Vulnerability research track record.

• 01CVE-2026-3849wolfSSLHPKE (ECH)Stack buffer overflowMED 6.9Stack overflow in wc_HpkeLabeledExtract via oversized ECH config. Malicious ECH configs overflow the client stack during Encrypted Client Hello. Patched by wolfSSL within hours.
  Open the advisory ↗
• 02CVE-2026-2646wolfSSLSession ParsingHeap buffer overflowMED 5.0Heap overflow in wolfSSL_d2i_SSL_SESSION. Certificate and session ID lengths deserialized from untrusted input without bounds validation when SESSION_CERTS is enabled.
  Open the advisory ↗
• 03CVE-2026-4395wolfSSLwolfcrypt ECCHeap buffer overflowLOW 1.3Heap overflow in wc_ecc_import_x963_ex on the KCAPI path. A crafted oversized EC public key point writes attacker-controlled data past the pubkey_raw buffer.
  Open the advisory ↗
• 04CVE-2026-4159wolfSSLPKCS#7Out-of-bounds heap readLOW 1.21-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData triggered by CMS EnvelopedData with zero-length encrypted content. Affects wolfSSL 5.8.4 and earlier.
  Open the advisory ↗
• 05CVE-2026-33593PowerDNSDNSdistDivide-by-zero denial of serviceHIGH 7.5Crafted DNSCrypt query triggers a divide-by-zero that crashes DNSdist. Affects 1.9.0–1.9.12 and 2.0.0–2.0.3; patched in 1.9.13 and 2.0.4.
  Open the advisory ↗
• 06CVE-2026-33259PowerDNSRecursorRPZ use-after-freeMED 5.0Concurrent transfers of the same RPZ desynchronize internal state, producing use-after-free and recursor crashes. Affects 5.2.0–5.2.8, 5.3.0–5.3.5, and 5.4.0.
  Open the advisory ↗
• 07CVE-2026-33258PowerDNSRecursorUnbounded NSEC(3) cache allocationMED 5.3Crafted zone forces large allocations in the negative and aggressive NSEC(3) caches, exhausting recursor memory. Affects 5.2.0–5.2.8, 5.3.0–5.3.5, and 5.4.0.
  Open the advisory ↗
• 08CVE-2026-6766MozillaFirefox NSSInteger underflow in tls13_AEADMED 5.3Missing length guard in tls13_AEAD causes inLen - tagLen to underflow on short QUIC records, producing a wild-address write during AEAD decryption. Affects users with external PKCS#11 modules; fixed in Firefox 150 and Firefox ESR 140.10.
  Open the advisory ↗
• 09CVE-2026-6767MozillaFirefox NSS (mozpkix)mozpkix name-constraint bypassMED 6.8mozpkix matches wildcard DNS SANs against narrower dNSName name constraints, letting a name-constrained CA escape its permitted namespace. Fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
  Open the advisory ↗
• 10CVE-2026-42011GnuTLSCertificate name constraintsName-constraint bypass (CWE-295)HIGH 7.4GnuTLS incorrectly ignored permitted name constraints when prior CAs in the chain carried only excluded constraints, letting a name-constrained CA escape its permitted namespace and enabling spoofing or MITM. Coordinated through Red Hat; affects RHEL 6–10 and OpenShift Container Platform.
  Open the advisory ↗
• 11CVE-2026-33846GnuTLSDTLS handshake reassemblyHeap buffer overflowHIGH 7.5DTLS handshake fragments with inconsistent message_length values can be merged into a buffer sized from a smaller fragment, causing an out-of-bounds heap write. Fixed in GnuTLS 3.8.13.
  Open the advisory ↗
• 12CVE-2026-42013GnuTLSCertificate hostname validationCertificate misuseMEDCertificates with oversized Subject Alternative Names could fall back to Common Name hostname checks, allowing validation behavior outside the intended SAN boundary. Fixed in GnuTLS 3.8.13.
  Open the advisory ↗
• 13CVE-2026-34875Arm Mbed TLSPSA Crypto FFDHBuffer overflow in FFDH public key exportCRIT 9.8psa_export_public_key() fails to verify the caller-provided output buffer is large enough for FFDH public keys, overflowing the buffer during export. Fixed in Mbed TLS 3.6.6 and TF-PSA-Crypto 1.1.0.
  Open the advisory ↗
• 14CVE-2026-34874Arm Mbed TLSX.509 distinguished namesNULL pointer dereferenceHIGH 7.5Allocation failure during mbedtls_x509_string_to_names() can drive memcpy() with a NULL destination, causing denial of service on protected platforms and possible address-0 writes on microcontrollers. Fixed in 3.6.6 and 4.1.0.
  Open the advisory ↗
• 15CVE-2026-25833Arm Mbed TLSx509_inet_pton_ipv6()Buffer underflow / underreadHIGH 7.5The fallback IPv6 parser can walk before the start of the input buffer when handling IPv4-mapped portions, causing a small buffer underread and rare denial-of-service conditions. Fixed in 3.6.6 and 4.1.0.
