CVE-2026-75746
published 2026-09-08CVE-2026-75746: ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary…
PriorityP357critical9.1CVSS 3.1
AVNACLPRHUINSCCHIHAH
EPSS
0.99%
62.2th percentile
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected
39 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
| adobe | coldfusion | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-90227 kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
bugzilla·2026-09-17·CVSS 7.8
CVE-2026-90227 [HIGH] CVE-2026-90227 kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
CVE-2026-90227 kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
In the Linux kernel, the following vulnerability has been resolved:
nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
Unlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls
nvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a
partition device or write through a read-only file descriptor.
Pass flags and open_for_write through and reject disallowed commands
with -EACCES.
Discussion:
Upstream advisory:
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90227.mbox
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2026:75746 https://access.redhat.com/errata/RHSA-2026:75746
---
This issue has been addressed
Bugzilla
CVE-2026-80921 kernel: KVM: s390: vsie: zero stale crypto bits
bugzilla·2026-09-09·CVSS 8.8
CVE-2026-80921 [HIGH] CVE-2026-80921 kernel: KVM: s390: vsie: zero stale crypto bits
CVE-2026-80921 kernel: KVM: s390: vsie: zero stale crypto bits
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: vsie: zero stale crypto bits
When shadowing crypto access bits from a format0 apcb (crycb 0 or 1),
the bits 64..255 are unchanged from whatever is in the vsie page in the
crycb and thus in the apcb. This gives a nested guest potential access
to a device no longer available. Zero out the remaining bits.
Discussion:
Upstream advisory:
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80921.mbox
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2026:75746 https://access.redhat.com/errata/RHSA-2026:75746
---
This issue has been addressed in the following pro
Bugzilla
CVE-2026-23105 kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation
bugzilla·2026-02-04·CVSS 5.5
CVE-2026-23105 [MEDIUM] CVE-2026-23105 kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation
CVE-2026-23105 kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation
In the Linux kernel, the following vulnerability has been resolved:
net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
This is more of a preventive patch to make the code more consistent and
to prevent possible exploits that employ child qlen manipulations on qfq.
use cl_is_active instead of relying on the child qdisc's qlen to determine
class activation.
Discussion:
This comment was flagged as spam, view the edit history to see the original text if required.
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2026:75746 https://access.redhat.com/errata/RHSA-2026:75746
---
This issue has been address
2026-09-08
Published