CVE

@CVEnew

Official account maintained by the CVE™ Program to notify the community of new CVE IDs. Posts contain abbreviated details. Full CVE Records on cve.org

cveform.mitre.org

Joined January 2017

3 Following

58.1K Followers

Replies Reposts Media

CVE
@CVEnew
Oct 14
CVE-2026-107660 FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname … cve.org/CVERecord?id=C…
CVE
@CVEnew
Oct 14
CVE-2026-107675 FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate S… cve.org/CVERecord?id=C…
CVE
@CVEnew
Oct 14
CVE-2026-107678 FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptio… cve.org/CVERecord?id=C…
CVE
@CVEnew
Oct 14
CVE-2026-61801 The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do … cve.org/CVERecord?id=C…
CVE
@CVEnew
Oct 14
CVE-2026-107291 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentati… cve.org/CVERecord?id=C…