1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 12, 2026, 6:23 AM 17,758 active 1,445 known exploited

Catalog summary

17,758

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 12, 2026, 6:23 AM 17,758 active 1,445 known exploited

Catalog summary

17,758

Active CVEs

9,092

Critical + high

1,445

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 9,951–10,000 of 17,758 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-30463High
    CISA ADP Vulnrichment
    CVSS 7.7
    n/a/n/ageneric
    PublishedMar 26, 2026First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  2. CVE-2026-33247High
    NATS credentials are exposed in monitoring port via command-line argv
    CVSS 7.4
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  3. CVE-2026-33219Medium
    NATS is vulnerable to pre-auth DoS through WebSockets client service
    CVSS 5.3
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  4. CVE-2026-33218High
    NATS has pre-auth server panic via leafnode handling
    CVSS 7.5
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  5. CVE-2026-33217High
    NATS allows MQTT clients to bypass ACL checks
    CVSS 7.1
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  6. CVE-2026-33216High
    NATS has MQTT plaintext password disclosure
    CVSS 8.6
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  7. CVE-2026-29785High
    NATS Server panic via malicious compression on leafnode port
    CVSS 7.5
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  8. CVE-2026-27889High
    NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
    CVSS 7.5
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  9. CVE-2026-20108Medium
    CISA ADP Vulnrichment
    CVSS 5.4
    Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedMar 25, 2026First seen at HOL Jun 29, 2026Updated Jun 29, 2026View HOL analysis
  10. CVE-2026-3104High
    Memory leak in code preparing DNSSEC proofs of non-existence
    CVSS 7.5
    ISC/BIND 9generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  11. CVE-2026-1519High
    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
    CVSS 7.5
    ISC/BIND 9generic
    PublishedMar 25, 2026First seen at HOL Jul 3, 2026Updated Aug 3, 2026View HOL analysis
  12. CVE-2026-23392High
    netfilter: nf_tables: release flowtable after rcu grace period on error
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  13. CVE-2026-23391High
    netfilter: xt_CT: drop pending enqueued packets on template removal
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  14. CVE-2026-23385Medium
    netfilter: nf_tables: clone set on flush only
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Aug 3, 2026Updated Aug 9, 2026 Fix availableView HOL analysis
  15. CVE-2026-23381Medium
    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  16. CVE-2026-23379Medium
    net/sched: ets: fix divide by zero in the offload path
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  17. CVE-2026-23378High
    net/sched: act_ife: Fix metalist update behavior
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  18. CVE-2026-23370Medium
    platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  19. CVE-2026-23368Medium
    net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  20. CVE-2026-23365Medium
    net: usb: kalmia: validate USB endpoints
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  21. CVE-2026-23364High
    ksmbd: Compare MACs in constant time
    CVSS 7.4
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Jun 19, 2026Updated Jun 19, 2026 Fix availableView HOL analysis
  22. CVE-2026-23359High
    bpf: Fix stack-out-of-bounds write in devmap
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  23. CVE-2026-23351High
    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  24. CVE-2026-23346Medium
    arm64: io: Extract user memory type in ioremap_prot()
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Jun 19, 2026Updated Jun 19, 2026 Fix availableView HOL analysis
  25. CVE-2026-23343High
    xdp: produce a warning when calculated tailroom is negative
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  26. CVE-2026-23340High
    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  27. CVE-2026-23335Medium
    RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  28. CVE-2026-23321Medium
    mptcp: pm: in-kernel: always mark signal+subflow endp as used
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  29. CVE-2026-23319High
    bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  30. CVE-2026-23310Medium
    bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Jun 19, 2026Updated Jun 19, 2026 Fix availableView HOL analysis
  31. CVE-2026-23304Medium
    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  32. CVE-2026-23300Medium
    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  33. CVE-2026-23293Medium
    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  34. CVE-2026-23290Medium
    net: usb: pegasus: validate USB endpoints
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  35. CVE-2026-23287Medium
    irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  36. CVE-2026-23284Medium
    net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2026-3608High
    Stack overflow in Kea daemons
    CVSS 7.5
    ISC/Keageneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  38. CVE-2026-20664Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Apple/Safari, Apple/iOS and iPadOS +2generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  39. CVE-2026-28859Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Apple/Safari, Apple/iOS and iPadOS +4generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  40. CVE-2026-28861Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Apple/Safari, Apple/iOS and iPadOS +2generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  41. CVE-2026-28857Medium
    CISA ADP Vulnrichment
    CVSS 6.5
    Apple/Safari, Apple/iOS and iPadOS +2generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  42. CVE-2025-67030High
    CISA ADP Vulnrichment
    CVSS 8.8
    n/a/n/ageneric
    PublishedMar 25, 2026First seen at HOL Jul 7, 2026Updated Aug 4, 2026View HOL analysis
  43. CVE-2026-4371High
    Out of bounds read in IMAP parsing
    CVSS 7.4
    Affected software not mappedEcosystem not listed
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  44. CVE-2026-33412Medium
    Vim affected by Command injection via newline in glob()
    CVSS 5.6
    vim/vimgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  45. CVE-2026-4775High
    Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
    CVSS 7.8
    Affected software not mappedEcosystem not listed
    PublishedMar 24, 2026First seen at HOL Jun 25, 2026Updated Jul 15, 2026View HOL analysis
  46. CVE-2026-27651High
    NGINX ngx_mail_auth_http_module vulnerability
    CVSS 7.5
    F5/NGINX Open Source, F5/NGINX Plusgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  47. CVE-2026-27654High
    NGINX ngx_http_dav_module vulnerability
    CVSS 8.2
    F5/NGINX Open Source, F5/NGINX Plusgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  48. CVE-2026-32647High
    NGINX ngx_http_mp4_module vulnerability
    CVSS 7.8
    F5/NGINX Open Source, F5/NGINX Plusgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  49. CVE-2026-27784High
    NGINX ngx_http_mp4_module vulnerability
    CVSS 7.8
    F5/NGINX Open Sourcegeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  50. CVE-2026-4721Critical
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
    CVSS 9.8
    Affected software not mappedEcosystem not listed
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
Page 200 of 356
Previous198199200201202Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

