CVE-2026-7260 affecting package php for versions less than 8.3.33-1

CVE-2026-7260 affecting package php for versions less than 8.3.33-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55968 affecting package thrift for versions less than 0.24.0-1

CVE-2026-55968 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48586 affecting package thrift for versions less than 0.24.0-1

CVE-2026-48586 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-51283

creationtimestamp| type| source ---|---|--- 2026-08-01 03:33:41+00:00| seen| https://gist.github.com/programmervuln/c1fea9d3513e8eedf6c3884dbaa9edc4...

CVE-2026-53573

creationtimestamp| type| source ---|---|--- 2026-08-01 02:31:13+00:00| seen| https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-51278

creationtimestamp| type| source ---|---|--- 2026-08-01 01:47:41+00:00| seen| https://gist.github.com/programmervuln/775a517ba93b83b4a76bd1fd2193ed82...

EUVD-2026-51669

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21494-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21494-1 advisory. Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version...

GHSA-C5PX-58J2-7FQP gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode

Summary consultgeminiwithfiles in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip and...

CVE-2026-52134

An issue in the parseGoosePayload function /goose/goosereceiver.c of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame...

CVE-2026-54787

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...

CVE-2026-53551

creationtimestamp| type| source ---|---|--- 2026-07-31 21:31:45+00:00| seen| https://gist.github.com/alon710/0f09a6f6c7f9c253322faa348755ead8 2026-07-31 22:35:11+00:00| published-proof-of-concept| https://github.com/free5gc/free5gc/security/advisories/GHSA-qj55-47fp-p62j 2026-08-01 00:15:08+00:00...

CVE-2026-68770

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-53505

creationtimestamp| type| source ---|---|--- 2026-07-31 20:35:24+00:00| published-proof-of-concept| https://github.com/thumbor/thumbor/security/advisories/GHSA-phj3-59pf-cp83 2026-07-31 23:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mry2paymkr2p 2026-08-01...

GHSA-337J-9HXR-RHXG vulnerabilities

Vulnerabilities for packages: keycloak, vitess...

CVE-2026-53669 vulnerabilities

Vulnerabilities for packages: keycloak, vitess...

GHSA-H3QP-GQRC-Q736 vulnerabilities

Vulnerabilities for packages: kafbat-ui-fips, apache-activemq, camunda, apache-nifi-registry, kafbat-ui, apache-activemq-fips, camunda-zeebe...

CVE-2026-55825

Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can request an attachment identifier containing ../ segments and make the job attachment download endpoint read a file from another job directory inside var/job-attachments. The...