CVE-2026-58150

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4...

CVE-2026-58175

Apache Traffic Server leaks memory when handling HostDB SRV records. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...

CVE-2026-24033

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3, from 9.0.0 through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the iss...

CVE-2026-67193

creationtimestamp| type| source ---|---|--- 2026-07-29 18:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrslnxpa4t2q 2026-07-29 20:15:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-67193 2026-07-30 20:27:00+00:00| seen|...

CVE-2026-58180

The Apache Traffic Server txnbox plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...

CVE-2026-66737

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

GHSA-FM7P-GW32-828P

creationtimestamp| type| source ---|---|--- 2026-07-29 18:31:02+00:00| seen| https://gist.github.com/alon710/1cabeec5e425623518fb342992349eb6...

jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...

CVE-2026-66051

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-64268

A flaw was found in the Linux kernel's Soft iWARP siw driver. A remote attacker, by sending specially crafted Read Response segments that exceed the requested length, can trigger an out-of-bounds write. This vulnerability can lead to memory corruption, potentially causing a kernel crash or...

GHSA-JQ8W-8Q2F-FFM9

creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c...

ECHO-8E1B-B2A9-C26D

Bulletin has no description...

CVE-2026-65888

creationtimestamp| type| source ---|---|--- 2026-07-29 15:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbha6yr42v 2026-07-29 18:00:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiy5n5mo24 2026-08-06 03:07:07+00:00| seen|...

GHSA-W284-33MX-6G9V

creationtimestamp| type| source ---|---|--- 2026-07-29 15:31:13+00:00| seen| https://gist.github.com/alon710/2872dac20223d7dd754cee0ee5c0587f...

CVE-2026-16543 Kong Operator cluster-wide ingress configuration DoS via embedded KIC CA-certificate ID collision

Kong Operator's embedded Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. The embedded KIC collects CA-certificate Secrets across all watched namespaces using a label selector...

CVE-2026-15228 Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision

Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets across all watched namespaces using a label selector alone, without ingress-class or namespace...

GHSA-V3R7-H72X-CJCM

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:09+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mxyaw2c 2026-08-04 13:32:14+00:00| seen| https://gist.github.com/alon710/95d41625eb91d5b304c0c5ed76c502de...

GHSA-8XCM-R25X-G524

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:08+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mvibp2t 2026-08-04 14:32:21+00:00| seen| https://gist.github.com/alon710/51c65a255f770cf34523cbf52ef9595a...

GHSA-4CWX-7WF7-3272

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:07+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2kt7jx23 2026-08-03 19:25:00+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3ms77zcaiyk2n...

CVE-2026-67215

creationtimestamp| type| source ---|---|--- 2026-07-29 15:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrs6wfpmo72f 2026-07-29 15:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsb4uh6gh2q 2026-08-05 18:07:07+00:00| seen|...