| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-104046 | Sssd: sssd: denial of service via incomplete identity provider authentication requests | Red Hat | Red Hat Enterprise Linux 10 | Medium | 6.2 | 2026-10-06 20:03:06 | Deep Dive |
| CVE-2026-106062 | Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file | Red Hat | Red Hat Enterprise Linux 10 | High | 7.8 | 2026-10-06 20:02:52 | Deep Dive |
| CVE-2026-101258 | Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free | Red Hat | Red Hat Enterprise Linux 10 | High | 7.8 | 2026-10-06 20:02:24 | Deep Dive |
| CVE-2026-19029 | HDF5 scale-offset filter heap buffer over-read via crafted chunk | The HDF Group | HDF5 | Medium | 6.8 | 2026-10-06 20:01:36 | Deep Dive |
| CVE-2026-106454 | Twisted: IMAP wildcardToRegexp() ReDoS | twisted | twisted | Medium | 4.3 | 2026-10-06 19:55:37 | Deep Dive |
| CVE-2026-106453 | yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryError | yawkat | lz4-java | Medium | 5.3 | 2026-10-06 19:54:04 | Deep Dive |
| CVE-2026-106452 | yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream header | yawkat | lz4-java | Medium | 5.3 | 2026-10-06 19:52:38 | Deep Dive |
| CVE-2026-105244 | Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content | Apache Software Foundation | Apache log4net | Medium | 5.3 | 2026-10-06 19:52:31 | Deep Dive |
| CVE-2026-105243 | Apache log4net: Oversize EventLogAppender record silently discarded | Apache Software Foundation | Apache log4net | Medium | 5.3 | 2026-10-06 19:51:25 | Deep Dive |
| CVE-2026-106451 | yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user | yawkat | lz4-java | High | 7.3 | 2026-10-06 19:50:42 | Deep Dive |
| CVE-2026-105242 | Apache log4net: Request validation failure drops the event in the aspnet-request converter | Apache Software Foundation | Apache log4net | Medium | 5.3 | 2026-10-06 19:50:19 | Deep Dive |
| CVE-2026-105241 | Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch | Apache Software Foundation | Apache log4net | Medium | 5.3 | 2026-10-06 19:49:04 | Deep Dive |
| CVE-2026-106450 | yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputs | yawkat | lz4-java | Medium | 5.3 | 2026-10-06 19:48:40 | Deep Dive |
| CVE-2026-105240 | Apache log4net: NUL character truncates OutputDebugStringAppender records | Apache Software Foundation | Apache log4net | Medium | 5.3 | 2026-10-06 19:47:45 | Deep Dive |
| CVE-2026-105239 | Apache log4net: NUL character truncates EventLogAppender records | Apache Software Foundation | Apache log4net | Medium | 5.3 | 2026-10-06 19:46:33 | Deep Dive |
| CVE-2026-106449 | yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError | yawkat | lz4-java | Low | 3.7 | 2026-10-06 19:46:29 | Deep Dive |
| CVE-2026-106448 | StableLib: Prototype poisoning via `__proto__` map keys in CBOR decoding | StableLib | stablelib | High | 8.9 | 2026-10-06 19:45:03 | Deep Dive |
| CVE-2026-105111 | Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS | Apache Software Foundation | Apache Commons BCEL | Medium | 4.7 | 2026-10-06 19:44:18 | Deep Dive |
| CVE-2026-106447 | StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags | StableLib | stablelib | High | 8.7 | 2026-10-06 19:44:03 | Deep Dive |
| CVE-2026-94114 | Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser | Apache Software Foundation | Apache Commons BCEL | Medium | 5.9 | 2026-10-06 19:42:30 | Deep Dive |