Vuldb Updates

A vulnerability was found in Intrado 911 Emergency Gateway 5.x/6.x/7.x and classified as critical. This affects an unknown function of the component EGW Management Interface. The manipulation results in path traversal: '.../...//'. This vulnerability is reported as CVE-2026-6074. The attack can be launched remotely. No exploit exists.

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.74/6.18.15/6.19.5. Impacted is the function devm_kmemdup of the component wifi. Executing a manipulation can lead to memory leak. This vulnerability is handled as CVE-2025-71273. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Siemens Simcenter Femap up to 2512.2. This issue affects some unknown processing of the component IPT File Handler. Performing a manipulation results in heap-based buffer overflow. This vulnerability is known as CVE-2025-12659. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Jupyter notebook up to 4.5.6. The affected element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-42557. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability described as problematic has been identified in GitHub copilot-cli up to 1.0.42. The impacted element is an unknown function. Executing a manipulation can lead to incorrect behavior order. The identification of this vulnerability is CVE-2026-45033. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Anthropic claude-code up to 1.0.120. It has been classified as problematic. This vulnerability affects unknown code of the file ~/.ssh/known_hosts of the component Graphical Interface. The manipulation leads to certificate with host mismatch. This vulnerability is documented as CVE-2026-44467. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability described as critical has been identified in Anthropic claude-code up to 1.3834.0 on Windows. Affected is an unknown function of the component Graphical Interface. The manipulation results in link following. This vulnerability was named CVE-2026-44470. The attack needs to be approached locally. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability has been found in Linux Kernel up to 6.19.10 and classified as critical. This issue affects the function ext_caps. This manipulation causes privilege escalation. The identification of this vulnerability is CVE-2026-31460. The attack needs to be done within the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.18.20/6.19.10 and classified as critical. Impacted is the function damon_sysfs_new_test_ctx of the file mm/damon/sysfs. Such manipulation leads to memory leak. This vulnerability is referenced as CVE-2026-31459. The attack needs to be initiated within the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.20/6.19.10. This issue affects the function damon_sysfs_repeat_call_fn of the component DAMON Sysfs Interface. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2026-31457. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.130/6.12.79/6.18.20/6.19.10. Impacted is the function damon_sysfs_handle_cmd. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-31458. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.20/6.19.10. This affects the function walk_pud_range. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2026-31456. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.19.10. It has been rated as critical. This vulnerability affects the function xfs_unmount_flush_inodes of the component xfs. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2026-31455. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.19.10. Affected by this vulnerability is the function ext4_setattr of the component ext4. Executing a manipulation can lead to denial of service. The identification of this vulnerability is CVE-2026-31452. The attack needs to be done within the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.167/6.6.130/6.12.79/6.18.20/6.19.10. It has been declared as critical. This affects the function xfsaild_push_item. Such manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2026-31453. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.19.10. The impacted element is the function xfs_inode_item_push. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2026-31454. The attack requires local access. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.130/6.12.79/6.18.20/6.19.10. It has been classified as critical. Affected by this issue is some unknown functionality of the component ext4. This manipulation causes memory leak. The identification of this vulnerability is CVE-2026-31451. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical was found in Linux Kernel up to 6.19.10. This impacts the function ext4_inode_attach_jinode of the component ext4. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2026-31450. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as problematic was found in Passeum Ticketing Plugin up to 1.0 on WordPress. The affected element is the function get_shop_url of the component Setting Handler. The manipulation of the argument shop_name results in cross site scripting. This vulnerability was named CVE-2026-7421. The attack may be performed from remote. There is no available exploit.

A vulnerability described as problematic has been identified in johnhuang316 code-index-mcp up to 2.14.0. Affected is the function is_safe_regex_pattern of the component search_code_advanced. Executing a manipulation of the argument regex can lead to inefficient regular expression complexity. This vulnerability is registered as CVE-2026-10692. It is possible to launch the attack remotely. Furthermore, an exploit is available. Upgrading the affected component is recommended.