EUVD-2026-51151

Julep contains an insecure direct object reference vulnerability in the getexecutiondetails endpoint that allows authenticated tenants to read another tenant's execution data. Attackers can supply arbitrary executionid values to retrieve sensitive execution records including task inputs, outputs,...

CVE-2026-18362

creationtimestamp| type| source ---|---|--- 2026-07-30 14:13:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy...

CVE-2026-18360

creationtimestamp| type| source ---|---|--- 2026-07-30 14:07:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp...

MINI-F9RW-3RW9-V29X

Bulletin has no description...

MINI-652J-XQ2X-677R

Bulletin has no description...

EUVD-2026-51095

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO clientid and...

CVE-2026-18382 Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO clientid and...

CVE-2026-16969

creationtimestamp| type| source ---|---|--- 2026-07-30 11:19:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrud2b6bws2m 2026-07-30 14:07:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp...

CVE-2026-64256

A flaw was found in the Linux kernel's XFS filesystem. This vulnerability occurs in the dqiterate function, where an unsigned 32-bit quota identifier qid can wrap around to zero if it reaches its maximum value. This integer overflow can cause the iteration of quota IDs to restart, potentially...

CVE-2026-58162

creationtimestamp| type| source ---|---|--- 2026-07-30 09:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mru4dv7t3l2r 2026-07-30 17:48:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruyqcqzen2i 2026-08-05 23:37:09+00:00| seen|...

CLEANSTART-2026-AT41104 Security fixes in opentofu-fips 1.8.11-r3

Package opentofu-fips version 1.8.11-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CLEANSTART-2026-IX23233 Security fixes in harbor-registry-fips 3.0.0.1-r3

Package harbor-registry-fips version 3.0.0.1-r3 fixes 1 vulnerabilities: CVE-2025-29923...

CLEANSTART-2026-MS74348 Security fixes in kube-vip 1.0.4-r1

Package kube-vip version 1.0.4-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-VE32460 Security fixes in wave 0.10.0-r1

Package wave version 0.10.0-r1 fixes 1 vulnerabilities: CVE-2025-61729...

CVE-2026-49865

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/95796 2026-07-30 10:00:02+00:00| seen| Telegram/A5dzmxNNpgXG6imsEkmIRw7rqHzvuUDwkzq5yMgxpcxN0a0 2026-07-30 14:00:04+00:00| seen| Telegram/47AGWfAWFIwZKzQclsisfXazYjpo74QYaHVlY-riLjwoTE 2026-07-...

CVE-2026-47858

creationtimestamp| type| source ---|---|--- 2026-07-30 06:51:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4pmcheqhxq63y 2026-07-30 16:15:06+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759 2026-08-20 03:00:04+00:00|...

CVE-2026-44091 Creation of a new configuration by posting a malicious ID to MQTT

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

CVE-2026-13395

The CVE-2026-13395 entry concerns the WordPress plugin “Online Scheduling and Appointment Booking System” prior to version 27.8. The underlying issue is that a parameter from unauthenticated front-end booking requests is not properly sanitized or cast before being used in a SQL query, enabling un...

CVE-2026-13395 Bookly < 27.8 - Unauthenticated SQL Injection via staff_id

The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...

CVE-2026-18018

creationtimestamp| type| source ---|---|--- 2026-07-30 05:46:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 12:15:05+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...