EUVD-2026-58738

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

CVE-2026-19639 Improper Access Control

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...

CVE-2026-19631 SQL Injection

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...

EUVD-2026-58733

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...

CVE-2026-19631

CVE-2026-19631 describes a SQL injection vulnerability in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries and access sensitive data, including credentials. Tenable’s advisory indicates Security Center 6.9.0 fixes multiple vulnerabilities and lists ...

MINI-8XVH-WMVP-RRXF

Bulletin has no description...

CVE-2025-6010

creationtimestamp| type| source ---|---|--- 2026-08-14 16:00:22+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-15 00:00:46+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-16 00:00:50+00:00| published-proof-of-concept| https://t.me/devsecopsweekly/1310...

MINI-QPM5-C5JR-XCPC

Bulletin has no description...

MINI-9RPW-6M96-HJ6G

Bulletin has no description...

MINI-X372-PHM6-WR4J

Bulletin has no description...

MINI-8GFR-F4QJ-4C5J

Bulletin has no description...

MINI-4V59-G4V5-G4C8

Bulletin has no description...

MINI-8FWP-5G6P-4FXR

Bulletin has no description...

CVE-2026-70631

A flaw was found in FFmpeg. An attacker can exploit an uninitialized heap memory disclosure vulnerability in the native TIFF decoder by providing a specially crafted TIFF file. This crafted file can cause the tiffunpackzlib function to include stale data from previous memory allocations in the...

MINI-6J6H-8QH9-MHQW

Bulletin has no description...

MINI-XG77-75Q7-RQRX

Bulletin has no description...

MINI-24G7-W97V-6X5X

Bulletin has no description...

CVE-2026-72814

The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...

CVE-2026-72820

Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...

CVE-2026-72820 Grav 2.0.11 Path Traversal via Backup Profile Configuration

Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...