CVE-2026-5651

creationtimestamp| type| source ---|---|--- 2026-08-06 11:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfw24rww22r 2026-08-06 11:32:54+00:00| seen| https://bsky.app/profile/potato.software/post/3msfwzuowjz2s...

WordPress webtoffee-cookie-consent plugin < 3.5.3 - Consent Log Disclosure/Deletion, Page Creation & License Deactivation vulnerability

Consent Log Disclosure/Deletion, Page Creation & License Deactivation vulnerability discovered by Eran Kapeluto in WordPress Plugin webtoffee-cookie-consent versions 3.5.3...

CVE-2026-7441

creationtimestamp| type| source ---|---|--- 2026-08-06 09:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfpdjfetg2g...

CVE-2026-16636

creationtimestamp| type| source ---|---|--- 2026-08-06 08:54:44+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msfo72edfo2j 2026-08-07 02:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshidguasn2n...

GHSA-4VR5-P2GC-H23P

creationtimestamp| type| source ---|---|--- 2026-08-06 07:31:27+00:00| seen| https://gist.github.com/alon710/7cd2b59244b6ec677e9295bd453cf08b...

CVE-2026-19005

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...

CVE-2026-64604

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest mode so that a future change can have update CR8 intercepts during vCPU...

CVE-2026-15991

creationtimestamp| type| source ---|---|--- 2026-08-06 06:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4sbtz6qg7nzt6 2026-08-06 07:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfhtbrd3h2a 2026-08-06 08:54:07+00:00| seen|...

CVE-2026-11588 EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation

The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, allowing unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts...

CVE-2026-11588

The CVE-2026-11588 entry concerns the EONSR AEO Agent WordPress plugin up to version 3.7.9. The issue arises because there is no authorization check on a REST API route and HTML sanitisation is disabled before saving a post, enabling unauthenticated attackers to create administrator-attributed pu...

CVE-2026-19005 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...

EUVD-2026-53717

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the...

CVE-2026-64545

creationtimestamp| type| source ---|---|--- 2026-08-06 05:16:28+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-17624

creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf5r3poxb2g 2026-08-07 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msirs6gned2t...

CVE-2026-18485

creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2g2vfjh2z...

GHSA-9473-5F9J-94WQ

creationtimestamp| type| source ---|---|--- 2026-08-06 01:31:21+00:00| seen| https://gist.github.com/alon710/71f7a1bcf3053bbd51b0ae56e484d06e...

CVE-2026-71316

creationtimestamp| type| source ---|---|--- 2026-08-06 00:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mseqdchgvo2t 2026-08-06 04:31:21+00:00| seen| https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b...

GHSA-HXCR-HM88-MPQ6

creationtimestamp| type| source ---|---|--- 2026-08-05 21:31:30+00:00| seen| https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95...

CVE-2026-71314

creationtimestamp| type| source ---|---|--- 2026-08-05 21:31:30+00:00| seen| https://gist.github.com/alon710/ea06609eb056fc8864effae3b0dc1b95 2026-08-05 22:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejmrvz752z...

CVE-2026-71318

Nuxt (Vue.js framework) is affected in versions 3.1.0 through 3.21.10 and 4.5.1 where a top-level as prop to the /__nuxt_island/ endpoint can drive dynamic component resolution via , resolveDynamicComponent, or h(). This allows potential unauthorized component instantiation as described in the CV...