2026-103506grafana: SSO secrets readable by low-privileged users when an experimental feature is enabled→
783. CVE-2026-103500thunderbird: thunderbird: Heap buffer overflow via opening large emails→
784. CVE-2026-103484pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build→
785. CVE-2026-103399libsoup: SoupServer: HTTP/1 request smuggling via undrained Expect: 100-continue body→
786. CVE-2026-103263tornado: Tornado: Information disclosure via symlink path traversal in StaticFileHandler→
787. CVE-2026-103262tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient→
788. CVE-2026-103261tornado: tornado: Denial of Service (DoS) via unbounded query string parsing→
789. CVE-2026-103242rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tag→
790. CVE-2026-103226ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data→
791. CVE-2026-103111pcre2: pcre2: Out-of-bounds write via crafted regular expression→
792. CVE-2026-103061gleam: gleam: Arbitrary directory deletion via path traversal in package metadata→
793. CVE-2026-103004next: Next.js: Information disclosure via cache key omission in nested cache handlers→
794. CVE-2026-103001pyjwt: pyjwt: Token validation bypass via options dictionary mutation→
795. CVE-2026-102990basic-ftp: basic-ftp: Denial of Service via crafted Unix directory listings→
796. CVE-2026-102938virtualenv: virtualenv: Arbitrary code execution via configuration injection in prompt values→
797. CVE-2026-102937virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation script→
798. CVE-2026-102930virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels→
799. CVE-2026-102925virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scripts→
800. CVE-2026-102870dotnet10.0: dotnet11.0: ASP.NET Core Remote Code Execution Vulnerability→