CVE-2026-72799

creationtimestamp| type| source ---|---|--- 2026-09-04 22:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5w7r-f4cg-rqq7 2026-09-05 10:31:56+00:00| seen| https://gist.github.com/alon710/abc6a26fdebf669c87f091f304527249...

CVE-2026-53932

creationtimestamp| type| source ---|---|--- 2026-09-04 21:03:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupugdptng2z 2026-09-10 05:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bflenr32p 2026-09-10 05:00:07+00:00| seen|...

CVE-2026-75859

creationtimestamp| type| source ---|---|--- 2026-09-04 20:35:17+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-62f5-cp2p-vq95...

MINI-2XPH-45H7-R45F

Bulletin has no description...

MINI-5G2X-749G-2Q4J

Bulletin has no description...

MINI-WV2X-FXQ5-QQ5W

Bulletin has no description...

MINI-XX7G-62W8-594J

Bulletin has no description...

CVE-2026-85656

creationtimestamp| type| source ---|---|--- 2026-09-04 19:02:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ifbl5q7b7q2ic 2026-09-04 22:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnms6ju2v 2026-09-08 02:50:03+00:00| seen|...

CVE-2026-30754

creationtimestamp| type| source ---|---|--- 2026-09-04 18:18:50+00:00| seen| https://gist.github.com/momo-trip/4cddf2c9e15600873de55259dac6b0e6...

GHSA-H539-C7R8-3XQ4 CodeWhale: js_execution leaks parent environment to model context via missing env scrub

Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Version 0.8.64 contains the fix in commit 26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e. Users should upgrade to 0.8.64 or later. The original reporter analysis is...

CVE-2026-18221

creationtimestamp| type| source ---|---|--- 2026-09-04 18:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupkapewaz23 2026-09-09 22:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4lyumq6325...

CVE-2026-18175

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupkainfhn2z 2026-09-09 22:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv4kdac7kj2p...

CVE-2026-55864

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:04+00:00| seen| Telegram/9h73ajeEnWq1UUc99NXcO070Q77AwRDtXFlqiCagLlKFUc 2026-09-05 01:00:19+00:00| published-proof-of-concept| Telegram/9h73ajeEnWq1UUc99NXcO070Q77AwRDtXFlqiCagLlKFUc...

CVE-2026-19274

creationtimestamp| type| source ---|---|--- 2026-09-04 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mupijajral2w 2026-09-04 18:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mupknjyxry22 2026-09-05 23:01:21+00:00| seen|...

CVE-2026-18149

creationtimestamp| type| source ---|---|--- 2026-09-04 17:24:08+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupi6ljdq22w 2026-09-29 23:30:32+00:00| seen| https://gist.github.com/alon710/7e27dd642f9867b84b33f236871de4c5 2026-09-30 12:01:15+00:00| seen|...

CVE-2026-19534

creationtimestamp| type| source ---|---|--- 2026-09-04 17:11:53+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muphinqjks2w 2026-09-04 23:03:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muq35omt4i2o 2026-09-05 00:23:42+00:00| seen|...

CVE-2026-17443 IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...

CVE-2026-17444

IBM App Connect Enterprise (13.0.1.0–13.0.8.1, 12.0.1.0–12.0.12.28) and IBM Integration Bus for z/OS (10.1.0.0–10.1.0.7) are affected by an XML external entity (XXE) injection in Adapter nodes , allowing a remote authenticated attacker with low privileges to obtain sensitive information. The vuln...

CVE-2026-17627

IBM Langflow OSS (versions 1.0.0–1.10.2) is affected by an improper authorization flaw (CWE-639) in its voice-mode WebSocket endpoint . The endpoint authenticates the connecting user but performs no check to verify that the user is permitted to access the specified flow identifier. In a multi-use...

EUVD-2026-71463

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...