CVE-2026-80182

creationtimestamp| type| source ---|---|--- 2026-08-25 23:37:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/hhx4elitpalld 2026-08-26 12:56:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtyf2cl3t22w...

CVE-2026-44476

Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered client's clientid, which is public information, can authenticate as that client at the token endpoint and obtain an access token without providing its clientsecret. This occu...

CVE-2026-18261

Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions:...

CVE-2026-18260

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4...

CVE-2026-16646

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

CVE-2026-16641

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

CVE-2026-16642

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

CVE-2026-15088

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

CGA-7R46-5XW5-56Q2

Bulletin has no description...

CGA-JR52-7XPJ-F5H2

Bulletin has no description...

CGA-Q4GC-J2PW-FQ7J

Bulletin has no description...

CGA-MQVX-HCGH-47VX

Bulletin has no description...

CGA-RVH8-WRH5-FV2F

Bulletin has no description...

CVE-2026-16641

CVE-2026-16641 affects the Drupal Commerce Elavon contrib module, with all versions (. ) impacted. The project has been marked unsupported by the Drupal security team, and the known security issue remains unaddressed by the maintainer . No specific root cause or fixed version is provided in the a...

CVE-2026-15088

Drupal Development Environment (a Drupal contrib module) is affected by a Critical -severity security issue across all versions (. ). The Drupal security team has marked the project as unsupported , meaning the maintainer has not provided a fix and no patched version is currently available. The C...

UBUNTU-CVE-2026-80182

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new long-lived credentials or authorize new delegations that persist independently of, and outlive, the credential used to obtain them. The delegation...

UBUNTU-CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-79246

Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79220

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79260

Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...