CVE Vulnerabilities - 17 October 2026

Gitea Runner lets users alter Docker settings without privilege

CLEANSTART-2026-DC26983

The Gitea Runner component can accept container options that are defined in a workflow and apply them to the Docker container it starts, even when the runner is not running in privileged mode. This me...

9.9

phpMyFAQ lets attackers log in without password

CVE-2026-111911

Versions of phpMyFAQ from 4.0.0 up to 4.1.8 let a malicious user add a passkey to any account without proving they own it. This means an attacker could create a credential for a victim’s username and ...

9.9

LearnPress plugin allows attackers to run code via email field

CVE-2026-104736

The LearnPress learning management plugin for WordPress lets anyone send specially crafted data in the checkout email field, which the system stores and later processes without proper checks. This can...

9.8

Canonical Linux packages may allow unauthorized code execution

CVE-2026-46325 DEBIAN-CVE-2026-46325 UBUNTU-CVE-2026-46325 ROOT-OS-DEBIAN-13-CVE-2026-46325

Several Canonical Linux packages, including the HWE Edge, AWS, and Azure versions, contain a flaw that could let an attacker run their own code on the system. This can compromise the security and stab...

9.8

Linux packages could let attackers gain system control

ROOT-OS-DEBIAN-13-CVE-2025-40343 ROOT-OS-DEBIAN-11-CVE-2025-40343 ROOT-OS-DEBIAN-12-CVE-2025-40343 CVE-2025-40343

Several Linux distributions, including Debian and Canonical's cloud images for Azure, AWS, GCP, and hardware enablement, contain a flaw that could allow an attacker to take control of the system. This...

9.8

Linux kernel allows unauthorized remote control

ROOT-OS-DEBIAN-13-CVE-2025-38533 CVE-2025-38533 ROOT-OS-UBUNTU-2404-CVE-2025-38533 UBUNTU-CVE-2025-38533

A security flaw in the Linux kernel could let an attacker gain full access to affected servers. The issue impacts Debian and other Linux distributions that use the standard kernel. Install the latest ...

9.8

Linux packages could let attackers gain full system control

BELL-CVE-2026-64067 ROOT-OS-DEBIAN-13-CVE-2026-64067 CVE-2026-64067 DEBIAN-CVE-2026-64067

Several Linux distributions have a flaw that could allow an attacker to run code with full system privileges. The issue has been fixed in recent updates for the affected Linux packages. Install the la...

9.8

Linux for Debian 13 update stops attackers from taking control

ROOT-OS-DEBIAN-12-CVE-2026-64530 ROOT-OS-DEBIAN-13-CVE-2026-64530 DEBIAN-CVE-2026-64530 CVE-2026-64530

Several Linux packages used on Debian 13, including the main kernel and cloud‑specific builds, have been updated to close a security hole that could let an attacker execute code with your system’s pri...

9.8

Canonical Linux packages need update to stop remote takeover

ROOT-OS-UBUNTU-2204-CVE-2026-43185 CVE-2026-43185 ROOT-OS-DEBIAN-13-CVE-2026-43185 DEBIAN-CVE-2026-43185

The Linux packages named linux‑hwe, linux‑hwe‑edge, linux‑aws‑5.0, linux‑aws‑5.3 and linux‑azure on Debian 13 have a security gap that could let an attacker run code on your server. Updating to the la...

9.9

Linux kernels updated to stop potential remote attack

BELL-CVE-2026-64066 ROOT-OS-DEBIAN-13-CVE-2026-64066 CVE-2026-64066 DEBIAN-CVE-2026-64066

Several Linux kernel packages, including the standard Linux kernel and variants from BellSoft, Debian, and Canonical, have been updated to fix a security weakness that could allow an attacker to gain ...

9.8

Debian and Canonical Linux 5.15 packages may allow privilege escalation

ROOT-OS-DEBIAN-12-CVE-2025-68263 ROOT-OS-DEBIAN-13-CVE-2025-68263 ROOT-OS-UBUNTU-2404-CVE-2025-68263 DEBIAN-CVE-2025-68263

The Linux kernel packages for Debian 13 and several Ubuntu cloud images (AWS, Azure, Azure FDE, GCP) contain a flaw that could let an attacker gain higher system permissions. This can lead to unauthor...

9.9

Linux packages on Debian and Ubuntu could be exploited

ROOT-OS-DEBIAN-13-CVE-2025-21988 CVE-2025-21988 UBUNTU-CVE-2025-21988

Several Linux packages used in Debian and Ubuntu distributions have a weakness that could let an attacker gain control of a system. The issue has been fixed in newer releases, so updating to the lates...

9.8

Linux kernel and Azure Linux images vulnerable to remote code execution

CVE-2025-68285 ROOT-OS-DEBIAN-12-CVE-2025-68285 ROOT-OS-DEBIAN-13-CVE-2025-68285 UBUNTU-CVE-2025-68285

The core part of Linux used in Debian 13 and several Microsoft Azure Linux images had a security hole that could let an attacker run their own code on your server. Updates that close the hole are now ...

