CVE-2026-34149

creationtimestamp| type| source ---|---|--- 2026-07-07 04:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzrr7czc623...

CVE-2026-11405

creationtimestamp| type| source ---|---|--- 2026-07-07 04:31:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpzrjkh5ga2f 2026-07-07 04:31:59+00:00| seen| https://bsky.app/profile/potato.software/post/3mpzrjlnff724 2026-07-07 08:15:44+00:00| seen|...

CVE-2026-34198

creationtimestamp| type| source ---|---|--- 2026-07-07 04:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzr7cexwq2y...

CVE-2026-34034

creationtimestamp| type| source ---|---|--- 2026-07-07 04:18:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqqvvaww2a...

CVE-2026-34171

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the GET /invitations/uuid endpoint can perform a state-changing password reset using an attacker-known invitation UUID, allowing an attacker who can cause a victim to visit...

CVE-2026-34057

creationtimestamp| type| source ---|---|--- 2026-07-07 04:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqkwrtlp22...

CVE-2026-34047

creationtimestamp| type| source ---|---|--- 2026-07-07 04:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqankglc2a 2026-07-07 05:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpztcxqgo42h...

CVE-2020-35675

creationtimestamp| type| source ---|---|--- 2026-07-07 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpzq54y7a52v...

CVE-2026-42143

creationtimestamp| type| source ---|---|--- 2026-07-07 04:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a 2026-07-07 06:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u...

CVE-2026-34035

creationtimestamp| type| source ---|---|--- 2026-07-07 04:02:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpu6t7fh2w...

CVE-2026-42147

creationtimestamp| type| source ---|---|--- 2026-07-07 04:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpqm2sbu2y...

CVE-2026-42200

creationtimestamp| type| source ---|---|--- 2026-07-07 03:58:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpnah5yk2y 2026-07-07 06:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwj4t67o25...

CVE-2026-34044

creationtimestamp| type| source ---|---|--- 2026-07-07 03:56:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpk352hd2w...

CVE-2026-34058

creationtimestamp| type| source ---|---|--- 2026-07-07 03:54:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzph3hggc24...

CVE-2026-34168

creationtimestamp| type| source ---|---|--- 2026-07-07 03:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpearmqu23 2026-07-07 07:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzzucuahv2y...

CVE-2026-42172

creationtimestamp| type| source ---|---|--- 2026-07-07 03:51:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpbkmwrd2a...

EUVD-2026-41985

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the file upload endpoint app/Http/Controllers/UploadController.php for database backup restore uploads did not enforce file type or size validation, allowing an authenticat...

EUVD-2026-41983

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public methods startUnmanaged, stopUnmanaged, restartUnmanaged that accept a container ID parameter directly from the browse...

EUVD-2026-41982

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, log drain secret and environment values were interpolated into shell commands without sufficient encoding, allowing an authenticated user to inject commands executed on the...

CVE-2026-42172

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Sanctum API tokens did not expire, allowing a leaked token to retain access indefinitely until manually revoked. This issue is fixed in version 4.0.0-beta.474...