CVE-2026-70395 Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When managerelationship is used with onlookup: :relate on a belongsto...

CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

CVE-2026-54876

creationtimestamp| type| source ---|---|--- 2026-08-05 15:07:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/g6vvs5ka6vk35 2026-08-05 23:37:49+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3msep3657ns2n 2026-08-06 04:47:35+00:00| seen|...

CVE-2026-16439 vulnerabilities

Vulnerabilities for packages: openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2026-66755

creationtimestamp| type| source ---|---|--- 2026-07-30 18:11:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lostbvn6jqpf...

CVE-2026-44616

creationtimestamp| type| source ---|---|--- 2026-07-30 11:35:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4y4bf4sqgchgx 2026-07-30 16:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cg5t67cdsurn4...

CVE-2026-15267

creationtimestamp| type| source ---|---|--- 2026-07-28 12:11:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpezcbinh2i...

EUVD-2021-34857

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie...

Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted

Challenge When attempting to perform a restore using the Veeam Recovery Media, the restore fails while establishing the connection to the local VeeamAgent.exe process, and the following error occurs: The Local Security Authority cannot be contacted Because the failure occurs before a recovery...

RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Important) (RHSA-2026:42880)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42880 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

ROOT-OS-DEBIAN-11-CVE-2026-61866 CVE-2026-61866 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-61866 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-56362 CVE-2026-56362 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-56362 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53463 CVE-2026-53463 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-53463 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-46521 CVE-2026-46521 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-46521 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-53461 CVE-2026-53461 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-53461 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available...

[SECURITY] [DLA 4686-1] dhcpcd5 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4686-1 [email protected] https://www.debian.org/lts/security/ Martin-Éric Racine July 15, 2026 https://wiki.debian.org/LTS -...

CVE-2026-58617

creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqn2yvy7q72t 2026-07-14 22:02:40+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:02:12+00:00| seen|...

KB5101649: Windows 11 Version 26H1 Security Update (July 2026)

The remote Windows host is missing security update 5101649. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

Linux Distros Unpatched Vulnerability : CVE-2026-61627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-pjjp-65r7-ppgm: Out-of-bounds read and write in wraplinesmeasure CVE-2026-61627 Note that Nessus relies on the presence of the package as...

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...