CVE-2026-50548

creationtimestamp| type| source ---|---|--- 2026-06-26 01:30:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5saapazc2a 2026-06-27 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpbyqcckd52g 2026-07-01 17:39:00+00:00| seen|...

CVE-2026-48930

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48933

A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48933

A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48619

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

EUVD-2026-39607

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48619

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2017-11010

creationtimestamp| type| source ---|---|--- 2026-06-26 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5qx4u3622n...

CVE-2026-56411

creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:47+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncbgb2u2x...

CVE-2026-56407

creationtimestamp| type| source ---|---|--- 2026-06-26 00:01:44+00:00| seen| https://bsky.app/profile/slackers.it/post/3mp5ncaeykp26 2026-07-21 12:01:22+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r62xrwa24 2026-07-30 12:01:32+00:00| seen|...

CVE-2026-40702

creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:14+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02 2026-06-25 22:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5izqllc72r...

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 26, 2026. The vulnerability in question...

BIT-NODE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-4110

creationtimestamp| type| source ---|---|--- 2026-06-22 08:19:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouhaj45xz2s...

CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

CVE-2026-48617

A path-validation flaw in Node.js Permission Model enforcement allows process.report.writeReport() to bypass intended filesystem restrictions, leading to confidentiality impact. NVD rates it HIGH (CVSS 8.2, network, no auth). CISA SSVC confirms no active exploitation. Affected: Node.js 22, 24, 26...

EUVD-2026-34901

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance...

CVE-2026-49299

A flaw was found in OpenStack Neutron. The tagging controller incorrectly enforces plural policy action names for single-tag write operations, while the defined policy rules use singular names. This mismatch allows a project reader to bypass intended policy restrictions, enabling them to create a...

CVE-2026-46401

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session termination vulnerability where authentication tokens remain valid after user logout. This allows attackers who obtain valid tokens to maintain persistent access to...