CVE-2026-14923

The CVE-2026-14923 entry applies to the WordPress plugin Sync Post With Other Site, affecting versions before 1.9.3. The issue is an operator-precedence flaw in the REST route’s authorization check, which fails to properly enforce page-editing capability. As a result, an authenticated user with o...

CVE-2026-16531

CVE-2026-16531 affects PCP’s pmproxy logger servlet, where a crafted hostname enables path traversal leading to arbitrary file and directory creation and potential DoS. Root cause is unauthenticated remote exploitation of the logger servlet via crafted hostnames. The Red Hat mitigation recommends...

CVE-2026-16531 Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

CVE-2026-16531 Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

EUVD-2026-50980

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

GHSA-W8XC-8G92-V77H

creationtimestamp| type| source ---|---|--- 2026-07-30 05:31:24+00:00| seen| https://gist.github.com/alon710/5694b6f230218930632a6e462097e637...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service. Mitigation To mitigate this issue, restrict network access to TC...

CVE-2026-17662

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:54+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:23:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

GHSA-XGR6-PQJV-3PF8

creationtimestamp| type| source ---|---|--- 2026-07-30 04:31:31+00:00| seen| https://gist.github.com/alon710/2d94cc50795411681f41b69ad6e69380...

CVE-2026-48448

creationtimestamp| type| source ---|---|--- 2026-07-30 04:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtki7wira23 2026-08-01 11:00:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e 2026-08-04 11:12:11+00:00| seen|...

CVE-2026-51233

creationtimestamp| type| source ---|---|--- 2026-07-30 03:53:15+00:00| seen| https://gist.github.com/programmervuln/698a3ca54a49126a23a60092240d933a...

GHSA-9XQ3-3FQG-4VG7

creationtimestamp| type| source ---|---|--- 2026-07-30 01:32:06+00:00| seen| https://gist.github.com/alon710/3dfab3b451ecd01d7d3ac084db088fec...

CVE-2026-16339

creationtimestamp| type| source ---|---|--- 2026-07-30 00:51:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5pemnuz3idiia...

CVE-2026-64370

A flaw was found in the Linux kernel's posix-cpu-timers component. This vulnerability allows a local user to trigger a resource leak within the docpunanosleep function. The issue occurs because a process identifier PID reference is not properly released if a timer creation operation fails. This...

CVE-2025-63913

creationtimestamp| type| source ---|---|--- 2026-07-30 00:01:47+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrt55mv6fa2e...

PT-2026-66404

Name of the Vulnerable Software and Affected Versions PCP pmproxy affected versions not specified Description An unauthenticated remote attacker can exploit a path traversal vulnerability in the logger servlet by using a crafted hostname. This flaw allows the creation of arbitrary files and...

PT-2026-66575

Name of the Vulnerable Software and Affected Versions Spikster versions prior to commit e1cdf8c Description A missing authentication flaw allows unauthenticated remote attackers to access all API routes. This occurs because the CipiAuth middleware is registered but not applied to any route within...

PT-2026-66545

Name of the Vulnerable Software and Affected Versions Leantime version 3.6.2 Description An issue exists where the Laravel VerifyCsrfToken middleware is excluded from the global middleware stack in app/Http/Kernel.php. This allows unauthenticated attackers to perform state-changing actions on...

Linux Distros Unpatched Vulnerability : CVE-2026-16531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary...