Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...

CVE-2026-74253: Improper Control of Generation of Code

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...

PT-2026-73192

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

CVE-2026-13424

creationtimestamp| type| source ---|---|--- 2026-08-16 08:44:15+00:00| seen| https://bsky.app/profile/suriq.io/post/3mt6sbibgd22p 2026-08-16 09:35:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt6v52kmjl2r 2026-08-16 13:16:12+00:00| seen|...

CVE-2026-19726

The Visualizer WordPress plugin before version 4.0.7 contains an incorrect authorization vulnerability. It fails to properly restrict access to chart configurations, enabling users with the Contributor role and above to view the full configuration of any chart on the site. This includes configura...

CVE-2026-19726

The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the full configuration of any chart on the site, including charts the Visualizer WordPress plugin before 4.0.7's own...

EUVD-2026-59919

The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the full configuration of any chart on the site, including charts the Visualizer WordPress plugin before 4.0.7's own...

CVE-2026-16098

creationtimestamp| type| source ---|---|--- 2026-08-16 05:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt6hy7s2mg2e 2026-08-16 06:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j4tnhqa2z 2026-08-16 10:30:23+00:00| seen|...

CVE-2026-19726: Incorrect Authorization

The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the full configuration of any chart on the site, including charts the Visualizer WordPress plugin before 4.0.7's own...

CVE-2026-17090

creationtimestamp| type| source ---|---|--- 2026-08-15 17:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt56fsxcdu2j 2026-08-15 17:26:48+00:00| seen| https://bsky.app/profile/potato.software/post/3mt56yxyykk2l...

CVE-2026-19895

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...

EUVD-2026-59760

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...

CVE-2026-19895 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...

CVE-2026-19895 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication

A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This affects the function Login::index of the file app/Config/Filters.php of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be...

CVE-2026-28711

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:04+00:00| seen| https://t.me/CyberSecurityExploit/30370 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30370 2026-08-27 20:00:06+00:00| seen| https://t.me/CyberSecurityExploit/17097 2026-08-28...

CVE-2026-34419

creationtimestamp| type| source ---|---|--- 2026-08-15 11:00:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30461 2026-08-16 00:00:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityExploit/30461 2026-08-27 20:00:05+00:00| seen|...

CVE-2026-74293 ASoC: fsl: fsl_audmix: Validate written enum values

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslaudmix: Validate written enum values fslaudmixputmixclksrc and fslaudmixputoutsrc convert the user-provided enum item with sndsocenumitemtoval before checking whether the item is within the enum's item count. The...

CVE-2026-16810

creationtimestamp| type| source ---|---|--- 2026-08-15 04:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt3st5opme2f...

FMD Android v0.16.2

FMD Android Find your device via SMS, instant messengers, or a web interface FMD Server. FMD allows you to locate, ring, wipe and issue other commands to your device when it's lost. It aims to be a secure open source alternative to Google's Find My Device. Why? I lost my brand new phone last week...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: glab, knative-serving, crossplane-provider-aws-kms, rancher-system-upgrade-controller, cert-exporter, loki, cloud-provider-vsphere, nri-kafka, openbao, cri-tools, k8sgateway, nri-mongodb, polaris, rancher-agent, crossplane-provider-aws-route53, fscrypt,...