NVD disclosure day
CVE-2026-74764
Halo Surface Signal: 3 out of 5 — possibly public-facing.
Pandora's TAR archive extraction contains a path traversal vulnerability. An attacker could submit a malicious TAR archive to overwrite files outside the intended directory, potentially leading to application compromise or denial of service.
CVE-2026-73055
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in shescape that could allow an attacker to disclose user home directory locations or alter command operation contexts. This occurs when the escape or escapeAll APIs are used with untrusted input on specific Unix systems. The potential impact necessitates identifying usage and assessing reachabil
CVE-2026-73053
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A cross-site scripting vulnerability in SiYuan's unicode2Emoji function allows attackers to execute arbitrary code on the host system by crafting malicious document icons. This occurs when specific character sequences are not properly sanitized, leading to the execution of hex-encoded markup if Node integration is enab
CVE-2026-73052
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
SiYuan's desktop client is vulnerable to stored cross-site scripting by injecting JavaScript through specially named database fields. Attackers can exploit this when a user opens a sort menu, potentially leading to arbitrary code execution if Node integration is enabled, requiring authenticated user interaction.
CVE-2026-73050
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A stored cross-site scripting vulnerability in SiYuan allows attackers to inject arbitrary JavaScript by manipulating the color field in select options. This could lead to code execution if a user views a database containing the malicious input. The potential impact on business operations is uncertain as the software i
CVE-2026-73046
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
SiYuan's authentication middleware improperly handles excessive login attempts, allowing unauthenticated remote attackers to brute-force the admin access code and gain full administrator privileges. The issue exists in the HTTP Basic Authentication handling, which bypasses CAPTCHA and lockout mechanisms. This could lea
CVE-2026-73044
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in SiYuan software allows attackers to inject malicious code via table column widths by exploiting an API. This stored cross-site scripting vulnerability could lead to arbitrary code execution within the application's environment if a user interacts with a compromised table. Confirmation of SiYuan's use is advis
CVE-2026-73043
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A remote code execution vulnerability exists in SiYuan's template calculation operator. Attackers can inject malicious code into templates, which may execute arbitrary commands on a user's desktop client when a specially crafted database is opened.
CVE-2026-73042
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
SiYuan's unescaped database menu metadata allows stored script execution when users open certain menus, enabling attackers to inject markup that triggers arbitrary code execution due to insecure Electron configuration. This issue should be reviewed by teams managing the application to determine if it impacts your envir
CVE-2026-73041
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
SiYuan's PDF annotation feature has a critical vulnerability where unvalidated markup in annotation fields can lead to script execution within the PDF renderer. This could allow an attacker to gain full access to the Node.js environment when a user opens an annotated PDF. Readers should determine if SiYuan is used and
CVE-2026-18855
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the WordPress Link Library plugin allows unauthenticated attackers to delete arbitrary files on the server. This could potentially lead to remote code execution if critical files are targeted. Exploitation requires a specific plugin setting to be enabled and a subsequent moderation action by an admin
CVE-2026-19598
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Pods – Custom Content Types and Fields WordPress plugin allows unauthenticated attackers to bypass authorization checks. This could enable them to escalate privileges to administrator or reset any user's password, potentially leading to a complete website takeover. The issue stems from a flaw in
CVE-2026-15689
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in a Perl authentication plugin that allows password reset link poisoning. If a user clicks a crafted link in a password reset or welcome email, an attacker could gain control of their account. This issue is relevant if the plugin and its related features are used and accessible. Wszelkie błędy w
CVE-2026-74570
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS filesystem driver involved unsafe memory allocation calculations. If reachable, this could lead to a critical system compromise. Readers should care to understand potential internal system impacts and confirm relevance to their environment.
CVE-2026-74569
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's Netfilter component could allow unauthorized memory access if specific SIP traffic is processed. This occurs when calculating size changes during NAT rewrites of SIP messages, potentially leading to memory corruption. Confirmation is needed on whether your environment utilizes thes
CVE-2026-74556
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A Linux kernel vulnerability allows for a buffer overflow when processing oversized SCSI Response data over TCP, potentially leading to denial-of-service or system integrity issues if reachable.
