linux

Disclosed vulnerabilities where the NVD names linux as an affected vendor, highest CVSS first.

1. CRITICAL 10CVE-2026-892752026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

2. CRITICAL 10CVE-2026-844122026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

3. CRITICAL 10CVE-2026-757232026-09-22

   Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this …

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

4. CRITICAL 10CVE-2026-757212026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

5. CRITICAL 10CVE-2026-757032026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

6. CRITICAL 10CVE-2026-756992026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

7. CRITICAL 10CVE-2026-733692026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

8. CRITICAL 9.9CVE-2026-892762026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability …

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

9. CRITICAL 9.9CVE-2026-836602026-09-22

   Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

10. CRITICAL 9.9CVE-2026-820132026-09-22

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

11. CRITICAL 9.9CVE-2026-820102026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

12. CRITICAL 9.9CVE-2026-820082026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Explo…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

13. CRITICAL 9.8CVE-2026-1024902026-09-30

    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.

    zammad · docker · linux kernel

    AI risk analysis on Exploit-DB.ai →

14. CRITICAL 9.8CVE-2026-1024892026-09-30

    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions.

    zammad · docker · linux kernel

    AI risk analysis on Exploit-DB.ai →

15. CRITICAL 9.8CVE-2026-69282026-09-23

    IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker who can influence program execution or input may exploit this condition to corrupt memory, cause application crashes, or execute arbitrary code.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

16. CRITICAL 9.8CVE-2026-67302026-09-23

    IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

17. CRITICAL 9.8CVE-2026-67212026-09-23

    IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution on the underlying system. Successful exploitation allows remote code ex…

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

18. CRITICAL 9.8CVE-2026-24254public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial…

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

19. CRITICAL 9.6CVE-2026-824432026-09-22

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

20. CRITICAL 9.1CVE-2026-844362026-09-29

    IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.

    guardium data protection · linux kernel

    AI risk analysis on Exploit-DB.ai →

21. CRITICAL 9.1CVE-2026-820112026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to byp…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

22. CRITICAL 9.1CVE-2026-820092026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

23. CRITICAL 9.1CVE-2026-757282026-09-22

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

24. HIGH 8.8CVE-2026-969572026-10-13

    Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

    .net · macos · linux kernel · windows · visual studio 2022 · visual studio 2026

    AI risk analysis on Exploit-DB.ai →

25. HIGH 8.5CVE-2026-820032026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Explo…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

26. HIGH 8.2CVE-2026-47623public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

27. HIGH 8.2CVE-2026-24253public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

28. HIGH 8.1CVE-2026-848422026-09-29

    IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact …

    guardium data protection · linux kernel

    AI risk analysis on Exploit-DB.ai →

29. HIGH 7.8CVE-2026-69352026-09-23

    IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execut…

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

30. HIGH 7.8CVE-2026-67942026-09-23

    IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

31. HIGH 7.5CVE-2026-969602026-10-13

    Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

    .net · macos · linux kernel · windows · .net framework · windows 11 26h1

    AI risk analysis on Exploit-DB.ai →

32. HIGH 7.5CVE-2026-969592026-10-13

    Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

    .net · macos · linux kernel · windows · .net framework · windows 11 26h1

    AI risk analysis on Exploit-DB.ai →

33. HIGH 7.5CVE-2026-969582026-10-13

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

    .net · macos · linux kernel · windows · .net framework · windows 11 26h1

    AI risk analysis on Exploit-DB.ai →

34. HIGH 7.5CVE-2026-844402026-09-29

    IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by t…

    guardium data protection · linux kernel

    AI risk analysis on Exploit-DB.ai →

35. HIGH 7.5CVE-2026-47618public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

36. HIGH 7.5CVE-2026-47617public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

37. HIGH 7.5CVE-2026-47616public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

38. HIGH 7.5CVE-2026-47615public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

39. HIGH 7.5CVE-2026-47614public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

40. HIGH 7.5CVE-2026-47613public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by supplying a crafted local path in a multimodal request. A successful exploit of this vulnerability might lead to informa…

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

41. HIGH 7.5CVE-2026-47612public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

42. HIGH 7.5CVE-2026-24255public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pixel byte sequence but have different dimensions. A successful exploit of this vuln…

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

43. HIGH 7.4CVE-2026-962222026-10-13

    Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

    windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

44. HIGH 7.2CVE-2026-844222026-09-29

    IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.

    guardium data protection · linux kernel

    AI risk analysis on Exploit-DB.ai →

45. MEDIUM 6.6CVE-2026-47619public PoC2026-08-04

    NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

46. MEDIUM 6.5CVE-2026-47621public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

47. MEDIUM 6.5CVE-2026-47620public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

48. MEDIUM 6.2CVE-2026-65442026-09-24

    IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to unintentional inclusion of sensitive or unnecessary files and increased attack surface.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

49. MEDIUM 6.2CVE-2026-67182026-09-23

    IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

50. MEDIUM 5.5CVE-2026-981642026-09-29

    In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvm_gfn_is_write_tracked() checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared acros…

    linux kernel

    AI risk analysis on Exploit-DB.ai →

51. MEDIUM 5.3CVE-2026-69252026-09-23

    IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

52. MEDIUM 5.3CVE-2026-36262026-09-23

    IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →

53. MEDIUM 5.3CVE-2026-47622public PoC2026-08-04

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of error messages that contain sensitive information. A successful exploit of this vulnerability might lead to information disclosure.

    dynamo · linux kernel

    AI risk analysis on Exploit-DB.ai →

54. MEDIUM 4.3CVE-2026-63272026-09-23

    IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

    concert · linux kernel

    AI risk analysis on Exploit-DB.ai →