PT-2026-61147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the mac802154 llsec module, the functions llsec do encrypt unauth, llsec do encrypt auth, llsec do decrypt unauth, and llsec do decrypt auth perform in-place cryptographic...

PT-2026-61059

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10...

PT-2026-61071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the udf read tagged function where CRC verification is skipped if the descCRCLength plus the size of the tag structure exceeds the block size. A specially crafted UDF...

CVE-2026-57857

creationtimestamp| type| source ---|---|--- 2026-07-18 23:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxhjjuvhu2a...

CVE-2026-16195 Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. T...

MGASA-2026-0263 Updated perl-Config-IniFiles package fixes a security vulnerability

The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...

Updated perl-Config-IniFiles package fixes a security vulnerability

The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...

CVE-2026-12228

creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...

CVE-2026-15322

creationtimestamp| type| source ---|---|--- 2026-07-18 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtunfxgl2l 2026-07-19 05:13:42+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqxzh7sx6a2d 2026-07-19 05:14:11+00:00| seen|...

CVE-2026-16122

creationtimestamp| type| source ---|---|--- 2026-07-18 16:29:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqworhbu2r2a...

CVE-2025-71390

creationtimestamp| type| source ---|---|--- 2026-07-18 16:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwnl5sz7s2i...

GHSA-RWW4-4W9C-7733 vulnerabilities

Vulnerabilities for packages: mcp-atlassian...

CVE-2026-9147

creationtimestamp| type| source ---|---|--- 2026-07-18 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941221213811825 2026-07-18 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g 2026-07-18 14:00:39+00:00| seen|...

CVE-2024-58356 SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions via OVERWRITE does not take effect, a...

CVE-2026-16117

Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for route matching, but request.url retains the original encoded form, and the prefix-rewrite step uses a literal string...

CVE-2026-16088

creationtimestamp| type| source ---|---|--- 2026-07-18 12:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwbj72jdk2i...

CVE-2026-16085

creationtimestamp| type| source ---|---|--- 2026-07-18 12:27:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwbaag7qg2e...

CVE-2026-7872

creationtimestamp| type| source ---|---|--- 2026-07-18 12:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw7quhq3m2a...

CVE-2026-62299

creationtimestamp| type| source ---|---|--- 2026-07-18 10:38:28+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw34zsflf2p 2026-07-18 10:38:31+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw355eeak2l 2026-07-18 10:38:34+00:00| seen|...

CVE-2026-47865

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed in 30.2.7...