Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

111 advisories match Clear all Export 25 shown as CSV

Expand	Severity	Score	Advisory	Title	Source	Published
	High	7.1	CVE-2026-115486	A flaw was found in the iscsiuio component of open-iscsi Red Hat, open-iscsiRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, open-iscsi iscsiuio	NVD	Oct 23 01:16 UTC
CVE-2026-115486A flaw was found in the iscsiuio component of open-iscsi Executive summary A flaw in the iscsiuio component of open-iscsi lets an attacker on the same network segment send crafted IPv6 Neighbor Discovery packets that poison the ARP table and redirect traffic within the iSCSI storage network. The advisory rates it Moderate, with a preliminary CVSS v3.1 base score of 7.1 from Red Hat and cve.org, and says systems without iSCSI offload hardware are not affected. The advisory does not state a fixed version or a vendor release date, but it recommends keeping iscsiuio-managed interfaces on trusted Layer 2 segments and filtering ICMPv6 Neighbor Advertisement and Neighbor Solicitation messages from untrusted sources where operationally acceptable. Technical summary The flaw is classified as CWE-125 (out-of-bounds read). The IPv6 Neighbor Discovery handler reads link-layer address options at a fixed offset without checking that the packet contains them, and it updates the ARP table unconditionally with addresses taken from packet headers. Exploitation requires an attacker with adjacent-network access to a Layer 2 segment where iscsiuio processes IPv6 NDP traffic on a hardware iSCSI offload NIC; the iscsiuio daemon is socket-activated and runs only when that hardware is present and configured. The CVSS v3.1 vector is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L with a base score of 7.1. Affected and fixed version numbers are not stated, no patch or fixed release is named, and detection guidance is not stated beyond the mitigation advice to filter ICMPv6 types 135 and 136 from untrusted sources. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115486 Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityLow How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L Affects Red Hat open-iscsi Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 open-iscsi iscsiuio NIST National Vulnerability DatabasePublished Oct 23, 2026 01:16 UTC Read the advisory
	Medium	6.3	CVE-2026-115485	A flaw was found in the iscsiuio component of open-iscsi Red Hat, open-iscsiRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, open-iscsi iscsiuio	NVD	Oct 23 01:16 UTC
CVE-2026-115485A flaw was found in the iscsiuio component of open-iscsi Executive summary A flaw in the iscsiuio component of open-iscsi can let a nearby attacker on the same network segment crash a daemon or corrupt an iSCSI initiator name by sending a crafted DHCPv6 message. The advisory rates it Moderate, with a CVSS v3.1 base score of 6.3 from Red Hat and cve.org, and says systems without iSCSI offload hardware are not affected. The advisory's mitigation guidance is to disable DHCPv6 handling for the affected interface if it is not needed, or otherwise restrict exposure to trusted adjacent networks and filter forged DHCPv6 server traffic; it does not state a fixed version. Technical summary The vulnerability is an out-of-bounds read (CWE-125) in the DHCPv6 vendor option parser of iscsiuio, where strlen() is called on network data without a guaranteed NUL terminator, causing a read into heap memory and a 1-byte heap overwrite. Exploitation requires an attacker on the same Layer 2 segment who sends a crafted DHCPv6 Advertise message during the solicit phase, on a system with a hardware iSCSI offload NIC where iscsiuio is active. The CVSS v3.1 vector is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, scored 6.3 by Red Hat and cve.org, with NVD showing N/A. Affected and fixed version numbers are not stated, and no patch or vendor fix release is named. Mitigations are disabling DHCPv6 handling on the interface or using firewall rules against forged DHCPv6 server traffic; detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115485 Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affects Red Hat open-iscsi Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 open-iscsi iscsiuio NIST National Vulnerability DatabasePublished Oct 23, 2026 01:16 UTC Read the advisory
	High	7.6	CVE-2026-115484	A flaw was found in the iscsiuio component of open-iscsi Red Hat, open-iscsiRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, open-iscsi iscsiuio	NVD	Oct 23 01:16 UTC
CVE-2026-115484A flaw was found in the iscsiuio component of open-iscsi Executive summary A flaw in the iscsiuio component of open-iscsi lets an attacker on the same local network segment send a crafted DHCP response that can crash the daemon or corrupt its network configuration. The advisory rates it Moderate and says systems without iSCSI offload hardware are not affected. The advisory recommends restricting untrusted systems from the Layer 2 broadcast domain, using static IP addressing where DHCP is not required, and limiting DHCP/BOOTP traffic to trusted infrastructure. Technical summary The flaw is an out-of-bounds read (CWE-125) in the DHCPv4 option parser of iscsiuio, which miscalculates the length of options data and reads past a heap buffer. Exploitation requires adjacent-network access to a Layer 2 segment where iscsiuio processes IPv4 DHCP traffic on a hardware iSCSI offload NIC (Broadcom bnx2/bnx2x or QLogic qedi), and no privileges or user interaction are required. The advisory gives CVSS v3.1 base score 7.6 with vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H, and notes that NVD shows no score of its own. Affected and fixed package versions are not stated, and no fixed version is given. Mitigations are network isolation, static addressing, and DHCP/BOOTP filtering; the advisory gives no specific detection guidance. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115484 Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affects Red Hat open-iscsi Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 open-iscsi iscsiuio NIST National Vulnerability DatabasePublished Oct 23, 2026 01:16 UTC Read the advisory
	Medium	5.4	CVE-2026-115221	A flaw was found in FreeIPA Red Hat, FreeIPARed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, FreeIPA	NVD	Oct 22 22:18 UTC
CVE-2026-115221A flaw was found in FreeIPA Executive summary A flaw in FreeIPA, an identity management product, lets an authenticated enrolled host retrieve and revoke digital certificates belonging to other users or services. The advisory rates it as medium severity with a CVSS v3.1 base score of 5.4 from Red Hat and cve.org, and NVD shows N/A for that score. The advisory does not state a fix or vendor recommendation beyond the general options described in its FAQ. Technical summary This is an incorrect authorization flaw (CWE-863) in FreeIPA, where certificate ownership is verified only by matching the host name to the certificate subject Common Name without checking the directory service. Exploitation requires network access and low-privileged authenticated access as an enrolled host, with no user interaction; the CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L. Affected and fixed versions are not stated in the advisory text, and no workaround or detection guidance is given. The advisory also does not state whether any exploitation in the wild has occurred. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115221 Impact if exploited ConfidentialityNone IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affects Red Hat FreeIPA Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 FreeIPA NIST National Vulnerability DatabasePublished Oct 22, 2026 22:18 UTC Read the advisory
	Medium	5.5	CVE-2026-115207	A flaw was found in GNU patch Red Hat, GNURed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6, GNU patch	NVD	Oct 22 11:17 UTC
CVE-2026-115207A flaw was found in GNU patch Executive summary A flaw in GNU patch lets an attacker create files in arbitrary locations on a system when a user or automated workflow applies a specially crafted patch file. The advisory rates it as a Red Hat CVSS v3.1 base score of 5.5 (Medium), and it states that no mitigation is currently available that meets Red Hat's criteria. Technical summary The weakness is classified as CWE-22 path traversal, caused by missing validation during automatic patch reversal that lets absolute file paths in patch headers be accepted. The attack is local (AV:L) with low complexity, requires no privileges, and needs user interaction, such as applying a crafted patch file. The advisory's CVSS vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. Affected and fixed versions are not stated in the text provided. No workarounds are given, and the advisory says mitigation is either not available or does not meet Red Hat's criteria. No detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115207 Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityNone How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affects Red Hat GNU Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 GNU patch NIST National Vulnerability DatabasePublished Oct 22, 2026 11:17 UTC Read the advisory
	Medium	6.1	CVE-2026-85518	A flaw was found in OpenSCAP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6	NVD	Oct 21 20:17 UTC
CVE-2026-85518A flaw was found in OpenSCAP From the advisory A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityLow How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 21, 2026 20:17 UTC Read the advisory
	Medium	5.1	CVE-2026-114038	A flaw was found in device-mapper-multipath Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 21 01:17 UTC
CVE-2026-114038A flaw was found in device-mapper-multipath From the advisory A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS). Impact if exploited ConfidentialityLow IntegrityNone AvailabilityLow How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 21, 2026 01:17 UTC Read the advisory
	High	7.3	CVE-2026-112177	A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8 Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 20 08:16 UTC
CVE-2026-112177A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8 From the advisory A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 20, 2026 08:16 UTC Read the advisory
	High	7.8	CVE-2026-112261	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 19 22:17 UTC
CVE-2026-112261A flaw was found in GIMP From the advisory A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 19, 2026 22:17 UTC Read the advisory
	High	7.8	CVE-2026-112258	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 19 22:17 UTC
