CVE Vulnerabilities - 17 October 2026

Gitea Runner lets users alter Docker settings without privilege

CLEANSTART-2026-DC26983

The Gitea Runner component can accept container options that are defined in a workflow and apply them to the Docker container it starts, even when the runner is not running in privileged mode. This me...

9.9

phpMyFAQ lets attackers log in without password

CVE-2026-111911

Versions of phpMyFAQ from 4.0.0 up to 4.1.8 let a malicious user add a passkey to any account without proving they own it. This means an attacker could create a credential for a victim’s username and ...

9.9

LearnPress plugin allows attackers to run code via email field

CVE-2026-104736

The LearnPress learning management plugin for WordPress lets anyone send specially crafted data in the checkout email field, which the system stores and later processes without proper checks. This can...

9.8

Linux packages may allow attackers to gain system control

ROOT-OS-DEBIAN-12-CVE-2025-68315 DEBIAN-CVE-2025-68315 ROOT-OS-DEBIAN-13-CVE-2025-68315 ROOT-OS-DEBIAN-11-CVE-2025-68315

Several Linux package versions from Debian, BellSoft and Canonical could be exploited to obtain unauthorized access to the system. The issue has been fixed in newer releases of these packages. Apply t...

8.3

Linux packages may let attackers gain full system control

ROOT-OS-DEBIAN-11-CVE-2026-31405 DEBIAN-CVE-2026-31405 ROOT-OS-DEBIAN-12-CVE-2026-31405 BELL-CVE-2026-31405

The problem affects Linux packages from Debian and Ubuntu (including AWS and FIPS versions), where a flaw could let an attacker take complete control of the system. Gaining this level of access would ...

8.1

Linux packages could let attackers gain system control

ROOT-OS-DEBIAN-13-CVE-2025-40343 ROOT-OS-DEBIAN-11-CVE-2025-40343 ROOT-OS-DEBIAN-12-CVE-2025-40343 CVE-2025-40343

Several Linux distributions, including Debian and Canonical's cloud images for Azure, AWS, GCP, and hardware enablement, contain a flaw that could allow an attacker to take control of the system. This...

9.8

Linux kernel could let attackers gain system control

ROOT-OS-DEBIAN-11-CVE-2026-23112 BELL-CVE-2026-23112 ROOT-OS-DEBIAN-13-CVE-2026-23112 ROOT-OS-DEBIAN-12-CVE-2026-23112

The core Linux kernel used in several distributions – such as the standard Linux kernel, BellSoft LTS, Debian's version, Canonical's HWE Edge and Amazon Web Services 5.0 builds – had a flaw that could...

9.8

Linux packages could let attackers gain full system control

BELL-CVE-2026-64067 ROOT-OS-DEBIAN-13-CVE-2026-64067 CVE-2026-64067 DEBIAN-CVE-2026-64067

Several Linux distributions have a flaw that could allow an attacker to run code with full system privileges. The issue has been fixed in recent updates for the affected Linux packages. Install the la...

9.8

Linux kernels patched to stop unauthorized system access

ROOT-OS-DEBIAN-12-CVE-2025-40258 ROOT-OS-DEBIAN-11-CVE-2025-40258 ROOT-OS-DEBIAN-13-CVE-2025-40258 CVE-2025-40258

Recent updates fix a security weakness in several Linux kernel packages, including Debian's rootio-linux and Canonical's Linux HWE Edge and AWS builds. The flaw could let an attacker gain higher privi...

9.8

Debian and Canonical Linux 5.15 packages may allow privilege escalation

ROOT-OS-DEBIAN-12-CVE-2025-68263 ROOT-OS-DEBIAN-13-CVE-2025-68263 ROOT-OS-UBUNTU-2404-CVE-2025-68263 DEBIAN-CVE-2025-68263

The Linux kernel packages for Debian 13 and several Ubuntu cloud images (AWS, Azure, Azure FDE, GCP) contain a flaw that could let an attacker gain higher system permissions. This can lead to unauthor...

9.9

Linux kernel allows unauthorized remote control

ROOT-OS-DEBIAN-13-CVE-2025-38533 CVE-2025-38533 ROOT-OS-UBUNTU-2404-CVE-2025-38533 UBUNTU-CVE-2025-38533

A security flaw in the Linux kernel could let an attacker gain full access to affected servers. The issue impacts Debian and other Linux distributions that use the standard kernel. Install the latest ...

9.8

Linux packages on Debian and Ubuntu could be exploited

ROOT-OS-DEBIAN-13-CVE-2025-21988 CVE-2025-21988 UBUNTU-CVE-2025-21988

Several Linux packages used in Debian and Ubuntu distributions have a weakness that could let an attacker gain control of a system. The issue has been fixed in newer releases, so updating to the lates...

9.8

Linux kernel may allow unauthorized system access

CVE-2026-53151 DEBIAN-CVE-2026-53151 ROOT-OS-DEBIAN-13-CVE-2026-53151 BELL-CVE-2026-53151

Several Linux kernel packages for Debian 13 and Ubuntu variants have been updated to close a security weakness. The flaw could let an attacker gain higher privileges or run code on the server. Install...

