CVE-2026-2872

creationtimestamp| type| source ---|---|--- 2026-02-24 04:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mflbqfifkk2m...

CVE-2026-2876

creationtimestamp| type| source ---|---|--- 2026-02-24 03:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfl6f3rqqy2x...

CVE-2026-2905

creationtimestamp| type| source ---|---|--- 2026-02-24 01:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfkxojmafn2m...

CVE-2026-2907

creationtimestamp| type| source ---|---|--- 2026-02-24 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfkvgthfta2r...

CVE-2026-26325

creationtimestamp| type| source ---|---|--- 2026-02-23 15:00:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfjw5p33lq2m...

CVE-2026-2870

creationtimestamp| type| source ---|---|--- 2026-02-21 17:38:28+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/333 2026-03-02 13:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg3ewv4gch2u...

CVE-2019-25359

creationtimestamp| type| source ---|---|--- 2026-02-21 13:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfeojaookn24...

Password Managers Share a Hidden Weakness

Plus: The cybersecurity community grapples with Epstein files revelations, the US State Department plans an online anti-censorship “portal” for the world, and more...

CVE-2026-2848

creationtimestamp| type| source ---|---|--- 2026-02-21 03:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfdmye2vpj2m...

CVE-2026-27178

creationtimestamp| type| source ---|---|--- 2026-02-21 01:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfdgbrg5gv2m...

CVE-2024-49640

creationtimestamp| type| source ---|---|--- 2026-02-20 23:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfdbsjzqs72m...

CVE-2026-26193

creationtimestamp| type| source ---|---|--- 2026-02-20 22:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfd6haxxr72r 2026-07-07 18:35:04+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vjm7-m4xh-7wrc...

Friday Squid Blogging: Squid Cartoon

I like this one. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

CVE-2026-26365: Incorrect processing of “Connection: Transfer-Encoding”

...

CVE-2025-69374

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SolverWp Eleblog – Elementor Blog And Magazine Addons ele-blog allows PHP Local File Inclusion.This issue affects Eleblog – Elementor Blog And Magazine Addons: from n/a through =...

CVE-2025-69374 WordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 2.0.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SolverWp Eleblog – Elementor Blog And Magazine Addons ele-blog allows PHP Local File Inclusion.This issue affects Eleblog – Elementor Blog And Magazine Addons: from n/a through =...

CVE-2019-25354

creationtimestamp| type| source ---|---|--- 2026-02-20 13:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfcabnyf2y2u...

CVE-2026-2735

Stored Cross-Site Scripting XSS in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated when sending a POST request to ‘/blog/new-article/org.opencms.ugc.CmsUgcEditService.gwt’ using the ‘text’ parameter...

CVE-2026-26050

The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges...

CVE-2026-2284

The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.8. This is due to a missing capability check and nonce verification on the 'necleandata' AJAX action. This makes it possible for authenticated attackers,...