CVE-2026-74545
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability has been resolved concerning a double-free error in network data fragment handling during DMA mapping failures. This could potentially lead to system instability if specific error conditions are triggered. The vulnerability is in the rtase module and affects network packet processing.
CVE-2026-74521
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's ksmbd component could allow attackers to bypass security checks by improperly comparing unique identifiers, potentially enabling unauthorized access or manipulation of data. This issue arises from a flawed string comparison method that can misinterpret distinct identifiers as ident
CVE-2026-74495
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory leak vulnerability exists in the Linux kernel's `igbvf` network driver, where TX DMA error cleanup can fail to unmap buffers under certain error conditions. This could potentially lead to resource exhaustion and denial of service if triggered.
CVE-2026-74493
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's networking component related to socket management during link group termination, potentially causing system instability. This issue arises from a race condition where a socket might be freed prematurely. Uncertainty remains regarding whether this specific kern
CVE-2026-74480
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network bridge component could lead to memory corruption and potential service disruption by mishandling multicast group memberships after port deletions. The issue arises from an incorrect iteration in the fast-leave path of the bridge's port group management. While the specific i
CVE-2026-74478
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A use-after-free vulnerability exists in the Linux kernel's packet handling for specific network transports like GRE and L2TPv3. Unauthenticated network-based attackers can trigger this by sending malformed packets, potentially leading to system crashes or memory corruption.
CVE-2026-74476
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's virtual Ethernet driver may allow specially crafted network packets to cause a system crash. This could affect network service availability by corrupting packet data during processing. Understanding if this internal kernel function is in use and reachable is key.
CVE-2026-74475
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's VXLAN component could allow for torn reads of network neighbor hardware addresses, potentially leading to incorrect data handling. While this affects core operating system networking functions, its direct impact and exposure depend on specific system configurations. Readers should
CVE-2026-74474
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's VXLAN networking component could allow for the mishandling of network headers during packet transmission, potentially impacting data integrity. The exact impact is uncertain, but improper handling of headers could affect network service stability.
CVE-2026-73193
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in Perl's DBI library allows a heap out-of-bounds write on 32-bit systems when processing exceptionally large statements. This could lead to memory corruption and application instability. Its relevance depends on whether your environment uses this library on 32-bit Perl and processes such large inputs.A
CVE-2026-16142
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
The TrueBooker WordPress plugin contains a vulnerability that allows unauthenticated attackers to change any user's email address. This enables account takeover through the native password reset process, potentially impacting site integrity and user data.
CVE-2026-15826
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A flaw in the User Profile Builder WordPress plugin enables unauthenticated attackers to bypass authentication and achieve full administrative control by exploiting how user registration errors are handled. This could allow an attacker to impersonate the site administrator.
CVE-2026-74436
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's rxrpc networking component could allow a race condition during socket teardown to lead to system instability or compromise. This issue impacts internal kernel socket backlog management and requires specific network interaction for exploitation. It is important to determine if this
CVE-2026-74434
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's rxrpc message handling that can lead to memory corruption and use-after-free errors. This issue may arise when a network message is read using `MSG_PEEK`, causing it to be managed incorrectly across internal queues, potentially leading to system instability.
CVE-2026-74433
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A resolved vulnerability in the Linux kernel's rxrpc module involves a memory management flaw that could allow for system compromise. The issue arises from a use-after-free condition in a challenge processing function. While the flaw is fixed, confirmation of affected systems and their exposure is recommended.
CVE-2026-74428
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's rxrpc protocol could allow an attacker to trigger a double unlock error when processing network messages. This could potentially lead to system instability or crashes, impacting service availability.
CVE-2026-74427
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's AFS network namespace teardown process could allow an attacker to bypass resource cancellation, potentially impacting system stability and integrity. This flaw may lead to unintended operations or service disruption if the affected code path is reached.
