CVE-2026-68082 | Linux Kernel libceph cls_lock_client.c decode_lockers out-of-bounds
A vulnerability identified as very critical has been detected in Linux Kernel. This impacts the function decode_lockers of the file
Read MoreAuthor: Yanac
CVE-2026-68081 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 nVMX nested_vmx_vmexit memory leak
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc3. Affected is the function nested_vmx_vmexit
Read MoreCVE-2026-19332 | NellyW8 MCP4EDA 1.0.0 run_openlane/view_waveform design_name/vcd_file command injection
A vulnerability marked as critical has been reported in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality
Read MoreCVE-2026-19333 | NightTrek Supabase-MCP generate_types schema command injection
A vulnerability described as critical has been identified in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown functionality
Read MoreCVE-2026-19334 | NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9 src/index.ts name/modelfile/source/destination command injection
A vulnerability classified as critical has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of
Read MoreCVE-2026-19335 | Jane-xiaoer skill-vision-control up to 1.3.0 src/svc/utils/config.ts getSkillVersionsDir skillName path traversal
A vulnerability classified as critical was found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of
Read MoreCVE-2026-19336 | Pimzino spec-workflow-mcp up to 2.2.6 src/tools/approvals.ts ApprovalStorage.createApproval categoryName path traversal
A vulnerability, which was classified as critical, has been found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects the
Read MoreCVE-2026-19337 | adenot mcp-google-search up to 0.3.1 read_webpage src/index.ts url server-side request forgery
A vulnerability, which was classified as critical, was found in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function
Read MoreCVE-2026-19338 | automateyournetwork MCPyATS up to 0.1.4 generate_mermaid_markdown index.ts processGenerateRequest folder/name path traversal
A vulnerability has been found in automateyournetwork MCPyATS up to 0.1.4 and classified as critical. The affected element is the
Read More
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack
Read More