9,092

Critical + high

1,445

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 9,951–10,000 of 17,758 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-30463High
    CISA ADP Vulnrichment
    CVSS 7.7
    n/a/n/ageneric
    PublishedMar 26, 2026First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  2. CVE-2026-33247High
    NATS credentials are exposed in monitoring port via command-line argv
    CVSS 7.4
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  3. CVE-2026-33219Medium
    NATS is vulnerable to pre-auth DoS through WebSockets client service
    CVSS 5.3
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  4. CVE-2026-33218High
    NATS has pre-auth server panic via leafnode handling
    CVSS 7.5
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  5. CVE-2026-33217High
    NATS allows MQTT clients to bypass ACL checks
    CVSS 7.1
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  6. CVE-2026-33216High
    NATS has MQTT plaintext password disclosure
    CVSS 8.6
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  7. CVE-2026-29785High
    NATS Server panic via malicious compression on leafnode port
    CVSS 7.5
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  8. CVE-2026-27889High
    NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
    CVSS 7.5
    nats-io/nats-servergeneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Aug 10, 2026View HOL analysis
  9. CVE-2026-20108Medium
    CISA ADP Vulnrichment
    CVSS 5.4
    Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedMar 25, 2026First seen at HOL Jun 29, 2026Updated Jun 29, 2026View HOL analysis
  10. CVE-2026-3104High
    Memory leak in code preparing DNSSEC proofs of non-existence
    CVSS 7.5
    ISC/BIND 9generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  11. CVE-2026-1519High
    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
    CVSS 7.5
    ISC/BIND 9generic
    PublishedMar 25, 2026First seen at HOL Jul 3, 2026Updated Aug 3, 2026View HOL analysis
  12. CVE-2026-23392High
    netfilter: nf_tables: release flowtable after rcu grace period on error
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  13. CVE-2026-23391High
    netfilter: xt_CT: drop pending enqueued packets on template removal
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  14. CVE-2026-23385Medium
    netfilter: nf_tables: clone set on flush only
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Aug 3, 2026Updated Aug 9, 2026 Fix availableView HOL analysis
  15. CVE-2026-23381Medium
    net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  16. CVE-2026-23379Medium
    net/sched: ets: fix divide by zero in the offload path
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  17. CVE-2026-23378High
    net/sched: act_ife: Fix metalist update behavior
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  18. CVE-2026-23370Medium
    platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  19. CVE-2026-23368Medium
    net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  20. CVE-2026-23365Medium
    net: usb: kalmia: validate USB endpoints
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  21. CVE-2026-23364High
    ksmbd: Compare MACs in constant time
    CVSS 7.4
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Jun 19, 2026Updated Jun 19, 2026 Fix availableView HOL analysis
  22. CVE-2026-23359High
    bpf: Fix stack-out-of-bounds write in devmap
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  23. CVE-2026-23351High
    netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  24. CVE-2026-23346Medium
    arm64: io: Extract user memory type in ioremap_prot()
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Jun 19, 2026Updated Jun 19, 2026 Fix availableView HOL analysis
  25. CVE-2026-23343High
    xdp: produce a warning when calculated tailroom is negative
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  26. CVE-2026-23340High