CVE-2026-74406
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's VXLAN networking component, related to internal socket data handling during packet reception, could lead to system instability or crashes. The exact reachability and exploitation method are not fully detailed, but it involves a race condition that can cause a null-pointer dereferen
CVE-2026-74401
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's Distributed Lock Manager (DLM) may cause memory corruption if a high volume of network messages triggers message ordering issues. This could lead to refcounting problems and use-after-free conditions, potentially affecting system stability and data integrity.
CVE-2026-74398
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's IPv6 address configuration could lead to system instability. This issue involves a race condition during Duplicate Address Detection that may cause a crash if reachable. Confirming the relevance of this kernel-level vulnerability to your environment is advised.
CVE-2026-74384
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the nvme-multipath component allows for out-of-bounds memory access if NUMA node IDs are not sequential. This could lead to system instability or crashes.
CVE-2026-74376
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's RAID10 storage driver could allow improper handling of data structures during discard operations, potentially leading to data corruption or system instability if those structures are reused after a read. Resetting a specific data field corrects this issue.
CVE-2026-74361
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NVMe subsystem, now resolved, involved an incorrect bounds check that could accept an out-of-bounds index. If reachable, this could potentially affect storage operations and lead to unpredictable system behavior. The specific technical relevance to your environment should be confir
CVE-2026-74350
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's OCFS2 filesystem, where improper validation of fast symbolic link targets during inode reads could lead to memory corruption. If a crafted symlink is encountered and read, this could potentially cause system instability or crashes. This issue is relevant for systems using th
CVE-2026-74345
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's RDMA/siw driver could allow a malformed network request during connection establishment to cause a use-after-free condition, potentially leading to system instability or crashes. The issue stems from improper handling of socket and endpoint associations. This vulnerability is netwo
CVE-2026-74315
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's network lock manager can cause inconsistent lock state handling when processing short file identifiers, potentially leading to lookup failures. While network access is required, external exposure is unlikely due to typical deployment environments.
CVE-2026-74309
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's vdpa/octeon_ep driver could allow incorrect interrupt handling, potentially impacting system operations. This issue is related to how hardware interrupts are mapped to software queues. The exact impact and relevance depend on whether this specific driver is in use.
CVE-2026-74287
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability exists in the Linux kernel's handling of SCTP network parameters, where it may not adequately validate the length of embedded address parameters. This could allow a malformed network packet to cause out-of-bounds reads, potentially impacting system stability and availability if the affected technology i
CVE-2026-74280
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's Marvell OcteonTX driver could allow for DMA buffer cleanup failures, potentially impacting system stability and cryptographic operations. The issue stems from an incorrect loop index used during DMA buffer unmapping.
CVE-2026-74279
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's cryptographic driver could allow data to be leaked or repeatedly unmapped due to an incorrect loop index during DMA cleanup. This could potentially impact system stability and data integrity. It is uncertain if this vulnerability is reachable or relevant in your environment.
CVE-2026-74269
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the bnxt driver can cause memory corruption when processing specific network packet adjustments, potentially leading to system instability or crashes. This issue arises from an internal memory management error during packet handling. It is important to determine if the affected technolog
CVE-2026-74268
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's TCP handling could allow for unexpected internal state issues if a child socket's setup fails after inheriting operational flags. This race condition may lead to a kernel warning and potential instability within socket operations. The issue is not believed to impact data confidenti
CVE-2026-74255
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's TIPC subsystem could allow memory corruption and potential system compromise. This flaw, related to how the kernel handles device pointers during media and bearer disabling, could be triggered via network access. The issue has been resolved, and relevance depends on
CVE-2026-72494
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's RDMA driver involves improper synchronization for request completion. While resolved, its low-level nature means it is unlikely to be directly reachable from external networks, but confirmation of its use within the organization is recommended to understand potential relevance.
CVE-2026-72493
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A race condition in the Linux kernel's networking stack can allow packets to escape during device unregistration, potentially leading to memory corruption and instability. The vulnerability arises from a timing issue where packets might bypass cleanup processes when a network device is being shut down. This issue is no
CVE-2026-72491
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A race condition in the Linux kernel's 9p RDMA transport can corrupt connection state and potentially lead to memory corruption and use-after-free vulnerabilities during teardown. This issue arises when state updates occur without proper locking. Its impact is likely limited to specific high-performance computing envir
CVE-2026-72477
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS3 file system driver may allow an attacker to cause system instability by encountering an inconsistent inode during a file rename operation. This issue has been resolved in updated kernel versions.
