CVE-2026-18616

creationtimestamp| type| source ---|---|--- 2026-08-03 20:42:57+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7eeoxtlk2l 2026-08-04 16:00:45+00:00| seen|...

CVE-2026-18616

GL-iNet GL-MT3000 devices (≤ v4.4.5) are affected by a command injection in the wg-server.so Native Plugin, specifically the server.set_peer function in /cgi-bin/glc. The vulnerability stems from improper handling of the public_key argument, enabling remote code execution. Exploitation is possibl...

CVE-2026-18616

A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.setpeer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The manipulation of the argument publickey leads to command injection. Remote exploitation of the attack is...

CVE-2019-18616

HashiCorp Vault Enterprise has an Insecure Session Management issue where revoking a token scoped to a non-root namespace does not correctly revoke the dynamic secret leases associated with that token.

fredmeyer.com XSS vulnerability

Vulnerable URL: https://www.fredmeyer.com/webapp/wcs/stores/servlet/SearchDisplay?k="=Catalog=11204=10551=-1=12=0=Q=SimpleSearch=2=true=5=image=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18616 VIP website...