    net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  27. CVE-2026-23335Medium
    RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  28. CVE-2026-23321Medium
    mptcp: pm: in-kernel: always mark signal+subflow endp as used
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  29. CVE-2026-23319High
    bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  30. CVE-2026-23310Medium
    bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
    CVSS 5.5
    Linux/Linuxgeneric
    PublishedMar 25, 2026First seen at HOL Jun 19, 2026Updated Jun 19, 2026 Fix availableView HOL analysis
  31. CVE-2026-23304Medium
    ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  32. CVE-2026-23300Medium
    net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  33. CVE-2026-23293Medium
    net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  34. CVE-2026-23290Medium
    net: usb: pegasus: validate USB endpoints
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  35. CVE-2026-23287Medium
    irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  36. CVE-2026-23284Medium
    net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedMar 25, 2026First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2026-3608High
    Stack overflow in Kea daemons
    CVSS 7.5
    ISC/Keageneric
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  38. CVE-2026-20664Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Apple/Safari, Apple/iOS and iPadOS +2generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  39. CVE-2026-28859Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Apple/Safari, Apple/iOS and iPadOS +4generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  40. CVE-2026-28861Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Apple/Safari, Apple/iOS and iPadOS +2generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  41. CVE-2026-28857Medium
    CISA ADP Vulnrichment
    CVSS 6.5
    Apple/Safari, Apple/iOS and iPadOS +2generic
    PublishedMar 25, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  42. CVE-2025-67030High
    CISA ADP Vulnrichment
    CVSS 8.8
    n/a/n/ageneric
    PublishedMar 25, 2026First seen at HOL Jul 7, 2026Updated Aug 4, 2026View HOL analysis
  43. CVE-2026-4371High
    Out of bounds read in IMAP parsing
    CVSS 7.4
    Affected software not mappedEcosystem not listed
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  44. CVE-2026-33412Medium
    Vim affected by Command injection via newline in glob()
    CVSS 5.6
    vim/vimgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
  45. CVE-2026-4775High
    Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
    CVSS 7.8
    Affected software not mappedEcosystem not listed
    PublishedMar 24, 2026First seen at HOL Jun 25, 2026Updated Jul 15, 2026View HOL analysis
  46. CVE-2026-27651High
    NGINX ngx_mail_auth_http_module vulnerability
    CVSS 7.5
    F5/NGINX Open Source, F5/NGINX Plusgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  47. CVE-2026-27654High
    NGINX ngx_http_dav_module vulnerability
    CVSS 8.2
    F5/NGINX Open Source, F5/NGINX Plusgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  48. CVE-2026-32647High
    NGINX ngx_http_mp4_module vulnerability
    CVSS 7.8
    F5/NGINX Open Source, F5/NGINX Plusgeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  49. CVE-2026-27784High
    NGINX ngx_http_mp4_module vulnerability
    CVSS 7.8
    F5/NGINX Open Sourcegeneric
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026 Fix availableView HOL analysis
  50. CVE-2026-4721Critical
    Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
    CVSS 9.8
    Affected software not mappedEcosystem not listed
    PublishedMar 24, 2026First seen at HOL Jul 15, 2026Updated Jul 15, 2026View HOL analysis
Page 200 of 356
Previous198199200201202Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard