CVE-2026-76440

CVE-2026-76440 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , addressing path traversal issues (CWE-23) discovered during an internal security review. Cisco assigned a CVSS 3.1 base score of 9.8 (CRITICAL) with a network attack vector requiring no privileges or user i...

CVE-2026-76440 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440: Relative Path Traversal

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-89090: Uncaught Exception

An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range...

CLSA-2026-1788346056 TuxCare security update for org.springframework (23 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1...

CLEANSTART-2026-HA54107 Security fixes in tekton-chains 0.25.2-r1

Package tekton-chains version 0.25.2-r1 fixes 23 vulnerabilities: ghsa-gcjh-h69q-9w9g, ghsa-pmwq-pjrm-6p5r, CVE-2026-49478, CVE-2026-48702, CVE-2026-49834...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-23 (1.0.0)

aji-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: GHSA-WJ94-V92P-2623...

GLSA-202608-23 : Incus: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-23 Incus: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Incus. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

CVE-2026-77000

creationtimestamp| type| source ---|---|--- 2026-08-23 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtr7kvnnmu2t 2026-08-23 18:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtremudj3x2m...

CVE-2026-78056

creationtimestamp| type| source ---|---|--- 2026-08-23 04:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dg64lbt7uh7tl...

CVE-2026-75616

creationtimestamp| type| source ---|---|--- 2026-08-23 02:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99267 2026-08-24 00:00:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99267 2026-08-24 14:02:45+00:00| seen|...

CVE-2026-13736

creationtimestamp| type| source ---|---|--- 2026-08-23 02:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99247 2026-08-24 00:00:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99247 2026-08-24 21:00:06+00:00| seen|...

CVE-2026-59808

creationtimestamp| type| source ---|---|--- 2026-08-23 01:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplou5arx2u...

CVE-2026-16149

creationtimestamp| type| source ---|---|--- 2026-08-23 00:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i2gzzmx55e4jk 2026-08-23 01:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpln6adlw2m 2026-08-23 12:00:25+00:00| seen|...

CVE-2026-78049

creationtimestamp| type| source ---|---|--- 2026-08-23 00:18:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ewaeup2j7h3my...

BIT-KIBANA-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources

Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...

BIT-ELK-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources

Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...

CVE-2026-72677

Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...

CVE-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources

Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...