79
CVEs
3
Critical
15
High
1
KEV
30
PoC
0
Unpatched C/H
88.6%
Patch Rate
1.1%
Avg EPSS
Severity Breakdown
CRITICAL
3
HIGH
15
MEDIUM
31
LOW
30
Monthly CVE Trend
Affected Products (30)
Binutils
230
Glibc
108
Debian Linux
94
Ubuntu Linux
91
Libredwg
89
Opensuse
84
Fedora
77
Leap
60
Enterprise Linux
50
Gnutls
48
Enterprise Linux Workstation
35
Enterprise Linux Desktop
33
Grub2
33
Enterprise Linux Server
33
Backports Sle
25
Emacs
25
Ontap Select Deploy Administration Utility
22
Enterprise Linux Server Aus
22
Ncurses
19
Enterprise Linux Server Tus
18
Mailman
17
Pspp
16
Enterprise Linux Eus
13
Bash
13
Hci Management Node
13
Solidfire
13
Linux Enterprise Server
13
Libextractor
13
Openshift Container Platform
12
Wget
12
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-24061 | GNU Inetutils telnetd through version 2.7 contains a critical authentication bypass that allows remote attackers to gain root access by setting the USER environment variable to '-f root' during TELNET negotiation. With EPSS 75% and KEV listing, this trivially exploitable vulnerability (CVE-2026-24061) has been widely weaponized. Public PoC is available and patches exist. | CRITICAL | 9.8 | 75.3% | 209 |
KEV
PoC
|
| CVE-2026-0861 | Glibc versions 2.30 through 2.42 contain an integer overflow in the memalign function family that allows attackers with control over both size and alignment parameters to trigger heap corruption. Public exploit code exists for this vulnerability, which requires carefully crafted inputs with alignment values between 2^62+1 and 2^63 paired with sizes near PTRDIFF_MAX. Local attackers exploiting this flaw could achieve code execution or denial of service on affected systems. | HIGH | 8.4 | 0.0% | 62 |
PoC
|
| CVE-2025-69650 | GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.1% | 58 |
PoC
|
| CVE-2025-69649 | GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.0% | 58 |
PoC
|
| CVE-2026-28372 | Inetutils versions up to 2.7 is affected by inclusion of functionality from untrusted control sphere (CVSS 7.4). | HIGH | 7.4 | 0.0% | 57 |
PoC
|
| CVE-2025-69652 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. [CVSS 6.2 MEDIUM] | MEDIUM | 6.2 | 0.0% | 51 |
PoC
|
| CVE-2026-42010 | Authentication bypass in GnuTLS affects servers that enable the RSA-PSK key exchange, where the PSK identity comparison treats a username containing an embedded NUL byte as equal to a legitimate truncated username. Remote attackers can send a crafted username to circumvent pre-shared-key authentication and gain unauthorized access. There is no public exploit identified at time of analysis, the EPSS probability is low (0.15%), and CISA SSVC scores exploitation as none - indicating high theoretical severity but no observed real-world abuse. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-32746 | OOB write in GNU inetutils telnetd through 2.7 via LINEMODE SLC handler. | CRITICAL | 9.8 | 0.0% | 49 |
PoC
|
| CVE-2026-9605 | Heap-based buffer overflow in GNU LibreDWG through version 0.13.4.8160 lets an attacker corrupt heap memory by getting the library to parse a malicious DWG file, specifically a 2004-format file with a crafted compressed section processed via the dwgbmp thumbnail-extraction utility. The flaw stems from missing bounds validation in the decompression routine and is reachable without authentication or user privileges per its CVSS vector; impact is rated low across confidentiality, integrity, and availability (CVSS 7.3). Publicly available exploit code exists (a proof-of-concept DWG sample), but the issue is not listed in CISA KEV, and an official upstream fix has been committed. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
|
| CVE-2025-69651 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. [CVSS 5.5 MEDIUM] | MEDIUM | 5.5 | 0.0% | 48 |
PoC
|
| CVE-2025-69194 | A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. [CVSS 8.8 HIGH] | HIGH | 8.8 | 0.0% | 44 |
|
| CVE-2025-61662 | A use-after-free vulnerability exists in GRUB's gettext module where the gettext command remains registered after module unloading, allowing attackers with local access and low privileges to trigger memory corruption. Successful exploitation can lead to denial of service through GRUB crashes and potentially compromise system confidentiality and integrity. With an EPSS score of only 0.01%, real-world exploitation is currently unlikely, and patches are available from Red Hat and other vendors. | HIGH | 7.8 | 0.0% | 39 |
|
| CVE-2025-69195 | A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. [CVSS 7.6 HIGH] | HIGH | 7.6 | 0.1% | 38 |
|
| CVE-2026-42009 | Denial of service in GnuTLS affects the Datagram Transport Layer Security (DTLS) packet reordering logic, where the comparator function fails to correctly handle packets with duplicate sequence numbers. Remote unauthenticated attackers can send specially crafted DTLS packet sequences to trigger unstable ordering or undefined behavior, causing service disruption. No public exploit identified at time of analysis, and the issue is rated CVSS 7.5 (High) for availability impact only. | HIGH | 7.5 | 0.1% | 38 |
|
| CVE-2025-13151 | Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.1% | 38 |
|