CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-86175

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses . Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, enabling unauthorized access to e...

EUVD-2026-71974

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

akto v2.32.5

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

CVE-2026-86123

creationtimestamp| type| source ---|---|--- 2026-09-05 10:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3murcmvsoda2t 2026-09-05 10:57:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/22dc2hvauwe7h 2026-09-05 11:01:18+00:00| seen|...

zitadel v4.17.3

The Identity Infrastructure for Developers ZITADEL...

CVE-2026-18486

creationtimestamp| type| source ---|---|--- 2026-09-05 07:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqvvfsaf22p...

CVE-2026-77818

creationtimestamp| type| source ---|---|--- 2026-09-05 07:00:04+00:00| seen| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0 2026-09-06 00:00:53+00:00| published-proof-of-concept| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0...

CVE-2026-85769

creationtimestamp| type| source ---|---|--- 2026-09-05 07:00:03+00:00| seen| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0 2026-09-06 00:00:53+00:00| published-proof-of-concept| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0...

faraday v5.24.0

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

CVE-2026-13447

creationtimestamp| type| source ---|---|--- 2026-09-05 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muqruhtbcn2g 2026-09-05 06:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dghf35suimr5u 2026-09-05 07:00:59+00:00| seen|...

GHSA-8737-QX52-HJFF

creationtimestamp| type| source ---|---|--- 2026-09-05 03:31:23+00:00| seen| https://gist.github.com/alon710/f1f72dae7d8a1a049a639d5207c64786...

Signal-iOS v8.27.0.1843

Signal iOS Signal is a free and open source messaging app for simple private communication with friends. Also available on Android and Desktop. Questions? For troubleshooting and questions, please visit our support center or unofficial community forum. Contributing Bug Reports The best way to...

openvpn v2.7.7

OpenVPN -- A Secure tunneling daemon Copyright C 2002-2026 OpenVPN Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. To get the latest release of OpenVPN, go to:...

CVE-2025-61584

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4 2026-09-06 00:01:03+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4...

CVE-2026-73554

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4 2026-09-06 00:01:03+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4...

CVE-2018-18387

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| published-proof-of-concept| Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ 2026-09-06 00:01:04+00:00| published-proof-of-concept| Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ...

CVE-2024-57553

creationtimestamp| type| source ---|---|--- 2026-09-05 01:00:04+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4 2026-09-06 00:01:03+00:00| seen| Telegram/saF7t8033F3RaGsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4...

PT-2026-86399

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

PT-2026-86328

The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the image src attribute of the et pb video slider item shortcode in all versions up to, and including, 4.27.6. This is due to the image src field not being included in the $url options whitelist which only...