CVE-2026-30623

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling...

CVE-2026-15769

creationtimestamp| type| source ---|---|--- 2026-07-14 23:43:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnf5nd2jx2e 2026-07-16 04:45:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-17 21:37:06+00:00| seen|...

CVE-2026-48334

creationtimestamp| type| source ---|---|--- 2026-07-14 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndbdebps2z 2026-07-15 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116922110851046198 2026-07-15 04:30:28+00:00| seen|...

CVE-2026-15738

creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncsl2fl42i 2026-07-15 17:07:09+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hcc4fo2b...

CVE-2026-48337

creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncs7pxyz2c...

CVE-2026-48290

creationtimestamp| type| source ---|---|--- 2026-07-14 22:54:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncemduok2t 2026-07-19 14:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqyxb25h5y2c...

CVE-2026-48318

creationtimestamp| type| source ---|---|--- 2026-07-14 22:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbzueboc2x 2026-07-14 23:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndexprug24 2026-07-15 07:30:28+00:00| seen|...

GHSA-9HC2-HJX8-Q6PV

creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:05+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337 2026-07-15 00:00:00+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337...

CVE-2026-48356

creationtimestamp| type| source ---|---|--- 2026-07-14 22:12:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7zmfnfg2f 2026-07-15 10:18:08+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoilwqix325 2026-07-15 14:38:21+00:00| seen|...

CVE-2026-48259

creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w3ijbo2f 2026-07-15 10:18:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimj2ktr27 2026-07-18 03:37:06+00:00| seen|...

CVE-2026-54052

creationtimestamp| type| source ---|---|--- 2026-07-14 22:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7siy2dj2q 2026-07-15 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqppubmqtj2w 2026-07-16 00:34:33+00:00| seen|...

GHSA-7RX3-5WX3-5V76

creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:32+00:00| seen| https://gist.github.com/alon710/e9ace864fd0fc758277cc4aa4cece6b7 2026-07-14 20:43:17+00:00| seen| https://gist.github.com/alon710/69a35e6d85f7f0c43de5276d0ac08d9d...

nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

Summary The nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creation and token-regeneration paths use the configured TTL resolver, but POST /ui/hosts hardcodes now.Add24...

CVE-2026-5040

creationtimestamp| type| source ---|---|--- 2026-07-14 20:05:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyxth4og27...

CVE-2026-15701

creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyuqumh72z...

GHSA-VVP9-H8P2-XWFC

creationtimestamp| type| source ---|---|--- 2026-07-14 19:42:05+00:00| seen| https://gist.github.com/alon710/553eb2089447345d30a93b1881dc2ee5...

CVE-2026-50141

creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...

GHSA-G7MM-9VX7-JM7H

creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...

CVE-2026-50399

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:02+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...

CVE-2026-50405

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:12+00:00| seen|...