DEBIAN-CVE-2026-49299

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

CVE-2026-9645

creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzi3bahs2w 2026-05-28 23:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6g46htp2v 2026-08-12 08:00:07+00:00| seen|...

CVE-2026-33590

creationtimestamp| type| source ---|---|--- 2026-05-28 21:40:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwydw5s2c2n 2026-06-12 12:43:17+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3rd3yvp72n 2026-06-16 00:48:01+00:00| seen|...

CVE-2026-9658

creationtimestamp| type| source ---|---|--- 2026-05-28 21:33:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwxwk62fg2u...

CVE-2026-33462

creationtimestamp| type| source ---|---|--- 2026-05-28 21:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxdlxmtz2e 2026-05-29 14:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

CVE-2026-47336

creationtimestamp| type| source ---|---|--- 2026-05-28 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwzzrkyp2r 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 01:15:42+00:00| seen...

CVE-2026-35277

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-47337

creationtimestamp| type| source ---|---|--- 2026-05-28 21:14:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwuie44e2k 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-02 06:56:24+00:00| seen...

CVE-2026-42998

creationtimestamp| type| source ---|---|--- 2026-05-28 21:13:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwwsrnh6g2z...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-49127

creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k 2026-05-28 21:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k...

CVE-2026-45058

creationtimestamp| type| source ---|---|--- 2026-05-28 20:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwum6exuo2e...

CVE-2026-44463

creationtimestamp| type| source ---|---|--- 2026-05-28 20:08:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwt7frvk42e 2026-05-28 21:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6msug72z 2026-06-03 02:37:05+00:00| seen|...

GHSA-2C2J-9GV5-CJ73

creationtimestamp| type| source ---|---|--- 2026-05-28 19:29:34+00:00| seen| https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc...

15,000 WordPress Sites Affected by Administrator Account Creation Vulnerability in WP Maps Pro WordPress Plugin

On March 24th, 2026, we received a submission for an Unauthenticated Administrator Account Creation vulnerability in WP Maps Pro, a WordPress plugin with more than 15,000 sales. This vulnerability makes it possible for unauthenticated attackers to create new administrator accounts on the affected...

CVE-2026-39292

creationtimestamp| type| source ---|---|--- 2026-05-28 19:00:10+00:00| seen| Telegram/AjSHmHRDLOBOpzCV-4U21SLO-NmWFsOh3UaLlMKSyTjmcys 2026-05-29 16:58:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyz3g7nz32x...

GHSA-MFVP-7P3V-X9MH Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest

In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest previously issued by Casdoor. Additionally, if an administrator disables or deletes an IdP...

CVE-2026-45332 Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcrypt password hash of every administrator account with a single POST request. The...

CVE-2026-45374

CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the taskcreate tool spawns durable sub-agents that inherit two insecure defaults, allowshell defaults to true config.rs:1499: self.allowshell.unwraportrue and autoapprove defaults to true taskmanager.rs:297: autoapprove:...