CVE-2026-66761

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:28+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66774

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:19+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-58237

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:09+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-58238

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:07+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66776

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:05+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66775

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:03+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66773

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66764

creationtimestamp| type| source ---|---|--- 2026-08-13 08:47:51+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-40130

creationtimestamp| type| source ---|---|--- 2026-08-13 08:47:46+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-44762

creationtimestamp| type| source ---|---|--- 2026-08-13 08:47:33+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-55182

creationtimestamp| type| source ---|---|--- 2026-08-13 08:45:03+00:00| seen| https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034 2026-08-18 18:35:03+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c9fv-cgmm-2wg7...

CVE-2026-46688

creationtimestamp| type| source ---|---|--- 2026-08-13 04:15:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-46688...

CVE-2026-16770

creationtimestamp| type| source ---|---|--- 2026-08-13 04:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16770 2026-08-13 13:50:13+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxrxlctru2t 2026-08-14 09:00:44+00:00| seen|...

CVE-2026-17431

creationtimestamp| type| source ---|---|--- 2026-08-13 04:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17431 2026-08-13 23:11:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ivcjoyhvgzpa4...

CVE-2026-63308 affecting package cert-manager for versions less than 1.12.15-11

CVE-2026-63308 affecting package cert-manager for versions less than 1.12.15-11. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2026-15554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared- secret authentication. This enables an unauthenticated...

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The Computer Emergency Response Team of Ukraine CERT-UA has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-UA pinned the activit...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

DEBIAN-CVE-2026-15554

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...