8.6

Linux kernel can let attackers run code

ROOT-OS-DEBIAN-13-CVE-2025-40257 ROOT-OS-DEBIAN-12-CVE-2025-40257 ROOT-OS-UBUNTU-2204-CVE-2025-40257 UBUNTU-CVE-2025-40257

The Linux kernel packages supplied by Debian and Canonical contain a flaw that could allow an attacker to execute unauthorized code on the system. This could give the attacker the same rights as the o...

7.9

Linux packages on Debian and Ubuntu may allow privilege escalation

ROOT-OS-DEBIAN-13-CVE-2025-39975 UBUNTU-CVE-2025-39975 CVE-2025-39975

The Linux kernel packages supplied by Debian and Ubuntu (including cloud and hardware‑enablement versions) contain a security weakness that could let an attacker gain higher privileges on the system. ...

9.8

Linux packages could let attackers gain system control

CVE-2025-40176 UBUNTU-CVE-2025-40176 ROOT-OS-UBUNTU-2404-CVE-2025-40176 ROOT-OS-DEBIAN-13-CVE-2025-40176

Several Linux package versions, including standard Linux and specific cloud‑focused builds, contain a flaw that could allow an attacker to take control of the operating system. The issue has been fixe...

7.9

Debian and Canonical Linux images could let attackers gain root

ROOT-OS-DEBIAN-11-CVE-2025-40252 ROOT-OS-DEBIAN-13-CVE-2025-40252 ROOT-OS-DEBIAN-12-CVE-2025-40252 ROOT-OS-UBUNTU-2404-CVE-2025-40252

The Linux packages used in Debian 13 and several Canonical cloud images have been fixed for a serious security issue that could let an attacker obtain full control of the system. Apply the latest pack...

9.8

Linux kernel could let attackers execute code

CVE-2026-53260 DEBIAN-CVE-2026-53260 ROOT-OS-DEBIAN-13-CVE-2026-53260 UBUNTU-CVE-2026-53260

Several Linux kernel packages, including standard and cloud variants, contain a flaw that could allow an unauthorized user to run their own code on the system. This could give attackers control over t...

9.9

Linux for Debian 13 update stops attackers from taking control

ROOT-OS-DEBIAN-12-CVE-2026-64530 ROOT-OS-DEBIAN-13-CVE-2026-64530 DEBIAN-CVE-2026-64530 CVE-2026-64530

Several Linux packages used on Debian 13, including the main kernel and cloud‑specific builds, have been updated to close a security hole that could let an attacker execute code with your system’s pri...

9.8

Canonical Linux packages need update to stop remote takeover

ROOT-OS-UBUNTU-2204-CVE-2026-43185 CVE-2026-43185 ROOT-OS-DEBIAN-13-CVE-2026-43185 DEBIAN-CVE-2026-43185

The Linux packages named linux‑hwe, linux‑hwe‑edge, linux‑aws‑5.0, linux‑aws‑5.3 and linux‑azure on Debian 13 have a security gap that could let an attacker run code on your server. Updating to the la...

9.9

Linux kernel updated to block known exploit

CVE-2025-68284 ROOT-OS-UBUNTU-2204-CVE-2025-68284 ROOT-OS-DEBIAN-12-CVE-2025-68284 ROOT-OS-DEBIAN-13-CVE-2025-68284

The core part of the Linux operating system used in Debian 13 has been updated to fix a security problem that could let an attacker take control of the system. Installing the latest package from the o...

9.9

Linux kernel update stops remote code execution

ROOT-OS-DEBIAN-13-CVE-2026-64216 CVE-2026-64216 DEBIAN-CVE-2026-64216 ROOT-OS-UBUNTU-2204-CVE-2026-64216

The Linux kernel package in Debian 13 has been repaired to close a security hole that could let attackers run their own code on the system. This could let a malicious user take control of the server o...

9.8

Canonical Linux packages may allow unauthorized code execution

CVE-2026-46325 DEBIAN-CVE-2026-46325 UBUNTU-CVE-2026-46325 ROOT-OS-DEBIAN-13-CVE-2026-46325

Several Canonical Linux packages, including the HWE Edge, AWS, and Azure versions, contain a flaw that could let an attacker run their own code on the system. This can compromise the security and stab...

9.8

Linux kernel and Azure Linux images vulnerable to remote code execution

CVE-2025-68285 ROOT-OS-DEBIAN-12-CVE-2025-68285 ROOT-OS-DEBIAN-13-CVE-2025-68285 UBUNTU-CVE-2025-68285

The core part of Linux used in Debian 13 and several Microsoft Azure Linux images had a security hole that could let an attacker run their own code on your server. Updates that close the hole are now ...

9.8

Linux (Debian/Ubuntu) can be remotely compromised

DEBIAN-CVE-2026-31536 ROOT-OS-DEBIAN-13-CVE-2026-31536 ROOT-OS-DEBIAN-12-CVE-2026-31536 BELL-CVE-2026-31536

A security weakness in the Linux kernel package for Debian 13 and the corresponding Ubuntu and cloud images could let an attacker gain full control of the system. The issue has been fixed in recent up...

8.9