ALSA-2026:35829 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via...

PT-2026-55855

Name of the Vulnerable Software and Affected Versions Formbricks version 5.0.0 Description Improper access controls exist within the Survey Handler component, specifically affecting a function in the apps/web/modules/survey/link/actions.ts file. This flaw allows for remote exploitation...

PT-2026-55891

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Apache Camel AWS2-SQS component allows an attacker to inject...

ROS-20260706-73-0004

The vulnerability of the pgcreatesubscriber function in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PT-2026-55882

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.19.9 Description The camel-vertx-http component deserializes HTTP response bodies with the...

CVE-2026-14777

SourceCodester Onlne Examination & Learning Management System 1.0 has a vulnerability in /announcements.php that allows unrestricted file upload. The issue arises from an unknown functionality path in announcements.php, enabling remote exploitation and has publicly available exploits. The CVE not...

CVE-2026-14770

The CVE-2026-14770 entry affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability is an SQL injection in the /edit_room.php script caused by manipulating the ID parameter, allowing remote initiation of an attack. This is supported by multiple connected sources that describe...

CVE-2026-55994

creationtimestamp| type| source ---|---|--- 2026-07-05 20:54:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwhi6z42b25 2026-07-06 12:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy4fz3bvs2k 2026-07-09 03:57:19+00:00| seen|...

CVE-2026-48205

creationtimestamp| type| source ---|---|--- 2026-07-05 20:21:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfofkvu425 2026-07-06 20:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywszkc562b 2026-07-09 08:07:07+00:00| seen|...

EUVD-2026-41779

A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly...

CVE-2026-46591

creationtimestamp| type| source ---|---|--- 2026-07-05 20:13:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwf7wztkm2n 2026-07-09 03:27:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6otrzp4q26 2026-07-16 12:00:04+00:00| published-proof-of-concept|...

CVE-2026-14762

creationtimestamp| type| source ---|---|--- 2026-07-05 20:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwf52zp6h2o 2026-07-06 06:51:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxiuqnjdy2j 2026-07-13 22:00:10+00:00| seen|...

CVE-2026-40047

creationtimestamp| type| source ---|---|--- 2026-07-05 19:24:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwchziqm62z 2026-07-06 19:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyszg4wcn2y 2026-07-09 03:34:24+00:00| seen|...

CVE-2026-57318

creationtimestamp| type| source ---|---|--- 2026-07-05 18:16:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpw6o5wlx32z...

CVE-2026-36182

creationtimestamp| type| source ---|---|--- 2026-07-05 18:13:10+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpw6i5cc3b2c 2026-07-06 11:31:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxyig2hz22v...

CVE-2026-14759

creationtimestamp| type| source ---|---|--- 2026-07-05 15:52:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvwlmt64u2k 2026-07-06 06:50:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxitaflxd2d...

CVE-2026-59509

creationtimestamp| type| source ---|---|--- 2026-07-05 13:21:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvo7623bw2o 2026-07-05 13:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpvp4ane5k23 2026-07-06 00:00:38+00:00| seen|...

CVE-2026-14736

creationtimestamp| type| source ---|---|--- 2026-07-05 12:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvmhtygza25...

RLSA-2026:33502 Important: giflib security update

giflib is a library for reading and writing gif images. Security Fixes: giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVE-2026-26740 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

CVE-2026-14738

creationtimestamp| type| source ---|---|--- 2026-07-05 11:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116867021281566995 2026-07-05 11:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpvgcg262i25 2026-07-05 12:21:46+00:00| seen|...