1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 11, 2026, 4:45 AM 17,174 active 1,443 known exploited

Catalog summary

17,174

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 11, 2026, 4:45 AM 17,174 active 1,443 known exploited

Catalog summary

17,174

Active CVEs

8,682

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 7,001–7,050 of 17,174 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-13222Medium
    Insufficient validation of payment status in pretix-oppwa
    CVSS 6.3
    pretix/pretix-oppwageneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  2. CVE-2026-13223Medium
    Insufficient validation of payment status in pretix-computop
    CVSS 6.3
    pretix/pretix-computopgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  3. CVE-2026-13314Low
    Stored XSS in pretix-digital
    CVSS 2.0
    pretix/pretix-digitalgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  4. CVE-2026-46735High
    CISA ADP Vulnrichment
    CVSS 7.8
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  5. CVE-2026-46734High
    CISA ADP Vulnrichment
    CVSS 7.3
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  6. CVE-2026-47154High
    Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  7. CVE-2026-47153High
    Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  8. CVE-2026-47152High
    Level Control Move divide-by-zero in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  9. CVE-2026-47151High
    Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  10. CVE-2026-47150High
    IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  11. CVE-2026-47149High
    Door Lock GetUserType invalid table index in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  12. CVE-2026-47148High
    Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  13. CVE-2026-46732Medium
    CISA ADP Vulnrichment
    CVSS 6.7
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  14. CVE-2026-47147High
    OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  15. CVE-2026-47146High
    Color Control color-temperature assertion abort in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  16. CVE-2026-47145High
    Color Control hue/saturation assertion abort in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  17. CVE-2026-4526High
    Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  18. CVE-2026-41120Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    Dell/Wyse Management Suitegeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  19. CVE-2026-2815High
    Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys
    CVSS 8.4
    Silicon Labs/SiSDKgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  20. CVE-2026-46733High
    CISA ADP Vulnrichment
    CVSS 7.8
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  21. CVE-2026-42389Medium
    Reject more queries with invalid header values
    CVSS 5.3
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  22. CVE-2026-12755Low
    CISA ADP Vulnrichment
    CVSS 2.7
    Devolutions/Servergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 29, 2026 Fix availableView HOL analysis
  23. CVE-2026-27366High
    WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability
    CVSS 7.5
    MainWP/MainWP Childgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 29, 2026View HOL analysis
  24. CVE-2026-42390Medium
    ZONEMD validation can be bypassed
    CVSS 5.3
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  25. CVE-2026-42388Medium
    Missing input validation for catalog zones
    CVSS 5.9
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  26. CVE-2026-42387Medium
    Insufficient input validation in ZoneToCache
    CVSS 5.9
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  27. CVE-2026-40012Medium
    Information about ECS zero scoped answers might leak to clients that use a specific ECS
    CVSS 5.3
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  28. CVE-2026-33612High
    ZoneToCache can poison the cache
    CVSS 7.5
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  29. CVE-2026-42004Low
    EDNS options smuggling
    CVSS 3.7
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  30. CVE-2026-40211Medium
    Denial of service via crafted DoH3 queries
    CVSS 5.3
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  31. CVE-2026-40210Medium
    Out-of-bounds read in SetMacAddrAction
    CVSS 4.8
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  32. CVE-2026-40209Medium
    Denial of service via IXFR queries
    CVSS 5.3
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  33. CVE-2026-40208Low
    Denial of service via DoH3 queries
    CVSS 3.7
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  34. CVE-2026-40011Low
    Prometheus denial of service via crafted DNS queries
    CVSS 3.7
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  35. CVE-2026-42005Medium
    Insufficient input validation of internal web server
    CVSS 4.3
    PowerDNS/Authoritativegeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  36. CVE-2026-53277High
    KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
    CVSS 8.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  37. CVE-2026-53276High
    Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2026-53275High
    ipv6: mcast: Fix use-after-free when processing MLD queries
    CVSS 8.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  39. CVE-2026-53273High
    tee: optee: prevent use-after-free when the client exits before the supplicant
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2026-53270High
    ipvs: clear the svc scheduler ptr early on edit
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  41. CVE-2026-53268High
    netfilter: conntrack_irc: fix possible out-of-bounds read
    CVSS 8.2
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  42. CVE-2026-53267High
    netfilter: nft_ct: bail out on template ct in get eval
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  43. CVE-2026-53266High
    netfilter: bridge: make ebt_snat ARP rewrite writable
    CVSS 8.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2026-53265High
    dm cache policy smq: check allocation under invalidate lock
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-53264High
    net/sched: act_api: use RCU with deferred freeing for action lifecycle
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2026-53262High
    l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  47. CVE-2026-53260Critical
    tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
    CVSS 9.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2026-53259High
    ipv6: anycast: insert aca into global hash under idev->lock
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  49. CVE-2026-53256High
    Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
    CVSS 8.0
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-53254High
    Bluetooth: RFCOMM: validate skb length in MCC handlers
    CVSS 8.1
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 141 of 344
Previous139140141142143Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,682

