CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:50 UTC )
This week: 5,366 CVEs published, 353 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,366 Show in the list Critical, last 7 days 353 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product siemens:ruggedcom_rst2428p . Show all products
225 CVEs, showing 201 to 225 Previous Page 5 of 5 CVE Severity Title Published CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling Assigned by redhat
Jun 16, 2025 CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) Assigned by redhat
Jun 16, 2025 CVE-2025-38350 High 7.8 net/sched: Always pass notifications when child class becomes empty Assigned by Linux
Jul 19, 2025 CVE-2025-38498 High 7.8 do_change_type(): refuse to operate on unmounted/not ours mounts Assigned by Linux
Jul 30, 2025 CVE-2025-59375 High 7.5 libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. Assigned by mitre
Sep 15, 2025 CVE-2025-39860 High 8.0 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() Assigned by Linux
Sep 19, 2025 CVE-2025-9230 High 7.5 Out-of-bounds read & write in RFC 3211 KEK Unwrap Assigned by openssl
Sep 30, 2025 CVE-2025-9232 Medium 5.9 Out-of-bounds read in HTTP client no_proxy handling Assigned by openssl
Sep 30, 2025 CVE-2025-66382 Low 2.9 In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time. Assigned by mitre
Nov 28, 2025 CVE-2025-40250 High 7.8 net/mlx5: Clean up only new IRQ glue on request_irq() failure Assigned by Linux
Dec 4, 2025 CVE-2025-40252 Critical 9.8 net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() Assigned by Linux
Dec 4, 2025 CVE-2025-40261 Critical 9.8 nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Assigned by Linux
Dec 4, 2025 CVE-2026-22977 Medium 5.5 net: sock: fix hardened usercopy panic in sock_recv_errqueue Assigned by Linux
Jan 21, 2026 CVE-2025-13465 Medium 6.9 Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Assigned by openjs
Jan 21, 2026 CVE-2025-71185 Medium 5.5 dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Assigned by Linux
Jan 31, 2026 CVE-2025-71186 Medium 5.5 dmaengine: stm32: dmamux: fix device leak on route allocation Assigned by Linux
Jan 31, 2026 CVE-2025-71189 Medium 5.5 dmaengine: dw: dmamux: fix OF node leak on route allocation failure Assigned by Linux
Jan 31, 2026 CVE-2025-71190 Medium 5.5 dmaengine: bcm-sba-raid: fix device leak on probe Assigned by Linux
Jan 31, 2026 CVE-2025-71191 Medium 5.5 dmaengine: at_hdmac: fix device leak on of_dma_xlate() Assigned by Linux
Jan 31, 2026 CVE-2026-23026 Medium 5.5 dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Assigned by Linux
Jan 31, 2026 CVE-2026-23038 Not yet scored pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() Assigned by Linux
Jan 31, 2026 CVE-2026-23111 High 7.8 netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Assigned by Linux
Feb 13, 2026 CVE-2026-23112 Critical 9.8 nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Assigned by Linux
Feb 13, 2026 CVE-2026-23230 High 8.8 smb: client: split cached_fid bitfields to avoid shared-byte RMW races Assigned by Linux
Feb 18, 2026 CVE-2026-23231 High 7.8 netfilter: nf_tables: fix use-after-free in nf_tables_addchain() Assigned by Linux
Mar 4, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