CVE-2026-72473
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the xprtrdma subsystem could lead to memory corruption or system instability due to improper request recycling during RDMA operations. While typically used for internal communication and not directly exposed externally, this issue necessitates an assessment of its use within your environ
CVE-2026-72472
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NFS component could impact file lock integrity during concurrent operations. If reachable, this could lead to data corruption or system instability. This issue is relevant for maintaining system integrity and data security.
CVE-2026-72466
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's RPC-over-RDMA implementation allows for the leak of receive buffers and draining of the receive queue when processing malformed network replies. If reachable, this could lead to denial-of-service conditions, impacting system stability and network performance. This functionality is
CVE-2026-72463
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's IPsec (xfrm) subsystem, potentially allowing memory corruption and system instability due to mishandled network device reference counts during asynchronous packet resumption. The vulnerability can be triggered under specific race conditions, impacting network
CVE-2026-72451
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A race condition in the Linux kernel's xfrm state cache could allow invalid security states to be inserted, potentially impacting network packet processing. The vulnerability has been resolved by correcting the order of validity checks and lock acquisition.
CVE-2026-72442
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's netfilter component could allow crafted network packets to disrupt IP6IP6 tunnel handling. This issue is related to how the kernel processes certain IPv6-in-IPv6 encapsulated traffic. It's uncertain if this specific kernel functionality is utilized or exposed within your environmen
CVE-2026-72436
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's netfilter ipset component could allow for critical data corruption or system instability due to improper memory synchronization in lockless readers. This issue, related to the handling of concurrent operations on hash-based sets, could be triggered by specific interactions within t
CVE-2026-72429
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A type confusion flaw in the Linux kernel's networking code could lead to an invalid pointer access when processing IOAM data. This vulnerability may cause system instability or unexpected behavior if reached through specific IOAM packet processing paths.
CVE-2026-72422
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Linux kernel's ksmbd component, which handles SMB file sharing, allows for a use-after-free condition when processing concurrent SMB2 NEGOTIATE requests. This could potentially lead to system instability or code execution if reachable. It is important to confirm if ksmbd is in use and exposed ext
CVE-2026-72408
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's GENEVE networking component allows an attacker to cause a system crash by sending specially crafted packets to a system using GENEVE tunnels with a disabled GRO hint, leading to an out-of-bounds read. This could result in a denial-of-service condition or potentially allow for code
CVE-2026-72407
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's Geneve protocol processing has been resolved, related to the validation of inner network offsets. If reachable, this could disrupt network packet processing, potentially impacting service availability.
CVE-2026-72399
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's ENETC network driver that can lead to an out-of-bounds access when processing network traffic. This could result in unexpected system behavior or potential denial of service.
CVE-2026-72398
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Linux kernel's SCTP protocol allows processing of untrusted data when cookie authentication is disabled, potentially enabling attackers to establish insecure associations via specially crafted network packets. This could lead to system disruptions or unauthorized access, impacting network service
CVE-2026-72393
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network driver can lead to a use-after-free error during packet transmission. This could result in system instability or data corruption if exploited.
CVE-2026-72381
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in the Linux kernel's SMB server allows for memory corruption due to a race condition during durable reconnects. If reachable, this could lead to system instability or compromise by enabling attackers to read or write freed memory. This impacts the integrity and availability of file-sharing services.
CVE-2026-72366
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's netfs component could allow improper handling of asynchronous cache object creation, potentially leading to skipped operations if fscache cookies are disabled. This flaw could affect data integrity and system availability. Confirmation of affected systems and components is advised.
CVE-2026-72355
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network filesystem component has been resolved, addressing an issue with handling subrequest lists during retries. While the fix is available, the specific impact and reachability remain under assessment.
