Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-38641

CVE-2026-38641_CVE-2026-38641

An issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafted share...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-38639

CVE-2026-38639_CVE-2026-38639

An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of Service (DoS) via parsing a ...

n/a n/a n/a CVE
MEDIUM 4.3 CVE-2026-56457

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information_CVE-2026-56457

HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an at...

HCLSoftware HCL DevOps Deploy / HCL Launch 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0 CVE
HIGH 8.4 CVE-2026-54371

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr_CVE-2026-54371

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...

acl project acl CVE
HIGH 7.2 CVE-2026-54370

acl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl_CVE-2026-54370

acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate priv...

acl project acl CVE
HIGH 8.4 CVE-2026-54369

acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions_CVE-2026-54369

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_exte...

acl project acl CVE
HIGH 7.2 CVE-2026-40524

FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions()_CVE-2026-40524

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transactions() function where the filter_type parameter is conca...

FrontAccounting FrontAccounting CVE
HIGH 7.2 CVE-2026-40523

FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php_CVE-2026-40523

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authenticated attackers with SA_...

FrontAccounting FrontAccounting CVE
HIGH 7.1 CVE-2026-40522

FrontAccounting < 2.4.20 SQL Injection via rep601.php_CVE-2026-40522

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report handler that allows authenticated attackers to ex...

FrontAccounting FrontAccounting CVE
HIGH 8.7 CVE-2026-40521

FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload_CVE-2026-40521

FrontAccounting before 2.4.20 contains a path traversal vulnerability in the attachment upload handler that allows authenticated attackers to execu...

FrontAccounting FrontAccounting CVE