Updated ffmpeg packages fix a security vulnerability

The updated packages fix a security vulnerability: Heap out-of-bounds write via odd sliceheight in FFmpeg MagicYUV decoder. CVE-2026-8461...

CVE-2026-57855 Cockpit CMS Missing Authorization in Bucket File Storage API

Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php executes bucket commands ls, upload, removefiles, rename, createfolder without performing any ACL or role check. Any authenticated...

CVE-2026-62187

OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...

CVE-2026-48364

creationtimestamp| type| source ---|---|--- 2026-07-13 22:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkowz65vj2m 2026-07-13 22:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkp75gusk2l 2026-07-19 17:37:06+00:00| seen|...

CVE-2026-39676

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/90020 2026-07-14 00:00:37+00:00| seen| https://t.me/GithubRedTeam/90020 2026-07-15 00:00:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90020...

CVE-2026-4253

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:18+00:00| seen| https://t.me/GithubRedTeam/90566 2026-07-14 00:00:34+00:00| seen| https://t.me/GithubRedTeam/90566 2026-07-15 00:00:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90566 2026-07-16 19:00:31+00:00| seen|...

CVE-2026-15598 antv layout object.js setNestedValue prototype pollution

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. The...

CVE-2026-15680 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability

Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit th...

CVE-2026-62199

Summary (based on provided documents): OpenClaw versions prior to 2026.6.6 contain a flaw in host execution environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path may supply crafted envir...

CVE-2026-62192

OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to skip cross-provider requester...

MGASA-2026-0246 Updated libtiff packages fix a security vulnerability

The updated packages fix a security vulnerability: Denial of Service via large SamplesPerPixel tag. CVE-2026-36849...

MGASA-2026-0244 Updated perl-List-SomeUtils-XS packages fix security vulnerability

List::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function. CVE-2026-12844...

Updated libtiff packages fix a security vulnerability

The updated packages fix a security vulnerability: Denial of Service via large SamplesPerPixel tag. CVE-2026-36849...

CVE-2026-26396

creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqklm5ggqj2d...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15133 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R2P6-2GJ6-77XG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WVR7-3CPQ-C6MG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9MQJ-G68Q-H5RW vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15594 waooAI waoowaoo Media hash.ts stablePublicIdFromStorageKey improper authorization

A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the component Media Handler. The manipulation of the argument storageKey results in improper authorization. The attack may be performed from...