CVE-2026-72351
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's GUE packet handling could allow specially crafted network packets to be misinterpreted, potentially leading to unauthorized access to systems. If reachable, this could impact system integrity and data confidentiality. The Linux kernel's handling of remote checksum offload metadata
CVE-2026-72348
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in the Linux kernel's netfilter component could allow attackers to bypass security rules by sending malformed IPv6 extension headers. This could lead to unintended packet processing and impact network traffic filtering.
CVE-2026-72339
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the qede driver can cause memory corruption by mismanaging buffer descriptors during packet processing under memory pressure. This desynchronization of the buffer descriptor ring could lead to SLUB freelist corruption, affecting system stability. The exact impact or exploitability requir
CVE-2026-72323
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A race condition in the Linux kernel's IGMP handling can cause a system crash when network devices are being removed, due to a timer attempting to access freed memory. This vulnerability impacts kernel stability and network operations.
CVE-2026-72322
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Use-After-Free vulnerability in the Linux kernel's IPv6 multicast handling can lead to a kernel panic. This occurs due to a race condition between network device teardown and incoming MLD query processing. This issue could cause system instability or crashes if triggered.
CVE-2026-72320
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's netfilter component can cause incorrect handling of inverted lookups, potentially leading to misclassified network traffic. If reachable, this could allow unintended network access or traffic routing. Its relevance depends on the use of this specific kernel functionality.
CVE-2026-72319
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's IPVS component could allow an attacker to exploit how ICMP error messages from tunnels are processed. This could potentially impact network communication integrity and availability. The exact business impact is uncertain without knowing product versions or specific deployment confi
CVE-2026-72318
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's CIFS module allows for out-of-bounds reads when processing DFS referral strings. This could lead to memory corruption or system instability if reachable.
CVE-2026-72317
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's SUNRPC component affecting TLS connections. This flaw can lead to system instability or crashes if a TLS handshake fails during a connection attempt. This impacts the availability of services relying on these specific kernel operations.
CVE-2026-72299
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's TIPC module could allow unauthorized access to socket queue data during tracepoint events. This could potentially lead to system instability if the affected component is in use and reachable. Confirmation of TIPC usage is needed to assess the risk.
CVE-2026-72296
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's network handling could allow a malformed network frame to cause a system crash. This occurs when the kernel fails to properly process the inner Ethernet header, leading to a denial of service. Readers should care because this impacts system stability and integrity.
CVE-2026-72251
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A Linux kernel vulnerability in the netfilter SIP NAT helper could allow an attacker to corrupt kernel memory by reloading stale data pointers during packet processing, potentially leading to instability or crashes. This issue is reachable via network-sent packets if the system is configured to handle SIP traffic.
CVE-2026-72249
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's netfilter component where incorrect routing information is used when pushing an IPIP header. This could potentially impact network traffic integrity and system availability if reachable. Further analysis is needed to determine if the affected component is in use and exposed
CVE-2026-72248
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's netfilter component can cause a system crash when processing IPIP tunnels with direct transmission due to improper handling of routing information. This could lead to system instability.
CVE-2026-72234
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's batman-adv module could allow an attacker to corrupt network traffic data by exploiting incorrect pointer reassignment after buffer reallocation during packet processing.
CVE-2026-72226
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's batman-adv component could allow an attacker to bypass security checks by sending crafted network traffic, potentially leading to data corruption or denial of service. This issue arises from an arithmetic overflow when handling specific network data.
CVE-2026-72221
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in the Linux kernel's sunrpc component could cause instability or connection issues during TLS handshakes due to a race condition. Exploitation might disrupt network services or lead to incorrect session handling. Confirmation of relevance and exposure in your environment is advised.
CVE-2026-72220
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's sunrpc component could allow an attacker to trigger a double-free or use-after-free condition through specially crafted network requests. This may lead to system instability or unexpected behavior. Confirming the exposure of RPC services is important.