9.8

Linux kernels patched to stop unauthorized system access

ROOT-OS-DEBIAN-12-CVE-2025-40258 ROOT-OS-DEBIAN-11-CVE-2025-40258 ROOT-OS-DEBIAN-13-CVE-2025-40258 CVE-2025-40258

Recent updates fix a security weakness in several Linux kernel packages, including Debian's rootio-linux and Canonical's Linux HWE Edge and AWS builds. The flaw could let an attacker gain higher privi...

9.8

Linux kernel update stops remote code execution

ROOT-OS-DEBIAN-13-CVE-2026-64216 CVE-2026-64216 DEBIAN-CVE-2026-64216 ROOT-OS-UBUNTU-2204-CVE-2026-64216

The Linux kernel package in Debian 13 has been repaired to close a security hole that could let attackers run their own code on the system. This could let a malicious user take control of the server o...

9.8

Linux kernel updated to block known exploit

CVE-2025-68284 ROOT-OS-UBUNTU-2204-CVE-2025-68284 ROOT-OS-DEBIAN-12-CVE-2025-68284 ROOT-OS-DEBIAN-13-CVE-2025-68284

The core part of the Linux operating system used in Debian 13 has been updated to fix a security problem that could let an attacker take control of the system. Installing the latest package from the o...

9.9

Debian Linux packages could let attackers gain access

ROOT-OS-DEBIAN-13-CVE-2026-63857 CVE-2026-63857 DEBIAN-CVE-2026-63857 UBUNTU-CVE-2026-63857

Several Debian and Ubuntu Linux kernel packages are affected, meaning an attacker could potentially gain unauthorized access to the system. The issue has been fixed in newer package versions. Update t...

9.8

Linux kernel could let attackers execute code

CVE-2026-53260 DEBIAN-CVE-2026-53260 ROOT-OS-DEBIAN-13-CVE-2026-53260 UBUNTU-CVE-2026-53260

Several Linux kernel packages, including standard and cloud variants, contain a flaw that could allow an unauthorized user to run their own code on the system. This could give attackers control over t...

9.9

Debian and Canonical Linux images could let attackers gain root

ROOT-OS-DEBIAN-11-CVE-2025-40252 ROOT-OS-DEBIAN-13-CVE-2025-40252 ROOT-OS-DEBIAN-12-CVE-2025-40252 ROOT-OS-UBUNTU-2404-CVE-2025-40252

The Linux packages used in Debian 13 and several Canonical cloud images have been fixed for a serious security issue that could let an attacker obtain full control of the system. Apply the latest pack...

9.8

Linux packages on Debian and Ubuntu may allow privilege escalation

ROOT-OS-DEBIAN-13-CVE-2025-39975 UBUNTU-CVE-2025-39975 CVE-2025-39975

The Linux kernel packages supplied by Debian and Ubuntu (including cloud and hardware‑enablement versions) contain a security weakness that could let an attacker gain higher privileges on the system. ...

9.8

Linux kernel could let attackers gain system control

ROOT-OS-DEBIAN-11-CVE-2026-23112 BELL-CVE-2026-23112 ROOT-OS-DEBIAN-13-CVE-2026-23112 ROOT-OS-DEBIAN-12-CVE-2026-23112

The core Linux kernel used in several distributions – such as the standard Linux kernel, BellSoft LTS, Debian's version, Canonical's HWE Edge and Amazon Web Services 5.0 builds – had a flaw that could...

9.8

Gitea and OpenTelemetry Collector could let attackers take control

CLEANSTART-2026-BG25300

On Windows systems, a coding error in the cleanstart Gitea and cleanstart OpenTelemetry Collector packages can allow a malicious user to gain full administrative privileges. This could let them run an...

9.8

Linux kernel packages could let attackers gain unauthorized access

CVE-2026-64024 BELL-CVE-2026-64024 ROOT-OS-DEBIAN-13-CVE-2026-64024 DEBIAN-CVE-2026-64024

Several Linux kernel packages, including the standard Linux kernel, BellSoft long‑term support kernels, Debian rootio‑linux, and Canonical HWE and AWS kernels, are affected. The flaw could let a malic...

9.4

TensorFlow GPU Jupyter may allow unauthorized code execution

CLEANSTART-2026-JZ86635

The TensorFlow GPU Jupyter package in version 2.18.1‑r0 contains a flaw that could let an attacker run code on your system. Updating to a newer release removes the risk. Apply the latest version as so...

9.4

Linux packages may let attackers run code

CVE-2026-46316 UBUNTU-CVE-2026-46316 ROOT-OS-DEBIAN-13-CVE-2026-46316 BELL-CVE-2026-46316

The Linux kernel packages for Debian 13 and several Ubuntu variants can be exploited to run malicious code on a system. This could let an attacker take control or disrupt operations. Apply the latest ...

9.3