MINI-JVG3-HG59-M536

Bulletin has no description...

MINI-P62Q-FJFG-C9C9

Bulletin has no description...

MINI-QV3G-JJ47-H48Q

Bulletin has no description...

MINI-MRPM-Q7WV-VH3P

Bulletin has no description...

MINI-8C4X-CQ9F-PVGG

Bulletin has no description...

MINI-RJXF-M767-P3XW

Bulletin has no description...

MINI-GFVM-QG5V-PGRX

Bulletin has no description...

MINI-G646-FH2R-WJWG

Bulletin has no description...

CVE-2026-65907

creationtimestamp| type| source ---|---|--- 2026-07-23 13:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116969533025380702 2026-07-23 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcx3efa542r 2026-07-23 15:02:05+00:00| seen|...

CVE-2026-65912 DOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTR

DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...

CGA-3JGG-PXMX-5X66

Bulletin has no description...

CVE-2026-65455

creationtimestamp| type| source ---|---|--- 2026-07-23 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcvwqelee2v...

CVE-2026-65897

Grav API Plugin versions before 1.0.10 fail to validate the groups field in InvitationsController::create, allowing authenticated api.users.write callers to assign invited accounts to groups that grant api.super permissions. Attackers can create invitation records with elevated group membership,...

CGA-8JWW-W856-PP8W

Bulletin has no description...

CVE-2026-64142

creationtimestamp| type| source ---|---|--- 2026-07-23 12:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrcrzkrruz2k...

CVE-2026-60158

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...

CVE-2026-60160

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j...

CVE-2026-60150

creationtimestamp| type| source ---|---|--- 2026-07-23 11:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrcrqzxkqk2j 2026-07-23 16:46:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CGA-7RR6-345F-3WPM

Bulletin has no description...

PYSEC-2026-3482 MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...