Threat Feed — FreeIntelHub

CVE-2026-97544 In the Linux kernel, the following vulnerability has been resolved: xfs: don't leak dqacct if rhashtable insertion fail

CVE-2026-97543 In the Linux kernel, the following vulnerability has been resolved: xfs: destroy seen inode bitmap when we fail to add

CVE-2026-97542 In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrep_agfl_fill L

CVE-2026-97541 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: don't store usb_device_id usb_dev

CVE-2026-97540 In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: don't rely on id table pointer a

CVE-2026-97539 In the Linux kernel, the following vulnerability has been resolved: usb: xusbatm: don't rely on id table pointer arithm

CVE-2026-97538 In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Validate HID report length

CVE-2026-97537 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dma_free and

HIGH · CVE-2026-97536 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on

CVE-2026-97535 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound VP index against VP_CTRL IOCB

CVE-2026-97534 In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust free_sections during free_s

CVE-2026-97533 In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm read lock on attribute

CVE-2026-97532 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Null out freed pointers in qla2x00_m

HIGH · CVE-2026-97531 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Skip vport under deletion in report

CVE-2026-97530 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix soft lockup polling continuation

CVE-2026-97529 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG request_len before read

HIGH · CVE-2026-97528 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing

HIGH · CVE-2026-97527 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize NVMe unsol ctx list with a

CVE-2026-97526 In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The comm

HIGH · CVE-2026-97525 In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel pa

HIGH · CVE-2026-97524 In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset Onc

HIGH · CVE-2026-97523 In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state chang

CVE-2026-97522 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in __mptcp_subflow_push_p

CVE-2026-97228 Rapid7 Bulk Export MCP versions 0.2.5 through 0.6.1 suffer from a GraphQL query injection issue in the export-status com

CVE-2026-27867 An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, registration actio

CVE-2026-97898 Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unloc

CVE-2026-92106 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dashbitco lazy_htm

CVE-2026-97863 The cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh) that authenticates to

MED · CVE-2026-92573 Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10 message d

CVE-2026-92564 A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of

HIGH · CVE-2026-92560 A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential

HIGH · CVE-2026-92550 A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential

MED · CVE-2026-88848 The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is c

MED · CVE-2026-86837 The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored deta

MED · CVE-2026-80514 The wpForo Forum WordPress plugin from 3.0.0 before 3.1.6 does not verify the source of client-supplied IP address heade

CVE-2026-6088 Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on

CVE-2026-6087 Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on

CVE-2026-6086 Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on

CVE-2026-6085 Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on

CVE-2026-6084 Stored Cross-Site Scripting (XSS) vulnerability in StockAgile API and management panel. The vulnerability is present on