CVE-2026-112258A flaw was found in GIMP From the advisory A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 19, 2026 22:17 UTC Read the advisory
	High	7.8	CVE-2026-112257	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 19 22:17 UTC
CVE-2026-112257A flaw was found in GIMP From the advisory A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 19, 2026 22:17 UTC Read the advisory
	High	7.1	CVE-2026-112260	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 19 20:17 UTC
CVE-2026-112260A flaw was found in GIMP From the advisory A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service. Impact if exploited ConfidentialityHigh IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 19, 2026 20:17 UTC Read the advisory
	Medium	5.5	CVE-2026-112259	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 19 19:17 UTC
CVE-2026-112259A flaw was found in GIMP From the advisory A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 19, 2026 19:17 UTC Read the advisory
	Medium	6.5	CVE-2026-112214	A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9	NVD	Oct 19 13:16 UTC
CVE-2026-112214A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly From the advisory A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation request and lead to denial of service if the allocation fails or the process is memory-constrained. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 NIST National Vulnerability DatabasePublished Oct 19, 2026 13:16 UTC Read the advisory
	Medium	6.0	CVE-2026-112210	A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9	NVD	Oct 19 12:17 UTC
CVE-2026-112210A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc From the advisory A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the privileged yggdrasil system service account can exploit this to gain ownership of arbitrary files, leading to privilege escalation to root. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required High User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 NIST National Vulnerability DatabasePublished Oct 19, 2026 12:17 UTC Read the advisory
	Medium	5.9	CVE-2026-89096	A flaw was found in nfs-utils Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 23:17 UTC
CVE-2026-89096A flaw was found in nfs-utils From the advisory A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 23:17 UTC Read the advisory
	Medium	5.5	CVE-2026-89088	A flaw was found in parted Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 16 23:17 UTC
CVE-2026-89088A flaw was found in parted From the advisory A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS). Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 16, 2026 23:17 UTC Read the advisory
	Medium	6.6	CVE-2026-89085	A flaw was found in parted Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 16 23:17 UTC
CVE-2026-89085A flaw was found in parted From the advisory A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 16, 2026 23:17 UTC Read the advisory
	Low	3.6	CVE-2026-17591	A flaw was found in libarchive Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6	NVD	Oct 16 23:17 UTC
CVE-2026-17591A flaw was found in libarchive From the advisory A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityLow How it is exploited Attack vector Local Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 16, 2026 23:17 UTC Read the advisory
	Medium	6.6	CVE-2026-111802	A flaw was found in Nautilus Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 16 23:17 UTC
CVE-2026-111802A flaw was found in Nautilus From the advisory A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 16, 2026 23:17 UTC Read the advisory
	High	7.0	CVE-2026-62439	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 16 22:17 UTC
CVE-2026-62439A flaw was found in GIMP From the advisory A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 16, 2026 22:17 UTC Read the advisory
	Medium	6.1	CVE-2026-62438	A flaw was found in GIMP Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6	NVD	Oct 16 22:17 UTC
CVE-2026-62438A flaw was found in GIMP From the advisory A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file decompression, the application allocates an undersized memory buffer. Subsequent processing reads memory past the buffer boundary, terminating the plug-in process unexpectedly. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 NIST National Vulnerability DatabasePublished Oct 16, 2026 22:17 UTC Read the advisory
	Medium	5.3	CVE-2026-85977	A flaw was found in libtirpc Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 19:17 UTC
CVE-2026-85977A flaw was found in libtirpc From the advisory A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 19:17 UTC Read the advisory
	Medium	6.5	CVE-2026-85231	A flaw was found in libtirpc Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 19:17 UTC
CVE-2026-85231A flaw was found in libtirpc From the advisory A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Hardened Images Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 19:17 UTC Read the advisory
	Medium	5.5	CVE-2026-89098	A flaw was found in nfs-utils Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4	NVD	Oct 16 18:19 UTC
CVE-2026-89098A flaw was found in nfs-utils From the advisory A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Red Hat Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 Red Hat OpenShift Container Platform 4 NIST National Vulnerability DatabasePublished Oct 16, 2026 18:19 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited