CVE-2026-17037

creationtimestamp| type| source ---|---|--- 2026-09-11 11:45:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/el3t73t2hfojr...

CVE-2026-89252 AVideo Missing Authorization in addLiveLink.php LiveLink Update

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

EUVD-2026-76064

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

CVE-2026-89252

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in addLiveLink.php when updating LiveLinks. The component fails to verify ownership, allowing any authenticated canStream user to overwrite another user's LiveLink HLS source and metadata...

CVE-2026-87859

creationtimestamp| type| source ---|---|--- 2026-09-11 09:21:21+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mvaahpudgk2t 2026-09-11 11:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gk3b4eixszvfv 2026-09-29 02:31:24+00:00| seen|...

appsandbox v0.1.5

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

CVE-2026-88046

A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows an attacker to bypass configured directory restrictions by including parent-directory segments e.g., '..' in source object names. When a specially crafted source object is uploaded or copied, it can...

CVE-2026-64837

creationtimestamp| type| source ---|---|--- 2026-09-11 05:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkbexcy2n...

CVE-2026-84388

creationtimestamp| type| source ---|---|--- 2026-09-11 05:02:12+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mv7ryeh2zy2m 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r 2026-09-16 08:45:07+00:00| seen|...

CVE-2026-89092

creationtimestamp| type| source ---|---|--- 2026-09-11 04:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/em52ptcnayfpv 2026-10-07 04:42:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxb4zpkp3423 2026-10-08 07:23:22+00:00| seen|...

CVE-2026-89145

creationtimestamp| type| source ---|---|--- 2026-09-11 03:50:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5chi4qez6ikrd...

CVE-2026-16338

creationtimestamp| type| source ---|---|--- 2026-09-11 03:29:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y 2026-09-14 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t 2026-09-14 22:08:10+00:00| seen|...

authentik version/2026.8.2

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

EUVD-2026-75871

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-81906

creationtimestamp| type| source ---|---|--- 2026-09-11 00:10:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bf25zvsv4hp4y...

CVE-2026-16174

creationtimestamp| type| source ---|---|--- 2026-09-11 00:08:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6xwrwmoocjmm3...

PT-2026-89855

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

ROS-20260911-73-0242

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...

KLA91278 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-57104 Exploitation Related products Microsoft-Azure CVE list CVE-2026-57104 critical Solution Install necessary...

ROS-20260911-73-0087

The vulnerability of the Password component in browsers Google Chrome and Microsoft Edge is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...