Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.4 CVE-2026-41566

Apache Kvrocks: Improper permission for the APPLYBATCH command_CVE-2026-41566

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: 2.8.0. Users are ...

Apache Software Foundation Apache Kvrocks 2.8.0 CVE
HIGH 8.2 CVE-2026-12490

Bypass of client certificate verification with transfer over TLS_CVE-2026-12490

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no...

NLnet Labs NSD 4.10.1 CVE
HIGH 7.2 CVE-2026-12246

Out of bounds stack write with crafted APL RR_CVE-2026-12246

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite...

NLnet Labs NSD 4.14.0 CVE
HIGH 8.7 CVE-2026-12245

Denial of DNS over TLS service by any DoT client_CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be tri...

NLnet Labs NSD 4.13.0 CVE
HIGH 8.7 CVE-2026-12244

Heap overflow and crash with crafted SVCB RR_CVE-2026-12244

If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted S...

NLnet Labs NSD 4.14.0 CVE
MEDIUM 5.5 CVE-2026-56129

CVE-2026-56129_CVE-2026-56129

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A l...

Dynabook Inc. Generic IO & Memory Access driver all versions CVE
HIGH 7.5 CVE-2026-12937

Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter_CVE-2026-12937

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection vi...

themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin CVE
MEDIUM 4.4 CVE-2026-8330

Insertion of Sensitive Information into Log File in GitLab_CVE-2026-8330

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that unde...

GitLab GitLab 9.3 CVE
MEDIUM 4.3 CVE-2026-5952

Incorrect Authorization in GitLab_CVE-2026-5952

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that un...

GitLab GitLab 17.11 CVE
MEDIUM 4.3 CVE-2026-5796

Incorrect Authorization in GitLab_CVE-2026-5796

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that und...

GitLab GitLab 13.6 CVE