GHSA-H84G-69H7-MW6V vulnerabilities

Vulnerabilities for packages: debezium...

MINI-752G-W5MF-G56Q

Bulletin has no description...

PT-2026-73143

SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth middleware. The middleware accepts the API token Conf.Api.Token via an Authorization header Token/Bearer or a ?token= query parameter, and neither path is...

Linux Distros Unpatched Vulnerability : CVE-2026-72888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a...

CVE-2026-73054

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated...

CVE-2026-73046

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/ surface, accepts the workspace access code Conf.AccessAuthCode as the Basic Auth password but never consults the...

CVE-2026-73045

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit unbounded password guesses without rate limiting ...

CVE-2026-73054

CVE-2026-73054 affects SiYuan versions before v3.7.4. The vulnerability is an authentication bypass in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocke...

CVE-2026-73054 SiYuan before v3.7.4 Authentication Bypass via WebSocket

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated...

CVE-2026-73054

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated...

CVE-2026-73046

Technical details for CVE-2026-73046 are not publicly provided in the supplied documents; monitor for updates from vendors and advisories.

CVE-2026-73046 SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/ surface, accepts the workspace access code Conf.AccessAuthCode as the Basic Auth password but never consults the...

CVE-2026-73045 SiYuan before 3.7.4 Brute-Force via authFilePublishAccess

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit unbounded password guesses without rate limiting ...

CVE-2026-73045

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit unbounded password guesses without rate limiting ...

CVE-2026-55153 vulnerabilities

Vulnerabilities for packages: airbyte-platform, debezium, hono, airbyte-platform-fips, airbyte-server-fips...

MINI-5399-FJ9X-3CM9

Bulletin has no description...

MINI-847X-V9C3-8284

Bulletin has no description...

CVE-2026-19900

creationtimestamp| type| source ---|---|--- 2026-08-15 17:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5auaw4h526 2026-08-16 02:45:25+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i 2026-08-18 06:00:03+00:00| confirmed|...

Security Bulletin: This Power System update is being released to address CVE-2026-16835

Summary Power Systems Firmware is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state,...

CVE-2026-19901

CVE-2026-19901 affects LB-LINK X-PRO 1.0.22-20231206. The vulnerability targets the file /etc/config/easycwmp, enabling manipulation that results in hard-coded credentials. It can be launched remotely and is described as high-severity with components affected including confidentiality, integrity,...