CVE-2026-66408

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:30+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-66407

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:28+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348 2026-08-10 11:25:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117070962122003813...

CVE-2026-66405

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:25+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-65875

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:03+00:00| seen| https://jvn.jp/en/vu/JVNVU94952030...

CVE-2026-51274

creationtimestamp| type| source ---|---|--- 2026-07-31 04:03:33+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrw34u4xo32i...

CVE-2026-18157

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrw2xsw67y2o 2026-07-31 04:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/htuiez2lpkio5...

SUSE CVE-2026-4858

Mattermost versions 11.6.x = 11.6.0, 11.5.x = 11.5.3, 11.4.x = 11.4.4, 10.11.x = 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action...

SUSE CVE-2026-5469

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not...

SUSE CVE-2026-5755

Mattermost versions 11.6.x = 11.6.0, 11.5.x = 11.5.2, 11.5.x = 11.5.3, 11.4.x = 11.4.4, 10.11.x = 10.11.14 fail to validate the TIFF IFD offset in the image header before allocating memory, which allows authenticated users with file upload or posting permissions to cause a denial of service serve...

SUSE CVE-2026-17534

Kimi Code @moonshot-ai/kimi-code before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolving DNS or re-validating hosts after HTTP redirects. An attacker who can influence a FetchURL call for example via prompt injectio...

IBM Langflow OSS path traversal vulnerability

IBM Langflow OSS is an open-source low-code visual AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to integrate wit...

Linux Distros Unpatched Vulnerability : CVE-2026-18446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based...

PT-2026-66729

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the SAML protocol implementation when handling authentication requests via the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...

CVE-2026-45377: Exposure of Sensitive Information to an Unauthorized Actor

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the normal downloadyourdata flow requires the requester to be logged in as the export owner, but the resulting Active Storage blob redirect URL can be replayed without...

CVE-2026-52232: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build 118101 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...

PT-2026-66751

A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...

The vulnerability of React Router’s routing library in React applications stems from the redirection of URLs to unreliable websites, allowing attackers to carry out phishing attacks.

The vulnerability of the React Router routing library for React applications relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...

PT-2026-66852

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 1.4.5 Description The AUSF Authentication Server Function fails to validate the supiOrSuci field in UE authentication requests. Null bytes x00 and other control characters are passed through JSON parsing and forwarded...

PT-2026-66838

Name of the Vulnerable Software and Affected Versions Thumbor versions prior to 7.8.0 Description HMAC validation can be bypassed due to the use of the Python .replace method when removing the signature from the URL before validation. Because .replace removes all occurrences of the substring rath...

openSUSE 16 Security Update : libkrun (openSUSE-SU-2026:21464-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21464-1 advisory. - CVE-2025-24898: openssl: use-after-free in ssl::selectnextproto due to improper lifetime handling bsc1270429. - CVE-2026-41676: openssl: short...