  Open the advisory ↗
• 16CVE-2026-35328strongSwanlibtls supported_versionsInfinite loop denial of serviceHIGH 7.5Malformed TLS supported_versions extensions with odd byte length leave libtls stuck in process_client_hello(), allowing unauthenticated attackers to exhaust the daemon's thread pool. Affects strongSwan 5.9.2 and later; fixed in 6.0.6.
  Open the advisory ↗
• 17CVE-2026-35329strongSwanPKCS#5 / PKCS#7NULL pointer dereferenceHIGH 7.5Zero-length plaintext in encrypted PKCS#5 or PKCS#7 containers reaches padding removal code that reads the last byte without checking that data exists. Remotely reachable via IKEv1 CERT payloads; fixed in 6.0.6.
  Open the advisory ↗
• 18CVE-2026-35331strongSwanconstraints pluginX.509 name-constraint bypassHIGH 7.4Case-sensitive matching in the constraints plugin lets certificates violate excluded X.509 name constraints by varying case while regular identity matching remains case-insensitive. Affects strongSwan 4.5.1 and later; fixed in 6.0.6.
  Open the advisory ↗
• 19CVE-2026-35332strongSwanlibtls ECDHNULL pointer dereferenceHIGH 7.5TLS versions before 1.3 accept an empty ECDH ClientKeyExchange public value, which can crash the libtls server path during EAP-TLS processing. Affects strongSwan 4.5.0 and later; fixed in 6.0.6.
  Open the advisory ↗
• 20CVE-2026-35333strongSwanlibradiusInteger underflow / infinite loopHIGH 7.5RADIUS attributes with length 0 or 1 underflow attribute parsing state and can trigger an infinite loop or out-of-bounds read in libradius. Fixed in 6.0.6.
  Open the advisory ↗
• 21CVE-2026-6665PostgreSQLPgBouncer SCRAMStack buffer overflow (CWE-121)CRIT 9.8PgBouncer's SCRAM authentication path assembles the client-final-message with strlcat() but ignores the return value, so a malicious PostgreSQL backend supplying an oversized nonce in server-final-message overflows the on-stack response buffer. Affects PgBouncer prior to 1.25.2.
  Open the advisory ↗
• 22CVE-2026-6666PostgreSQLPgBouncerNULL pointer dereference (CWE-476)HIGH 7.5PgBouncer crashes when a backend PostgreSQL server returns an ErrorResponse lacking the SQLSTATE field — the parser dereferences a NULL pointer, terminating the pooler and disconnecting every client multiplexed through it. Affects PgBouncer prior to 1.25.2.
  Open the advisory ↗
• 23CVE-2026-6667PostgreSQLPgBouncer admin consoleMissing authorization (CWE-862)MED 4.3PgBouncer's KILL_CLIENT admin command is reachable from any authenticated console session, not only from accounts listed in admin_users. A non-admin operator can sever arbitrary client sessions — an integrity gap against the pooler's documented privilege boundary. Affects PgBouncer prior to 1.25.2.
  Open the advisory ↗
• 24CVE-2026-34786RackRack::StaticHeader rules bypass (CWE-180)MED 5.3Rack::Static evaluated header_rules against the raw URL-encoded path while serving the decoded file, so a request for an encoded variant of a static path returned the file without the intended response headers. Fixed in Rack 2.2.23, 3.1.21, and 3.2.6.
  Open the advisory ↗
• 25CVE-2026-34763RackRack::DirectoryPermissive regular expression (CWE-625)MED 5.3Rack::Directory interpolated the configured root path into a regular expression without escaping it; a root path containing regex metacharacters could make the generated directory listing expose the full filesystem path. Fixed in Rack 2.2.23, 3.1.21, and 3.2.6.
  Open the advisory ↗
• 26CVE-2026-34500ApacheTomcatOCSP check soft-fails when disabledMED 6.5When FFM is used, CLIENT_CERT authentication could fail to reject as expected in some OCSP scenarios even with soft-fail disabled. Affects Tomcat 9.0.92–9.0.116, 10.1.22–10.1.53, and 11.0.0-M14–11.0.20; fixed in 9.0.117, 10.1.54, and 11.0.21.
  Open the advisory ↗
• 27CVE-2026-34477ApacheLog4j Core TLS configurationHostname verification bypass (CWE-297)MED 6.3The verifyHostName attribute of the <Ssl> element was silently ignored, leaving TLS connections from SMTP, Socket, and Syslog appenders without hostname verification and exposed to man-in-the-middle attacks under certain conditions. An incomplete fix of CVE-2025-68161; fixed in Log4j Core 2.25.4.
