CVE Vulnerabilities - 17 October 2026

Patreon WordPress plugin can reveal hidden taxonomy names

CVE-2026-92431

The Patreon plugin for WordPress (versions before 1.10.0) lets anyone on the internet see the names of categories or tags, even those meant to stay private. This exposure could give attackers insight ...

3.7

LatePoint plugin may reveal customer data to anyone

CVE-2026-111602

The LatePoint appointment booking plugin for WordPress can let anyone who is not logged in view the first name, last name, email, phone number, and notes of every customer if the site is set to guest ...

3.7

Linux kernel can mix data on cryptographic sockets

CVE-2025-39964 ROOT-OS-DEBIAN-13-CVE-2025-39964 ROOT-OS-DEBIAN-11-CVE-2025-39964 ROOT-OS-DEBIAN-12-CVE-2025-39964

The core Linux operating system code used by many distributions can accidentally combine data from different sources when two programs write to the same cryptographic socket at the same time. This can...

3.3 KEV

Linux kernel permits privilege escalation on Debian 13

DEBIAN-CVE-2025-71134 CVE-2025-71134 ROOT-OS-DEBIAN-13-CVE-2025-71134 UBUNTU-CVE-2025-71134

The Linux kernel version shipped with Debian 13 contained a weakness that could let a malicious user gain higher system privileges. This could allow an attacker to control the entire server. Install t...

3.3

Linux kernel packages may let attackers run code

DEBIAN-CVE-2026-23321 ROOT-OS-DEBIAN-13-CVE-2026-23321 ROOT-OS-UBUNTU-2404-CVE-2026-23321 CVE-2026-23321

Several Canonical Linux kernel packages, including the standard and cloud versions, have a weakness that could allow a malicious user to run their own code on the server. This could give the attacker ...

3.3

Canonical Linux packages need security update

CVE-2026-23380 DEBIAN-CVE-2026-23380 ROOT-OS-DEBIAN-13-CVE-2026-23380 UBUNTU-CVE-2026-23380

Several Ubuntu kernel packages from Canonical (linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, and linux-azure-5.3) had a security weakness that has now been fixed. Apply the latest package...

3.3

Ubuntu Linux packages need update to fix security risk

DEBIAN-CVE-2026-23335 ROOT-OS-DEBIAN-13-CVE-2026-23335 ROOT-OS-DEBIAN-12-CVE-2026-23335 ROOT-OS-UBUNTU-2404-CVE-2026-23335

Several Ubuntu Linux packages, including the standard kernel and cloud-specific versions for AWS and Azure, are affected by a security issue that could allow unauthorized actions. Updating to the late...

3.3

Linux packages could let attackers gain system control

CVE-2024-36331 ROOT-OS-DEBIAN-11-CVE-2024-36331 ROOT-OS-DEBIAN-13-CVE-2024-36331 ROOT-OS-DEBIAN-12-CVE-2024-36331

The Linux packages used in Debian and several Canonical Azure images have a security weakness that could allow an attacker to take control of the system. This issue has been fixed in newer package ver...

3.2

CGA-4x56-w5xg-2c8g

CGA-4x56-w5xg-2c8g

3.1

CGA-q9h2-frpg-975f

CGA-q9h2-frpg-975f

3.1

CGA-pqp2-9ph3-vj8f

CGA-pqp2-9ph3-vj8f

3.1

CGA-2r37-fh72-wgj7

CGA-2r37-fh72-wgj7

3.1

CGA-fhhj-2wgp-7whj

CGA-fhhj-2wgp-7whj

3.1

CGA-2c59-3698-wwc6

CGA-2c59-3698-wwc6

3.1

CGA-ch94-pc9v-v539

CGA-ch94-pc9v-v539

3.1

CGA-6f5g-pg8m-rhh7

CGA-6f5g-pg8m-rhh7

3.1

CGA-9w36-5fqj-2xgf

CGA-9w36-5fqj-2xgf

3.1

CGA-76c5-m2qh-x8r9

CGA-76c5-m2qh-x8r9

3.1

CGA-2rpf-2hqw-78jj

CGA-2rpf-2hqw-78jj

3.1

CGA-8vjj-xvhr-cprm

CGA-8vjj-xvhr-cprm

3.1

CGA-g3j4-r97m-chv6

CGA-g3j4-r97m-chv6

3.1

CGA-jvpg-w7rm-2g48

CGA-jvpg-w7rm-2g48

3.1

CGA-9pfq-27w7-7vw6

CGA-9pfq-27w7-7vw6

3.1

CGA-5jj6-mfgv-8rqr

CGA-5jj6-mfgv-8rqr

3.1

CGA-wh5f-2rxv-f65x

CGA-wh5f-2rxv-f65x

3.1