CVE-2026-72217
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A Linux kernel vulnerability in SUNRPC could allow an attacker to write data out-of-bounds by sending crafted network requests. This flaw, stemming from a bounds check occurring after a memory write, may lead to corruption of adjacent memory, potentially impacting system integrity and data. The reachability of this vul
CVE-2026-72211
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver could lead to file system corruption due to an incorrect update sequence for index root values. This may result in an inconsistent file system state if a resize operation fails, potentially causing data corruption that file system checks would identify. The issue affect
CVE-2026-72210
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver allows an out-of-bounds read when processing specially crafted filesystem data. This could affect data integrity and system availability.
CVE-2026-72209
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver allows an attacker to read beyond allocated memory via a crafted image, potentially causing instability or data corruption. This occurs when the driver improperly validates file name attribute values, leading to out-of-bounds reads. The relevance depends on exposure to
CVE-2026-72208
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver could allow an attacker to cause memory access errors when handling extended attribute entries. This issue has been resolved.
CVE-2026-72207
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver can cause data corruption when resizing attributes. This occurs when a zero-byte data attribute is incorrectly converted to a non-resident format, leading to file system errors. The primary concern is confirming relevance and local exposure to NTFS-formatted storage.
CVE-2026-72206
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver allows for stricter validation of index block headers, potentially protecting against malformed data. While the vulnerability itself is in a local filesystem driver, its reachability and impact on system integrity are key concerns.
CVE-2026-72201
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver allowed for potential information disclosure, integrity modification, or denial of service due to improper validation of index entries read from disk. This issue is relevant for systems processing NTFS files on Linux.
CVE-2026-72200
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the NTFS driver allows specially crafted attributes to cause an integer overflow, potentially altering physical cluster mappings. While this could lead to unexpected data interpretations, the likelihood of exploitation is considered very unlikely as it typically requires local access or
CVE-2026-72199
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's NTFS driver could allow specially crafted data to corrupt file system metadata. This vulnerability, related to the validation of resident index root values during lookup operations, could potentially lead to data integrity issues or system instability when NTFS volumes are accessed.
CVE-2026-72194
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver allows a crafted filesystem to cause a stack overflow, leading to a system crash when a file is deleted. This issue arises from unbounded recursion within the `indx_find_buffer` function.
CVE-2026-72192
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS3 driver allows for a controlled out-of-bounds write when processing a crafted NTFS image, potentially corrupting adjacent memory. Exploitation requires local access to mount a malicious filesystem, making it relevant if systems handle untrusted NTFS images. The risk of system
CVE-2026-72191
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS3 driver could allow a local attacker to cause an out-of-bounds write, potentially leading to a system crash. This is triggered by mounting a specially crafted NTFS filesystem image.
CVE-2026-72188
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's NTFS driver that could allow an attacker to manipulate file lookup failures by mounting a crafted NTFS image. This flaw involves untrusted metadata being processed without proper validation, potentially leading to system instability or data corruption.
CVE-2026-72186
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver could allow corruption of an NTFS volume if specific system files are written from user space, potentially leading to a system deadlock. While the issue has been resolved by making system files immutable, the relevance to your environment should be confirmed.
CVE-2026-72185
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NTFS driver could allow a crafted NTFS image to cause a kernel warning or mount error. This occurs when the driver misinterprets attribute data, potentially corrupting VCN range checks. Systems that mount untrusted NTFS volumes are affected.A vulnerability in the Linux kernel's NTF
CVE-2026-72139
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability in the TCP networking stack could allow an attacker to trigger a use-after-free condition during connection setup. This memory corruption issue may lead to system instability. The vulnerability has been resolved.
CVE-2026-72137
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's NAT keepalive functionality could allow a double free error during packet sending when transmission fails. This could lead to system instability. This issue is confined to internal kernel operations and does not directly expose user data.
CVE-2026-72130
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in the Linux kernel's NVMe-oF authentication component allows a remote attacker to trigger a heap out-of-bounds write by sending a short authentication buffer. This issue is only reachable when in-band DH-HMAC-CHAP authentication is configured on an NVMe-oF target, potentially leading to memory corrupti
CVE-2026-72129
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's nvmet-rdma component allows improper handling of inline data offsets, potentially enabling unauthorized memory reads and writes. This could occur if specially crafted network traffic targets the component, leading to the system reading past intended memory boundaries. Confirming th
CVE-2026-72098
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability allows a buffer overflow during error correction calculations in dm-verity. This could corrupt data structures, impacting the integrity of protected storage. It is relevant if system data integrity is a business concern and requires verification of dm-verity usage.