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 7,001–7,050 of 17,174 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-13222Medium
    Insufficient validation of payment status in pretix-oppwa
    CVSS 6.3
    pretix/pretix-oppwageneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  2. CVE-2026-13223Medium
    Insufficient validation of payment status in pretix-computop
    CVSS 6.3
    pretix/pretix-computopgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  3. CVE-2026-13314Low
    Stored XSS in pretix-digital
    CVSS 2.0
    pretix/pretix-digitalgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  4. CVE-2026-46735High
    CISA ADP Vulnrichment
    CVSS 7.8
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  5. CVE-2026-46734High
    CISA ADP Vulnrichment
    CVSS 7.3
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  6. CVE-2026-47154High
    Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  7. CVE-2026-47153High
    Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  8. CVE-2026-47152High
    Level Control Move divide-by-zero in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  9. CVE-2026-47151High
    Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  10. CVE-2026-47150High
    IAS Zone enroll invalid table index and write in EmberZNet 9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  11. CVE-2026-47149High
    Door Lock GetUserType invalid table index in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  12. CVE-2026-47148High
    Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  13. CVE-2026-46732Medium
    CISA ADP Vulnrichment
    CVSS 6.7
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  14. CVE-2026-47147High
    OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  15. CVE-2026-47146High
    Color Control color-temperature assertion abort in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  16. CVE-2026-47145High
    Color Control hue/saturation assertion abort in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  17. CVE-2026-4526High
    Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2
    CVSS 7.1
    Silicon Labs/EmberZNetgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  18. CVE-2026-41120Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    Dell/Wyse Management Suitegeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 26, 2026 Fix availableView HOL analysis
  19. CVE-2026-2815High
    Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys
    CVSS 8.4
    Silicon Labs/SiSDKgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026View HOL analysis
  20. CVE-2026-46733High
    CISA ADP Vulnrichment
    CVSS 7.8
    Dell/Display and Peripheral Managergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  21. CVE-2026-42389Medium
    Reject more queries with invalid header values
    CVSS 5.3
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  22. CVE-2026-12755Low
    CISA ADP Vulnrichment
    CVSS 2.7
    Devolutions/Servergeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 29, 2026 Fix availableView HOL analysis
  23. CVE-2026-27366High
    WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability
    CVSS 7.5
    MainWP/MainWP Childgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 29, 2026View HOL analysis
  24. CVE-2026-42390Medium
    ZONEMD validation can be bypassed
    CVSS 5.3
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  25. CVE-2026-42388Medium
    Missing input validation for catalog zones
    CVSS 5.9
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  26. CVE-2026-42387Medium
    Insufficient input validation in ZoneToCache
    CVSS 5.9
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  27. CVE-2026-40012Medium
    Information about ECS zero scoped answers might leak to clients that use a specific ECS
    CVSS 5.3
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  28. CVE-2026-33612High
    ZoneToCache can poison the cache
    CVSS 7.5
    PowerDNS/Recursorgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  29. CVE-2026-42004Low
    EDNS options smuggling
    CVSS 3.7
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  30. CVE-2026-40211Medium
    Denial of service via crafted DoH3 queries
    CVSS 5.3
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  31. CVE-2026-40210Medium
    Out-of-bounds read in SetMacAddrAction
    CVSS 4.8
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  32. CVE-2026-40209Medium
    Denial of service via IXFR queries
    CVSS 5.3
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  33. CVE-2026-40208Low
    Denial of service via DoH3 queries
    CVSS 3.7
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  34. CVE-2026-40011Low
    Prometheus denial of service via crafted DNS queries
    CVSS 3.7
    PowerDNS/DNSdistgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  35. CVE-2026-42005Medium
    Insufficient input validation of internal web server
    CVSS 4.3
    PowerDNS/Authoritativegeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Jun 25, 2026 Fix availableView HOL analysis
  36. CVE-2026-53277High
    KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
    CVSS 8.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  37. CVE-2026-53276High
    Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2026-53275High
    ipv6: mcast: Fix use-after-free when processing MLD queries
    CVSS 8.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  39. CVE-2026-53273High
    tee: optee: prevent use-after-free when the client exits before the supplicant
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2026-53270High
    ipvs: clear the svc scheduler ptr early on edit
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  41. CVE-2026-53268High
    netfilter: conntrack_irc: fix possible out-of-bounds read
    CVSS 8.2
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  42. CVE-2026-53267High
    netfilter: nft_ct: bail out on template ct in get eval
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  43. CVE-2026-53266High
    netfilter: bridge: make ebt_snat ARP rewrite writable
    CVSS 8.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2026-53265High
    dm cache policy smq: check allocation under invalidate lock
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-53264High
    net/sched: act_api: use RCU with deferred freeing for action lifecycle
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2026-53262High
    l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  47. CVE-2026-53260Critical
    tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
    CVSS 9.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2026-53259High
    ipv6: anycast: insert aca into global hash under idev->lock
    CVSS 7.8
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  49. CVE-2026-53256High
    Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
    CVSS 8.0
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-53254High
    Bluetooth: RFCOMM: validate skb length in MCC handlers
    CVSS 8.1
    Linux/Linuxgeneric
    PublishedJun 25, 2026First seen at HOL Jun 25, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 141 of 344
Previous139140141142143Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard