PT-2026-64513

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...

GHSA-74H3-CXQ7-VC5Q Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

Summary An authenticated low-privilege user can execute arbitrary code-interpreter Python and tools inside another user's authenticated session. The Socket.IO event-caller geteventcall delivers execute:python / execute:tool events to a client-supplied sessionid after only checking that the sessio...

CVE-2026-66006 lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs

lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...

CVE-2026-66006 lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs

lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...

EUVD-2026-48612

lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...

CVE-2026-66006 lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs

lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...

USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

USN-8604-1 linux-azure-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HieuPenguinnn in WordPress Plugin Events Made Easy versions = 3.1.3...

CVE-2026-12654

CVE-2026-12654 affects Payment Plugins for Stripe WooCommerce (WordPress)

CVE-2026-58275

creationtimestamp| type| source ---|---|--- 2026-07-24 00:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3t3nspm23 2026-07-24 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116972364326396269 2026-07-24 01:30:36+00:00| seen|...

PT-2026-64319

Name of the Vulnerable Software and Affected Versions lakeFS versions prior to 1.83.0 commit 71a45ee Description An authentication bypass exists in the '/setup comm prefs' endpoint. This allows unauthenticated attackers to overwrite operator metadata, such as email, name, and company, after the...

Apache Syncope SQL Injection Vulnerability (CNVD-2026-30664)

Apache Syncope is an open-source identity management system, primarily used for managing the identity lifecycle of enterprise-level users and devices. Apache Syncope has a SQL injection vulnerability. This vulnerability stems from improper handling of the sort parameter in the Audit Events search...

PT-2026-64434

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description An authenticated recipient of a single-file share can access file-activity metadata for other files and folders located in the owner's parent folder that were not intended to be shared. This occur...

CVE-2026-65971

creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| https://t.me/GithubRedTeam/94876 2026-07-24 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/94876 2026-07-24 01:00:03+00:00| seen| Telegram/lPm2d4VYpYEjn3m2EVnzf33SWkbqRmjBxDEhEFxEK5fDURE 2026-07-2...

CVE-2026-48546

creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s...

CVE-2026-63732

creationtimestamp| type| source ---|---|--- 2026-07-23 22:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdurt2jik2k 2026-07-23 23:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwpvlti2c...

PYSEC-2026-3528 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

Summary The SSE Server-Sent Events server in src/praisonai-agents/praisonaiagents/server/server.py exposes a /publish endpoint that broadcasts arbitrary messages to all connected clients without any authentication. The ServerConfig dataclass line 24 defines an authtoken field, but this token is...

EUVD-2026-47904

The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtecrecordsedit AJAX action in versions up to and including 3.2. The handler decodes attacker-controlled JSON from $POST'standard' and uses the JS...

CVE-2026-13119

The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtecrecordsedit AJAX action in versions up to and including 3.2. The handler decodes attacker-controlled JSON from $POST'standard' and uses the JS...