CVE-2026-84064

creationtimestamp| type| source ---|---|--- 2026-09-18 22:09:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6oayclk2b 2026-09-18 23:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtcm3jimh2t 2026-09-19 22:01:40+00:00| seen|...

CVE-2026-82832

creationtimestamp| type| source ---|---|--- 2026-09-18 22:09:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6nq5gli2w 2026-09-18 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtc24obpb2g 2026-09-20 02:03:10+00:00| seen|...

CVE-2026-81657

creationtimestamp| type| source ---|---|--- 2026-09-18 22:09:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6n65tna2r 2026-09-18 23:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtbicbg4x24 2026-09-19 14:30:00+00:00| seen|...

CVE-2026-80441

creationtimestamp| type| source ---|---|--- 2026-09-18 22:08:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6mn5kee2f 2026-09-18 22:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtawesa2c2p 2026-09-20 03:03:55+00:00| seen|...

CVE-2026-61781

creationtimestamp| type| source ---|---|--- 2026-09-18 22:08:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6lo74zi2t 2026-09-18 22:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvtaehxio22j 2026-09-20 19:01:50+00:00| seen|...

CVE-2026-71418

creationtimestamp| type| source ---|---|--- 2026-09-18 22:02:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt6bkfyyu24...

CVE-2026-93738

creationtimestamp| type| source ---|---|--- 2026-09-18 22:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt6b2wu5m2z 2026-09-18 23:09:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/445pssal74epq...

CVE-2025-55787

creationtimestamp| type| source ---|---|--- 2026-09-18 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvt3vex2op2b...

CVE-2026-63647

creationtimestamp| type| source ---|---|--- 2026-09-18 21:17:50+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvt3rfshuv2p 2026-09-18 22:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvt6m5i7zj2f 2026-09-18 22:30:05+00:00| seen|...

CVE-2026-18464

creationtimestamp| type| source ---|---|--- 2026-09-18 21:00:04+00:00| seen| Telegram/H7T7dK3uqmkjlkp23xt7S3AYXc4CzofFX2dd1POZQ2XzQMI 2026-09-19 00:00:09+00:00| published-proof-of-concept| Telegram/H7T7dK3uqmkjlkp23xt7S3AYXc4CzofFX2dd1POZQ2XzQMI 2026-09-22 07:00:11+00:00| seen|...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.21-1.4.hum1 aarch64, x8664 python3.10-debug-3.10.21-1.4.hum1 aarch64, x8664 python3.10-devel-3.10.21-1.4.hum1 aarch64, x8664 python3.10-idle-3.10.21-1.4.hum1 aarch64,...

CVE-2026-61670 microsandbox: Secret values exposed in world-readable process arguments

microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandboxcmd.rs...

CVE-2026-63646

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/formKey calls McpController.getMcpField without authentication because ShiroFilter.addPublicPathFilters marks /mcp/ as anonymous and the controller...

CVE-2026-92702

creationtimestamp| type| source ---|---|--- 2026-09-18 20:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvsxw7swel2y 2026-09-18 22:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvt6ow2osi2w...

CVE-2026-84239

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability caused by improper neutralization of special elements in an SQL command. A remote authenticated attacker with high privileges can exploit this to obtain sensitive information, with high confidentiality impact and low a...

jsherp-user-info-idor

jshERP /user/info IDOR — VulDB submission package This repository contains a standalone VulDB-style advisory for an authenticated insecure direct object reference in jshERP. Product: jshERP Tested commit: ad6cf886dd4e0676723060a25d361c703dc56bc0 3.6-SNAPSHOT, GitHub master HEAD on 2026-09-04...

CVE-2026-59163

creationtimestamp| type| source ---|---|--- 2026-09-18 19:17:41+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvsv2kxodt24 2026-09-18 20:08:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvsxveysfx2t 2026-09-18 22:00:06+00:00| seen|...

DEBIAN-CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-93852

In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...

CVE-2026-11726

IBM MQ across multiple platforms (queue manager, HPE NonStop , and MQ Appliance ) is affected by improper validation of message header offset values (CWE-125: Out-of-bounds Read), allowing a remote authenticated attacker to read heap memory or cause a denial of service via crafted messages. The r...