CVE-2026-53902

creationtimestamp| type| source ---|---|--- 2026-07-01 13:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-53902 2026-07-01 13:58:42+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mplofgqeqq2m 2026-07-01 15:32:29+00:00| seen|...

CVE-2026-11880

creationtimestamp| type| source ---|---|--- 2026-07-01 10:06:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplbg73rr52h 2026-07-01 11:38:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgkyekfd2p...

CVE-2026-12732

creationtimestamp| type| source ---|---|--- 2026-07-01 09:15:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6l7fscm2q 2026-07-01 09:15:37+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6l7vt242g 2026-07-01 11:44:12+00:00| seen|...

CVE-2026-12408

creationtimestamp| type| source ---|---|--- 2026-07-01 09:13:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6i4ugm52b 2026-07-01 11:39:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgndvkxf2b 2026-07-01 12:30:35+00:00| seen|...

SUSE CVE-2025-1015

The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book,...

CVE-2026-54902

creationtimestamp| type| source ---|---|--- 2026-07-01 02:22:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhhy5agn2k 2026-07-02 01:13:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3sylg62b...

UBUNTU-CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

DEBIAN-CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-54502

creationtimestamp| type| source ---|---|--- 2026-07-01 02:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgjjojkq2v 2026-07-02 01:13:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu4gwuxd2o...

CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

EUVD-2026-40862

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-57963

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-57963 Chat UI manipulation by injection

An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...

CVE-2026-57963

The CVE-2026-57963 issue affects chat UI in Thunderbird where an attacker able to send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. Underlying risk is manipulation of the chat interface and potential phishing wi...

PT-2026-54448

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 140.12.1 Thunderbird versions prior to 152.0.1 Description An attacker can inject arbitrary styled content, phishing links, and CSS to manipulate the chat UI by sending HTML chat messages via Matrix or XMPP...

CVE-2026-56224 Capgo - Login CSRF and Session Fixation via URL Query Parameters

Capgo console.capgo.app/login before 12.128.2 accepts accesstoken and refreshtoken in URL query parameters, automatically authenticating users without confirmation. Attackers can craft malicious links to force victims into attacker-controlled sessions, exposing tokens in browser history and logs...

CVE-2026-10564

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery SSRF. The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker c...

EUVD-2026-40290

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

PT-2026-54015

Name of the Vulnerable Software and Affected Versions Storage Concentrator SC & SCVM affected versions not specified Description Reflected cross-site scripting occurs because unsanitized content is echoed back in 404 error pages. An attacker can craft a malicious URL that, when visited by an...