CVE-2026-9196

creationtimestamp| type| source ---|---|--- 2026-08-05 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecwr4gzi2b...

CVE-2026-9195

creationtimestamp| type| source ---|---|--- 2026-08-05 17:20:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzxqhflx2b 2026-08-06 16:15:56+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-10025 IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability

IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity XXE injection vulnerability. The vulnerability resides in the parseXmlPayload function within the event processing pipeline q1labscore.jar . When at least one log source type is configured...

Out-of-bounds Read

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An...

Out-of-bounds Read

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An attacker can cause...

CVE-2026-70598

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could...

CVE-2026-48911

creationtimestamp| type| source ---|---|--- 2026-08-05 15:25:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4ygjgczwvv462...

CVE-2026-16443

creationtimestamp| type| source ---|---|--- 2026-08-05 14:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jb5m44hrlhlib 2026-08-06 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a 2026-08-26 00:40:05+00:00| seen|...

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

A flaw was found in the brace-expansion library. The expand function does not apply maxLength when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is...

CVE-2026-16100 Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text

A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated...

CVE-2026-16100

CVE-2026-16100 describes a flaw in Keycloak where, when metrics are enabled, raw error messages from failed account operations are recorded as Prometheus metric labels. Because these messages may include user-supplied input (e.g., nonexistent client IDs), an authenticated user can generate an eno...

CVE-2026-16100

A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated...

GHSA-PWXH-7358-JQ2X

creationtimestamp| type| source ---|---|--- 2026-08-05 13:31:17+00:00| seen| https://gist.github.com/alon710/63aaf77a9f4550ada3647ec00940f1b7...

CVE-2026-64631

creationtimestamp| type| source ---|---|--- 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...

Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb43194ddda04c3dffa5cb6bea02c8bc6edba8623acf172c5da744b2488e13b0 On require, compat.js selects a platform-specific payload path and downloads an opaque binary from one of four Cloudflare Workers hosts...

MAL-2026-12452 Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb43194ddda04c3dffa5cb6bea02c8bc6edba8623acf172c5da744b2488e13b0 On require, compat.js selects a platform-specific payload path and downloads an opaque binary from one of four Cloudflare Workers hosts...

CVE-2026-17578

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...

CVE-2026-17578

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...

EUVD-2026-53299

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...

CVE-2026-17578 Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...