CVE-2026-8169

ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...

CVE-2026-44228

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting XSS vulnerability, where user-controlled data is rendered without proper HTML escaping. An authenticated user with permission to set the relevan...

UBUNTU-CVE-2026-44228

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting XSS vulnerability, where user-controlled data is rendered without proper HTML escaping. An authenticated user with permission to set the relevan...

CVE-2026-28220

creationtimestamp| type| source ---|---|--- 2026-07-20 18:15:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vllatfw2g...

CVE-2026-62418

creationtimestamp| type| source ---|---|--- 2026-07-20 18:14:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3vjpxyci25...

CVE-2026-46410

creationtimestamp| type| source ---|---|--- 2026-07-20 18:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vcmpphg2a...

GHSA-6JXM-FV7W-RW5J

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:49+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mr3urupfyo2u...

CVE-2022-35497

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:06+00:00| seen| Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg 2026-07-21 00:00:33+00:00| seen| Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg 2026-07-22 00:00:06+00:00| published-proof-of-concept|...

CVE-2026-63137

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:05+00:00| seen| Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls 2026-07-21 00:00:32+00:00| seen| Telegram/JKu8MzOeWEiDh6Wy6ZRFCp9pX-H-YlUWAgYEZsV0JVERmls 2026-07-22 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-51385

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:05+00:00| seen| Telegram/WNPKjULv0ephKNyiWQmiLebMVhKs5Yq19I9tIqi1CZzDTIM 2026-07-21 00:00:32+00:00| seen| Telegram/WNPKjULv0ephKNyiWQmiLebMVhKs5Yq19I9tIqi1CZzDTIM 2026-07-22 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-53405

creationtimestamp| type| source ---|---|--- 2026-07-20 17:47:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3u2wtxiq24 2026-07-21 15:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr64wt5jdo2e...

CVE-2026-35048

creationtimestamp| type| source ---|---|--- 2026-07-20 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3txiwaon2e...

CVE-2026-41252

creationtimestamp| type| source ---|---|--- 2026-07-20 17:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3ttwsff42v 2026-07-21 09:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5j5suzh224 2026-07-23 04:07:07+00:00| seen|...

CVE-2026-61548

creationtimestamp| type| source ---|---|--- 2026-07-20 17:42:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3trxldl322 2026-09-21 12:15:04+00:00| seen| https://www.acn.gov.it/portale/w/rsyslog-poc-pubbliche-per-lo-sfruttamento-delle-cve-2026-55556-e-cve-2026-61548 2026-09-...

CVE-2026-57308

creationtimestamp| type| source ---|---|--- 2026-07-20 17:37:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26 2026-07-21 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224 2026-07-23 14:11:30+00:00| seen|...

CVE-2026-21824

creationtimestamp| type| source ---|---|--- 2026-07-20 17:35:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3tej6ryt2o...

CVE-2026-8169

CVE-2026-8169 concerns ExtremeXOS (EXOS) where the privileged debug-mode access relies on a challenge-response mechanism. The challenge is generated from an insufficiently random source, allowing, under certain conditions, an attacker to predict the expected response and activate debug-mode witho...

CVE-2026-39879

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

CVE-2026-42218

CVE-2026-42218 affects xrdp, an open source RDP server. The issue is a timing side‑channel in the login interface of versions 0.10.6 and earlier that allows remote observers to infer whether a username exists, enabling information disclosure via username enumeration. The vulnerability is explicit...