CVE-2026-65595

Technical details beyond the description are not provided in the supplied documents. No explicit affected components, versions, exploitation status, or remediation steps are included. Monitor for updates.

CVE-2026-65592

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open without scheme validation. An attacker with workflow creation/editing privileges can cra...

EUVD-2026-47635

n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achieve host-level code execution as the n8n process. The legac...

CVE-2026-60799

creationtimestamp| type| source ---|---|--- 2026-07-22 11:14:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mra6z3whu22o 2026-07-22 11:14:30+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116963335733043048 2026-07-23 17:47:18+00:00| seen|...

GHSA-2RP8-MM9Q-FP49

creationtimestamp| type| source ---|---|--- 2026-07-22 08:31:19+00:00| seen| https://gist.github.com/alon710/200e1b4ca9b1b66d608a6e02108ba259...

GHSA-9WJQ-CP2P-HRGF

creationtimestamp| type| source ---|---|--- 2026-07-22 08:30:36+00:00| seen| https://gist.github.com/alon710/cd896a69a4be919308bb443d6cb706e0...

CVE-2026-16419

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:20+00:00| seen|...

CVE-2026-16492

creationtimestamp| type| source ---|---|--- 2026-07-22 03:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7ehohfv32e...

CVE-2026-63262

creationtimestamp| type| source ---|---|--- 2026-07-22 03:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7dms6imx23...

CVE-2026-8984

creationtimestamp| type| source ---|---|--- 2026-07-22 02:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7ad45xe72b 2026-07-22 17:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratv6254e2a...

CVE-2026-8987

creationtimestamp| type| source ---|---|--- 2026-07-22 01:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr77upipxb2j 2026-07-22 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratyrlhlu2k...

CVE-2026-62513

creationtimestamp| type| source ---|---|--- 2026-07-22 01:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76fe22e32q 2026-07-23 18:20:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-64033

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rtrs module. An incorrect cleanup sequence during path file creation can lead to a use-after-free vulnerability. This issue occurs when an object is deallocated prematurely, and subsequent...

EUVD-2026-47426

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: eProcurement. The supported version that is affected is 9.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-47379

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

EUVD-2026-47344

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platfor...

EUVD-2026-47179

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-63507

Name of the Vulnerable Software and Affected Versions Sourcerer extension affected versions not specified Description Multiple code injection vectors exist within the extension. The Free version fails to verify that both the article creator and the last modifier possess Super User privileges befo...

Plone < 3.1 XSRF

The version of Plone installed on the remote host is prior to 3.1.0. It is, therefore, affected by multiple cross-site request forgery vulnerabilities. A flaw exists, allowing remote attackers to add arbitrary accounts via the joinform page and change the privileges of arbitrary groups via the...

CVE-2026-60326

creationtimestamp| type| source ---|---|--- 2026-07-21 23:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6z7nghko2a 2026-07-23 16:51:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 17:07:12+00:00| seen|...