CVE-2026-82629

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82629...

CVE-2026-82631

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82631...

CVE-2026-58301

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58301...

What the Data Says About AI in Security Operations in 2026

AI is officially mainstream in security operations. According to Prophet Security's State of AI in Security Operations 2026 report produced from ViB’s survey of 250+ cybersecurity pros, 40% of security teams now use AI daily. Another 56% are currently testing it out, and only 4% have no plans to...

CVE-2026-53313

creationtimestamp| type| source ---|---|--- 2026-08-27 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2038...

CVE-2026-78139 Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscription via IDOR

The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and including, 3.1.3, allowing authenticated attackers with Subscriber-level access to unsubscribe arbitrary customers from product...

CVE-2026-78139

The Notifima WordPress plugin (versions prior to 3.1.4 , including 3.1.3 ) contains an Insecure Direct Object Reference (IDOR) vulnerability. The plugin fails to verify if a caller owns the subscription being modified on one of its REST endpoints . This allows authenticated attackers with Subscri...

WordPress Notifima plugin < 3.1.4 - Subscriber+ Stock Alert Unsubscription vulnerability

Subscriber+ Stock Alert Unsubscription vulnerability discovered by Shikhali Jamalzade in WordPress Plugin WooCommerce Product Stock Alert versions 3.1.4...

CVE-2026-78139: Authorization Bypass Through User-Controlled Key

The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and including, 3.1.3, allowing authenticated attackers with Subscriber-level access to unsubscribe arbitrary customers from product...

EUVD-2026-66774

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182

LibreNMS , a network monitoring system, is vulnerable to command injection in the Signal alert transport module (versions 21.6.0 through 26.5.0). The root cause lies in insufficiently escaped signal-cli path and Recipient field in the deliverAlert function of Signal.php, which are passed to unsaf...

CVE-2026-48549

creationtimestamp| type| source ---|---|--- 2026-08-26 20:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48549...

CVE-2026-55182: Improper Neutralization of Special Elements used in a Command

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

BIT-GRAFANA-2026-17183 CVE-2026-17183 CVE Record

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...

CVE-2026-19943

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19943...

CVE-2026-17089

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17089 2026-09-22 23:00:08+00:00| seen| https://t.me/GithubRedTeam/103082 2026-09-22 23:00:08+00:00| published-proof-of-concept|...

CVE-2026-14280

creationtimestamp| type| source ---|---|--- 2026-08-25 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-14280...

CVE-2026-17033 CVE-2026-17033 CVE Record

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...