BELL-CVE-2026-53041

Bulletin has no description...

BELL-CVE-2026-52951

Bulletin has no description...

CVE-2026-50739

creationtimestamp| type| source ---|---|--- 2026-06-26 02:51:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5wr5k3yo2z...

CVE-2026-48618

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security boundary under...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, management-api-for-apache-cassandra-4.1, wazuh-indexer, ruby3.4-jrjackson, airbyte-server-fips, strimzi-kafka-operator, apache-camel-karavan-devmode, localstack, solr-fips, spark, kafbat-ui-fips, flyway, request-9047-keycloak-fips,...

CVE-2026-48615

A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...

UBUNTU-CVE-2026-48934

A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

UBUNTU-CVE-2026-48930

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

SUSE CVE-2026-53165

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid potential null folio-mapping deref during error reporting When a buffered read fails, iomapfinishfolioread reports the error with fserrorreportiofolio-mapping-host, .... This is called after ifs-readbytespending has...

SUSE CVE-2026-53209

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...

EUVD-2026-39598

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access...

CVE-2026-56411

creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncbgb2u2x...

CVE-2026-56131

creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:43+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5nc7dq3r2x 2026-06-28 17:56:11+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpekbds7ge2l 2026-06-28 17:56:12+00:00| seen|...

CVE-2026-9222

creationtimestamp| type| source ---|---|--- 2026-06-26 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp5naf23d32g 2026-06-26 00:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116813466196592988 2026-06-26 02:17:08+00:00| seen|...

PT-2026-52799

Administrator SQL Injection in WP All Import = 4.0.1 versions...

PT-2026-52702

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.16593 Description An issue exists that allows the disclosure of project settings via the MCP. Recommendations Update to version 2026.2.16593...

Fedora 43 : openbao (2026-da7e499416)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-da7e499416 advisory. Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776. Tenable has extracted the preceding...

PT-2026-52703

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.16593 Description Improper authorization in the app configurations endpoint allows for the modification of project settings. Recommendations Update JetBrains YouTrack to version 2026.2.16593 or later...

PT-2026-53013

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description A flaw exists where a specially crafted container image or instance backup can be used to read or create and write arbitrary files on the host, potentially leading to arbitrary command executio...

PT-2026-52841

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A GPU shader compiler library contains a flaw where loading a web page with unusual GPU shader code can trigger an out-of-bounds write. This occurs during an edg...