CVE-2026-63188

creationtimestamp| type| source ---|---|--- 2026-08-19 21:15:31+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mthnnlroob2x 2026-08-19 22:35:07+00:00| published-proof-of-concept| https://github.com/logto-io/logto/security/advisories/GHSA-rxjr-6c9q-h67x...

CVE-2026-11617

Tanium addressed a compression bomb vulnerability in Findings...

CVE-2026-75476

Tanium addressed a compression bomb vulnerability in Threat Response...

CVE-2026-14514

IBM Reliable Scalable Cluster Technology RSCT 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation...

CVE-2026-76584

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

CVE-2026-62727

A race condition in Windows Telephony Service allows a locally authenticated low-privilege attacker to elevate privileges to SYSTEM. CVSS 3.1 base score 7.0 (HIGH). Microsoft has published an update guide; apply the patch from the MSRC link. No exploitation details or in-the-wild activity are pro...

CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability

...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk-portable: java-25-openjdk-portable-25.0.4.1.1-0.1.hum1 aarch64, x8664 java-25-openjdk-portable-devel-25.0.4.1.1-0.1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk-portable: java-21-openjdk-portable-21.0.12.1.1-0.1.hum1 aarch64, x8664 java-21-openjdk-portable-devel-21.0.12.1.1-0.1.hum1 aarch64, x8664...

CVE-2026-76583

TRENDnet TV-IP751WIC firmware 11.03.03 has a command injection flaw in alphapd's /cgi-bin/admin/set_time.cgi handler; a proof-of-concept exploit is publicly available on GitHub. No patch version or mitigation guidance is provided in the available documents.

CVE-2026-54492

Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible createPodcastChannel.view route accepts an authenticated user's private URL because app/Http/Requests/Subsonic/CreatePodcastChannelRequest.php does not apply the SafeUrl validation used by the regular...

CVE-2026-68552

Coturn versions before 4.15.0 have a uint16_t overflow in stun_get_message_len_str() in src/client/ns_turn_msg.c: a crafted STUN body-length (65520–65532) causes the variable to wrap when STUN_HEADER_LENGTH is added, desynchronizing the TCP/TLS stream parser and dropping only the attacker's conne...

CVE-2026-68553

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

CVE-2026-12633

The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...

CVE-2026-53547

A low-privileged authenticated user on Termix (prior to 2.3.2) can call POST /database/export to retrieve a global settings table containing reset_code_ and temp_reset_token_ artifacts for other accounts, enabling account takeover and admin compromise via the normal password-reset flow. Upgrade t...

CVE-2026-17015

IBM i versions 7.3 through 7.6 (feature 5770-SS1) suffer a CWE-125 out-of-bounds read, exploitable by a remote authenticated attacker to cause denial of service and leak sensitive information (CVSS 5.4 Medium). IBM provides PTFs: SJ11150 (7.6), SJ11149 (7.5), SJ11148 (7.4), SJ11147 (7.3); no work...

GHSA-5XWG-CFVJ-GFF5 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, zipkin, conductor-fips...

CVE-2026-54876 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-JJ7C-H3WM-VJFW vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-16872

creationtimestamp| type| source ---|---|--- 2026-08-19 20:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cu6oiqtjuh24l 2026-08-19 21:30:44+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117124303679315948 2026-08-19 22:10:23+00:00| seen|...