CVE-2026-26740

creationtimestamp| type| source ---|---|--- 2026-03-18 19:31:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe7ywz7am2h...

CVE-2025-69614

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-10-31...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005739 advisory. In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix nexthop hash size The nexthop code expects a 31 bit hash, such as what is returned by...

kernel: Linux kernel: Out-of-bounds write in VXLAN due to incorrect nexthop hash size leading to denial of service

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN implementation. An attacker with elevated privileges CAPNETADMIN can exploit this vulnerability by configuring the system to accept and forward VXLAN packets. The issue arises from an incorrect nexthop hash size, where a 32-bit...

AZL-78216 CVE-2026-26958 affecting package telegraf 1.31.0-15

filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If Point.MultiScalarMult i...

CVE-2013-5625

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: A public posting on 20130831 referenced this ID for a specific issue, but that issue had not been assigned this ID by any CNA. Notes: The posting will later have IDs assigned in accordance with CVE content decisions...

CVE-2013-5622

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: A public posting on 20130831 referenced this ID for a specific issue, but that issue had not been assigned this ID by any CNA. Notes: The posting will later have IDs assigned in accordance with CVE content decisions...

Wildfly Elytron integration susceptible to brute force attacks via CLI

Impact A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI. Patches The default behaviour has been changed in...

CVE-2025-11261

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Language/mediawiki.Language.Js. This issue affects MediaWiki: from before 1.39.15,...

CVE-2025-134655

creationtimestamp| type| source ---|---|--- 2026-01-31 17:04:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mdqcedfvbt2y...

CVE-2025-14554

creationtimestamp| type| source ---|---|--- 2026-01-31 15:15:25+00:00| seen| Telegram/yLVovWnRIa1z9fOOSjQ0lLfvE1Por1sqR2ueDHktHlhfs...

CVE-2024-4027

creationtimestamp| type| source ---|---|--- 2026-01-31 03:27:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mdoupdsatc2a...

CVE-2025-30944

creationtimestamp| type| source ---|---|--- 2026-01-20 20:00:31+00:00| seen| Telegram/12iYeIru0X1kR4rD7M67cRlDznDQLtt7jTKHEoxLyP311tE...

MiracleLinux 9 : zlib-1.2.11-31.el9.1 (AXSA:2022-3946:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3946:07 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : firefox-128.2.0-1.el8_10.ML.1 (AXSA:2024-8869:31)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8869:31 advisory. firefox: 115.15/128.2 ESR mozilla: Type confusion when looking up a property name in a with block CVE-2024-8381 mozilla: Internal event interfaces...

CVE-2026-0543

creationtimestamp| type| source ---|---|--- 2026-01-13 22:31:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdmb3a4eh2c 2026-01-14 15:25:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevce35g23...

CVE-2025-52517

creationtimestamp| type| source ---|---|--- 2026-01-05 20:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbpcb753u22q...

PT-2026-1111

Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 2025-12-31 Description A non-server device token can retrieve share tokens via the shared servers endpoint. These share tokens are intended for unrelated access. Recommendations Update Plex Media Server to a...

CVE-2021-47742

creationtimestamp| type| source ---|---|--- 2025-12-31 22:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcuucsgmh2c 2026-01-01 21:02:57+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mbfbpeqyx322...

CVE-2021-47747

creationtimestamp| type| source ---|---|--- 2025-12-31 21:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcucfujvl2y...