PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2026 document archive · 236

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

13,154 documents · Identifier year 2026 · 236 / 264

  1. CVE-2026-22770ImageMagick: ImageMagick: Denial of Service due to improper pointer initialization
  2. CVE-2026-22741Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning
  3. CVE-2026-22737Spring Framework: Spring Framework: Information disclosure via Java scripting engine enabled template views
  4. CVE-2026-22735org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring MVC and WebFlux: Stream corruption vulnerability when using Server-Sent Events
  5. CVE-2026-22702virtualenv: virtualenv: Local attacker can redirect file operations via TOCTOU race condition
  6. CVE-2026-22695libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read
  7. CVE-2026-22693harfbuzz: Null Pointer Dereference in harfbuzz
  8. CVE-2026-22610angular: Angular: Cross-site scripting vulnerability in Template Compiler
  9. CVE-2026-22185OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow
  10. CVE-2026-22184zlib: zlib: Arbitrary code execution via buffer overflow in untgz utility
  11. CVE-2026-22036undici: Undici: Denial of Service via excessive decompression steps
  12. CVE-2026-22030react-router: React Router CSRF in Action/Server Action Request Processing
  13. CVE-2026-22029@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects
  14. CVE-2026-22028preact: Preact: Arbitrary script execution via JSON serialization protection bypass
  15. CVE-2026-22021openjdk: Enhance certificate chain validation (Oracle CPU 2026-04)
  16. CVE-2026-22018openjdk: Enhance Zip file reading (Oracle CPU 2026-04)
  17. CVE-2026-22017mysql: Optimizer unspecified vulnerability (CPU Apr 2026)
  18. CVE-2026-22016openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04)
  19. CVE-2026-22015mysql: Information Schema unspecified vulnerability (CPU Apr 2026)
  20. CVE-2026-22013openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)
  21. CVE-2026-22009mysql: Optimizer unspecified vulnerability (CPU Apr 2026)
  22. CVE-2026-22008openjdk: Improved Arena allocations (Oracle CPU 2026-04)
  23. CVE-2026-22007openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04)
  24. CVE-2026-22005mysql: Optimizer unspecified vulnerability (CPU Apr 2026)
  25. CVE-2026-22004mysql: InnoDB unspecified vulnerability (CPU Apr 2026)
  26. CVE-2026-22002mysql: Optimizer unspecified vulnerability (CPU Apr 2026)
  27. CVE-2026-22001mysql: Information Schema unspecified vulnerability (CPU Apr 2026)
  28. CVE-2026-21998mysql: Optimizer unspecified vulnerability (CPU Apr 2026)
  29. CVE-2026-21968mysql: Optimizer unspecified vulnerability (CPU Jan 2026)
  30. CVE-2026-21965mysql: Pluggable Auth unspecified vulnerability (CPU Jan 2026)
  31. CVE-2026-21964mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026)
  32. CVE-2026-21952mysql: Parser unspecified vulnerability (CPU Jan 2026)
  33. CVE-2026-21950mysql: Optimizer unspecified vulnerability (CPU Jan 2026)
  34. CVE-2026-21949mysql: Optimizer unspecified vulnerability (CPU Jan 2026)
  35. CVE-2026-21948mysql: Optimizer unspecified vulnerability (CPU Jan 2026)
  36. CVE-2026-21945openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)
  37. CVE-2026-21941mysql: Optimizer unspecified vulnerability (CPU Jan 2026)
  38. CVE-2026-21937mysql: DDL unspecified vulnerability (CPU Jan 2026)
  39. CVE-2026-21936mysql: InnoDB unspecified vulnerability (CPU Jan 2026)
  40. CVE-2026-21933openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)
  41. CVE-2026-21932openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)
  42. CVE-2026-21929mysql: Parser unspecified vulnerability (CPU Jan 2026)
  43. CVE-2026-21925openjdk: Improve JMX connections (Oracle CPU 2026-01)
  44. CVE-2026-21895RSA: RSA crate: Denial of Service due to malformed prime in private key generation
  45. CVE-2026-21884react-router: @remix-run/react: React Router SSR XSS in ScrollRestoration
  46. CVE-2026-21863valkey: Valkey: Denial of Service via invalid clusterbus packet
  47. CVE-2026-21728grafana/tempo: Tempo: Denial of Service via large queries
  48. CVE-2026-21727Grafana: Grafana: Cross-tenant data disclosure and deletion via legacy correlation records
  49. CVE-2026-21726Loki: Loki: Information disclosure via path traversal vulnerability
  50. CVE-2026-21725grafana: Grafana: Unauthorized data source deletion via time-of-create-to-time-of-use (TOCTOU) vulnerability
CVE 2026 document archive — Page 236 | PulseLinux