CVE-2026-54490

creationtimestamp| type| source ---|---|--- 2026-07-17 23:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqux4fm3a62g...

CVE-2026-54242

creationtimestamp| type| source ---|---|--- 2026-07-17 23:50:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwvuatdz2b...

CVE-2026-14499

creationtimestamp| type| source ---|---|--- 2026-07-17 21:59:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqpmiqc62q 2026-07-18 19:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6ili462d 2026-07-21 10:37:07+00:00| seen|...

CVE-2026-13473

creationtimestamp| type| source ---|---|--- 2026-07-17 21:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqgymxyv24 2026-07-18 18:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwtv254kw2g...

CVE-2026-13446

creationtimestamp| type| source ---|---|--- 2026-07-17 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquojgqxle2i 2026-07-18 09:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqvvo465ey2n 2026-07-18 09:00:38+00:00| seen|...

CVE-2026-8476

creationtimestamp| type| source ---|---|--- 2026-07-17 20:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquliubjcs2y 2026-07-17 22:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqurxa5cqh2o 2026-07-18 14:01:33+00:00| seen|...

CVE-2026-7754

creationtimestamp| type| source ---|---|--- 2026-07-17 20:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqukdh7xx72x 2026-07-18 15:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjtisry42e...

CVE-2026-49835

creationtimestamp| type| source ---|---|--- 2026-07-17 19:55:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujrdmq7p2i...

CVE-2026-49834

creationtimestamp| type| source ---|---|--- 2026-07-17 19:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujodq3y72b...

CVE-2026-49284

creationtimestamp| type| source ---|---|--- 2026-07-17 19:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujisgyt52s...

CVE-2026-12691

creationtimestamp| type| source ---|---|--- 2026-07-17 19:29:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mquidevwe72g 2026-07-19 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyg4jrq442l...

CVE-2026-63101

creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...

CVE-2026-9135

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 commit 94981c443d4918517b9e8163d70fc598dc33a32d contain a code injection vulnerability in the Policies component's ToolGuard integration that bypasses the allowcustomcomponents=false security control. The vulnerability exists...

CVE-2026-51082

creationtimestamp| type| source ---|---|--- 2026-07-17 18:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquegvziv52i...

CVE-2026-9202

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...

CVE-2026-48008

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync; the regular integration endpoint POST...

CVE-2026-51081

creationtimestamp| type| source ---|---|--- 2026-07-17 18:08:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudskgx3r24...

CVE-2026-16072

creationtimestamp| type| source ---|---|--- 2026-07-17 18:05:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudn6gv5x2s...

CVE-2026-14871

creationtimestamp| type| source ---|---|--- 2026-07-17 17:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqud7ma5eq2g...

CVE-2026-48010 Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, UserController::upsertUser in src/Core/Framework/Api/Controller/UserController.php writes raw user data in SYSTEMSCOPE without filtering the admin field, so a non-admin API user with user:create or user:update ACL permission...