CVE Vulnerabilities - 22 August 2026

The Linux operating system’s core code that handles UDP tunnel traffic could release a piece of memory before it’s finished using it. This mistake can cause the system to crash or be manipulated by an...

The virtual Ethernet (veth) driver in Linux could miscalculate packet sizes after certain packet processing, causing it to copy extra data—including internal kernel pointers—into user applications. Th...

The Fabrik add‑on for Joomla, in versions before 4.7.3, does not check whether a user is allowed to download a file. This means that people without proper rights could retrieve files they should not s...

Websites that use the Fabrik add‑on for Joomla, version older than 4.7.3, are vulnerable. An attacker can craft a special image request that makes the server open files outside the intended folder, po...

Websites using the Joomla Fabrik add‑on older than version 4.7.3 are at risk because a specially crafted image tag can cause the server to execute unwanted code. This could let an attacker take contro...

The Fabrik add‑on for Joomla (versions before 4.7.3) contains a form field that accepts code from anyone on the internet. An attacker could use this to execute commands on your server, potentially tak...

The router’s time‑zone configuration page can be tricked into overflowing its memory, which could let an attacker cause the device to stop working or take control. This can be done from outside the ne...

The web management page of the Comfast CF-N1-S router can be tricked into running unwanted code when an attacker sends a specially crafted request. This could let an attacker take control of the devic...

The WS Form LITE contact‑form plugin for WordPress can accept specially crafted data when a form is submitted, allowing anyone on the internet to insert a malicious object into the site’s code. By its...

A race condition in the Linux kernel's OpenVPN component could cause a connection that was supposed to be removed to be re‑added to internal tables. This can lead to the system accessing memory that h...

The networking part of the Linux kernel that handles the SCTP protocol could use a memory address that has already been freed when a peer’s IP address is removed. This can cause the system to become u...

The Btrfs file system in Linux may hit a memory error when it tries to read a specially crafted file that uses LZO compression but lacks proper headers. This can cause the system to stop responding or...

A bug in the Linux kernel's XDP feature could let specially crafted network traffic overwrite important packet information, potentially causing network services to behave incorrectly. The problem occu...

The Linux operating system’s core code that processes encrypted network traffic can mistakenly write data into the wrong memory area when a certain TLS 1.3 feature is used. This could cause applicatio...

The Linux kernel's SCTP networking code could keep a reference to a network address that had just been deleted, allowing later code to try to use it after it was freed. This could cause a crash or ins...

A part of the Linux operating system that handles broken‑up network packets could delete a tracking entry before it is fully recorded, especially when certain timeout settings are zero or negative. Th...

A bug in the Linux kernel's file handling code could cause data to be stored at the wrong location in memory, leading to occasional crashes such as illegal instruction or segmentation faults. This iss...

A part of the Linux operating system that communicates with certain hardware devices could start processing signals before it is fully set up, which may cause the system to freeze or crash. Updating t...

The X25 network component in the Linux kernel could use memory that had already been freed when a timer fires, potentially causing the system to crash or become unstable. This happens when a socket is...

A part of the Linux operating system that handles a network protocol called SCTP could try to send data using a network connection that has already been closed. This might cause the system to crash or...

The Linux network file system (NFS) code could accidentally use memory that had already been released if a cleanup operation was postponed. This could cause the server to become unstable or stop worki...

When a Linux server processes certain IPv6 tunnel error messages, leftover data from the outer packet can be mistakenly used while handling the inner packet. This can cause memory corruption, potentia...

A part of the Linux operating system that handles SCTP network traffic could mistakenly use memory that has already been released when a connection is restarted. This may cause the system to crash or ...

A coding mistake in the Linux kernel's handling of certain network error messages could let unexpected data overwrite memory, potentially causing crashes or instability. The issue occurs when the syst...

The SMB client code in the Linux kernel could access memory that has already been released when a network interface list is refreshed while a channel is being created. This can cause the system to bec...