  Open the advisory ↗
• 28CVE-2026-40948ApacheAirflow Keycloak providerOAuth login CSRF (CWE-352)MED 5.4The Keycloak auth manager neither generated nor validated the OAuth 2.0 state parameter and did not use PKCE, so an attacker with an account in the same Keycloak realm could log a victim into the attacker's Airflow session. Fixed in apache-airflow-providers-keycloak 0.7.0.
  Open the advisory ↗
• 29CVE-2026-33523ApacheHTTP ServerHTTP response splitting (CWE-443)MED 6.5Multiple modules could forward a malicious status line from an untrusted or compromised backend server, enabling HTTP response splitting. Affects 2.4.0 through 2.4.66; fixed in 2.4.67.
  Open the advisory ↗
• 30CVE-2026-9076OpenSSLCMS password-based decryptionOut-of-bounds heap read (CWE-125)HIGH 7.5When decrypting attacker-supplied CMS data with a password (PWRI), an attacker-chosen stream-mode KEK cipher can trigger a heap over-read in kek_unwrap_key() that may crash the application; the over-read bytes are not revealed. Fixed in OpenSSL 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21.
  Open the advisory ↗
• 31CVE-2026-11940PythonCPython tarfileExtraction filter bypass (CWE-22, CWE-59)HIGH 7.8A crafted archive in which a hardlink references a symlink stored at a deeper path lets tarfile.extractall() with the 'data' or 'tar' filter recreate that symlink at a shallower path, escaping the destination directory. An incomplete fix of CVE-2025-4330.
  Open the advisory ↗
• 32CVE-2026-12246NLnet LabsNSDOut-of-bounds stack write (CWE-120)HIGH 7.2A crafted APL resource record with an adflength larger than its address family permits overwrites the stack with up to 111 attacker-controlled bytes when the zone is written to disk. Introduced in NSD 4.14.0; fixed in 4.14.3.
  Open the advisory ↗
• 33CVE-2026-40011PowerDNSDNSdistPrometheus endpoint denial of serviceLOW 3.7A large number of crafted DNS queries can cause a dynamic block to be inserted with a value that produces invalid Prometheus output, so scrapers reject the endpoint until the block expires. Fixed in 1.9.15 and 2.0.7.
  Open the advisory ↗
• 34CVE-2026-10512wolfSSLX25519 (x86_64 assembly)Incorrect calculation (CWE-682)LOW 2.3The x86_64 assembly's final modular reduction did not clear the top bit, so X25519 results could be left in non-canonical form, producing an incorrect scalar-multiplication result and potentially a wrong shared secret. Affects wolfSSL 5.6.4 through 5.9.1.
  Open the advisory ↗
• 35CVE-2026-59842libsshGSSAPI key exchangeOut-of-bounds heap read (CWE-125)LOW 3.7During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than expected is copied without length validation, letting a remote unauthenticated attacker read small amounts of server memory. Coordinated through Red Hat.
  Open the advisory ↗
• 36CVE-2026-56444NLnet LabsUnbound serve-expiredResolution service degradation (CWE-772)MED 5.9With serve-expired enabled and serve-expired-client-timeout set above discard-timeout (contrary to the suggested values), dropped client replies are not accounted for, so a counter can reach its limit and new clients for duplicate in-flight queries are silently dropped. Affects 1.20.0 through 1.25.1; fixed in 1.25.2.
  Open the advisory ↗
• 37CVE-2026-57834ApacheTraffic ServerHTTP request smuggling (CWE-444)HIGH 7.0Malformed chunked message bodies allow request smuggling. Affects 8.0.0–8.1.11, 9.0.0–9.2.14, and 10.0.0–10.1.3; fixed in 9.2.15 and 10.1.4.
  Open the advisory ↗
• 38CVE-2026-78126strongSwaneap-aka pluginNULL pointer dereference (CWE-476)MED 5.9The eap-aka plugin processed AKA-Synchronization-Failure messages even before it had issued a challenge to the client, which can crash the daemon through a NULL pointer dereference. Affects strongSwan 4.1.10 through 6.0.7; fixed in 6.1.0.
  Open the advisory ↗
• 39CVE-2026-39265Assigned by MITRE — public disclosure pending
• 40CVE-2026-39266Assigned by MITRE — public disclosure pending
• 41CVE-2026-39268Assigned by MITRE — public disclosure pending
• 42CVE-2026-39269Assigned by MITRE — public disclosure pending
• 43CVE-2026-39270Assigned by MITRE — public disclosure pending
• 44CVE-2026-39271Assigned by MITRE — public disclosure pending
• 45CVE-2026-39272Assigned by MITRE — public disclosure pending
• 46CVE-2026-39273Assigned by MITRE — public disclosure pending
• 47CVE-2026-39274Assigned by MITRE — public disclosure pending
• 48CVE-2026-48057Assigned — public disclosure pending

Blacked-out rows have a CVE ID assigned but are not public yet. We add the details once the vendor publishes them.