CVE-2026-90779

creationtimestamp| type| source ---|---|--- 2026-09-13 13:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfnppg5dg24 2026-09-20 09:34:34+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvwvfozapp24 2026-09-20 12:10:33+00:00| seen|...

CVE-2026-90777

creationtimestamp| type| source ---|---|--- 2026-09-13 13:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfno3rry22b 2026-09-14 05:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhdbg2xk22r 2026-09-16 07:27:26+00:00| seen|...

CVE-2026-90772

creationtimestamp| type| source ---|---|--- 2026-09-13 11:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ey6j7kk7xxcr5 2026-09-13 12:03:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfkgugkaq2s 2026-09-13 12:03:08+00:00| seen|...

CVE-2026-89669

creationtimestamp| type| source ---|---|--- 2026-09-13 11:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfhi4npsh2n 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90769

Open Notebook before 1.11.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the POST /api/sources endpoint. The application fails to validate the URL parameter, allowing any authenticated user to supply arbitrary URLs that the server will fetch directly. This enables attackers to r...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90616

creationtimestamp| type| source ---|---|--- 2026-09-13 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117263264954155475 2026-09-13 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvffb6fut32p...

CVE-2026-89650

creationtimestamp| type| source ---|---|--- 2026-09-13 10:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfeooeopg2t 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89643

creationtimestamp| type| source ---|---|--- 2026-09-13 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfe4qjakb22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89767

creationtimestamp| type| source ---|---|--- 2026-09-13 10:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfdlik3fj2m...

CVE-2026-89763

creationtimestamp| type| source ---|---|--- 2026-09-13 09:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfabhoq722w 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89555

creationtimestamp| type| source ---|---|--- 2026-09-13 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfa7moybf2g 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89771

creationtimestamp| type| source ---|---|--- 2026-09-13 08:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvf4uqjbvd2s 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89526

creationtimestamp| type| source ---|---|--- 2026-09-13 08:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvf4udz46p2p 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-90486

creationtimestamp| type| source ---|---|--- 2026-09-13 00:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ypdrczywuxdh...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2024-004029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-004029 advisory. A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. AddType and similar configuration,...

CVE-2026-21087

creationtimestamp| type| source ---|---|--- 2026-09-12 20:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdwp2mc572j...

CVE-2026-90558

creationtimestamp| type| source ---|---|--- 2026-09-12 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvdplvyo2r2w 2026-09-12 19:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrczd6r322 2026-09-12 20:07:06+00:00| seen|...