Index

Search

Search the public record. Drafts and scheduled notes are not included.

CriticalNo PoC

CVE-2026-93479

NGINX map regex capture heap buffer overflow in worker process

RCE

Published 16h ago

High

news

Apache Struts 7.4.0 fixes four security flaws

On 5 October 2026 Apache published S2-075 through S2-078 for Struts, covering OGNL injection in the legacy RESTful mapper, BigDecimal response expansion, an unbounded REST body read, and a shared date/time message formatter. Fixes ship in 7.4.0 and 6.12.0. No CVSS scores or CISA KEV listings yet.

Published 10d ago

MediumNo PoC

CVE-2026-104711

OGNL injection in the legacy RESTful action mapper

RCE

Published 10d ago

HighPoC Available

CVE-2026-74580

Linux kernel vhost stale IOTLB cache "Vghost" privilege escalation

LPE

Published 21 Aug 2026