CVE-2026-72084
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's SCSI target subsystem could allow an attacker to cause a system crash by sending crafted data. This flaw involves improper parsing of TransportID data, potentially leading to an out-of-bounds read and memory corruption. While rated critical, the real-world impact depends on system
CVE-2026-72083
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A use-after-free vulnerability in the Linux kernel's iSCSI target implementation could allow an attacker to read or modify kernel memory by sending crafted network traffic. This memory corruption could lead to sensitive data disclosure or denial of service. The issue is located within the SCSI target subsystem, and its
CVE-2026-72069
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's real-time spinlock implementation could allow a use-after-free scenario, potentially leading to system instability or unauthorized access if specific race conditions are met. This vulnerability arises from incorrect RCU protection handling during the unlock operation.
CVE-2026-72065
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw in the Linux kernel's network driver for the MANA adapter allows for improper handling of packet lengths reported by the network interface card, potentially leading to system instability or compromise.
CVE-2026-72064
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A Linux kernel vulnerability exists in the MANA network driver where received packet data may not be properly synchronized for CPU access. This could lead to incorrect data processing and broken network reception on systems with specific DMA synchronization requirements, impacting network integrity. The relevance and e
CVE-2026-72046
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A flaw exists in the Linux kernel's gve driver related to header buffer handling during network packet reception. This can lead to data corruption if specific networking features are enabled and network traffic is processed in a certain order. Uncertainty exists regarding exploitation and specific business impact.A vul
CVE-2026-72041
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability in the Linux kernel's message handling could allow for unintended behaviors. While not directly exploitable from the internet, it may impact system integrity and availability if network packets are processed with partial sends, necessitating confirmation of its relevance.
CVE-2026-72033
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's OrangeFS component allows an attacker to trigger an out-of-bounds read by sending a malformed directory entry. This could lead to kernel memory being read and potential system instability or crashes.
CVE-2026-72020
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's IPVS subsystem could allow specially crafted sync messages to corrupt forwarded TCP sequence numbers, potentially disrupting network flows. This occurs when connection sequence data is not fully initialized, leading to the use of stale memory. The risk depends on the reachability o
CVE-2026-72014
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's DRBD component allows a malicious peer to corrupt kernel memory by sending crafted data replies. This can occur when a node reads from its peer and may result in arbitrary kernel memory corruption, even in the default configuration. The issue affects systems where a node reads data
CVE-2026-68477
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's IPVS networking code could affect applications using IPv6 due to incorrect transport offset handling. While the official FTP application is unaffected, other IPv6 applications might experience disruptions. This issue could allow attackers to compromise system integrity, confidentia
CVE-2026-68476
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in the Linux kernel's IP Virtual Server (IPVS) subsystem may allow for improper handling of network packet headers during reallocation. This could potentially impact network communications.
CVE-2026-68457
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the Linux kernel's ksmbd component could allow unauthorized modifications to file data and attributes. This occurs when specific FSCTL operations are performed on an open SMB handle, potentially leading to file system integrity and data corruption risks. Confirming the use and network exposure of thi
CVE-2026-15341
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An authentication bypass vulnerability exists in the User Session Synchronizer plugin for WordPress. This flaw allows unauthenticated attackers to take over any user account, including administrators, by sending a crafted request. The plugin's improper validation of session synchronization parameters leads to predictab
CVE-2026-15303
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The 6Storage Rentals WordPress plugin has a critical authentication bypass vulnerability. Unauthenticated attackers can log in as any user, including administrators, by providing a known email address. This could lead to unauthorized access and potential website compromise. It is important to determine if this plugin i
CVE-2026-14484
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in the RapiSafe – Secure Multi File Upload for Contact Form 7 WordPress plugin allows unauthenticated attackers to delete arbitrary files on the server, potentially leading to remote code execution. This is due to insufficient file path validation and an exposed security token, making it reachable by an