May 2026

7 results · Clear filters · Feed

• High 7.8
  CVE-2026-46300 Exploited Public exploit EPSS 16%

  net: skbuff: preserve shared-frag marker during coalescing

  In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain t…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 23, 2026

  KEV Oct 28, 2026
• High 8.8
  CVE-2026-45659 Exploited · Ransomware Public exploit EPSS 80%

  Microsoft SharePoint Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  May 22, 2026

  KEV Jul 1, 2026
• High 7.8
  CVE-2026-41091 Exploited Public exploit

  Microsoft Defender Elevation of Privilege Vulnerability

  Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Malware Protection Engine
  May 20, 2026

  KEV May 20, 2026
• High 8.1
  CVE-2026-42897 Exploited Public exploit EPSS 71%

  Microsoft Exchange Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  May 14, 2026

  KEV May 15, 2026
• High 7.8
  CVE-2026-0257 Exploited · Ransomware Public exploit Scanner template EPSS 96%

  PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

  Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by …

  Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  May 13, 2026

  KEV May 29, 2026
• High 8.7
  CVE-2026-42271 Exploited Public exploit Scanner template EPSS 91%

  LiteLLM: Authenticated command execution via MCP stdio test endpoints

  LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/lis…

  BerriAI litellm airflow-3 litellm Wolfi PyPI
  May 8, 2026

  KEV Jun 8, 2026
• High 8.7
  CVE-2026-0300 Exploited Public exploit EPSS 42%

  PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

  A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls…

  Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  May 6, 2026

  KEV May 6, 2026