CVE-2026-66733

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-66733

Sonic 3 A.I.R. is affected by an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() prior to commit 2492d18. The mUniquePacketID field is read directly from the UDP wire-format header without bounds checking, causing the server to allocate one CacheItem per missing ...

CVE-2026-66733 Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os

CVE-2026-0300 — PAN-OS User-ID Authentication Portal Buffer Ov...

CVE-2026-11983

creationtimestamp| type| source ---|---|--- 2026-08-06 12:34:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e37ljvdasqskv...

CVE-2026-65583 Apache CXF: Self-issued ID token claims validation skipped

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks issuer/subject/audience/time and subjwk binding, enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in...

CVE-2026-65583 Apache CXF: Self-issued ID token claims validation skipped

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks issuer/subject/audience/time and subjwk binding, enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in...

CVE-2026-18325

creationtimestamp| type| source ---|---|--- 2026-08-06 08:55:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msfob5fryx2g 2026-08-06 22:15:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msh2wervyf24 2026-09-14 14:45:13+00:00| seen|...

CVE-2026-64454

creationtimestamp| type| source ---|---|--- 2026-08-06 04:52:23+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01...

CVE-2026-63814

creationtimestamp| type| source ---|---|--- 2026-08-06 04:47:03+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01...

CVE-2025-58486

creationtimestamp| type| source ---|---|--- 2026-08-06 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117046681751967940...

CVE-2026-18485

creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2g2vfjh2z...

RLSA-2026:49851 Moderate: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux8.10 - KVM: s390: Limit...

RLSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:Rocky...

PT-2026-68453

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Repair Shop Management System version 1.0 Description A SQL injection flaw exists in the /classes/Master.php?f=delete product endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker t...

FreeBSD : jenkins -- multiple vulnerabilities (9096f6e4-3a2f-4d16-89fb-f909aa0a7760)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9096f6e4-3a2f-4d16-89fb-f909aa0a7760 advisory. Jenkins Security Advisory 2026-08-05: Tenable has extracted the preceding description block...

PT-2026-68742

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.0.2 Description The GET /api/tenants/id endpoint returns the full tenant record to any authenticated TENANT ADMIN, exposing the databaseUrl field. This field contains the live PostgreSQL connection string used...

EulerOS 2.0 SP13 : sudo (EulerOS-SA-2026-3002)

According to the versions of the sudo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not...

CVE-2026-48080: Exposure of Sensitive Information to an Unauthorized Actor

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the GET /api/tenants/id endpoint returns the full tenant record to any authenticated TENANTADMIN of that tenant, including the databaseUrl field. This field contains...

CVE-2026-48077: Missing Authorization

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.1.0, the GET handler at /api/tenants/id/appointments/appointmentId performs no authorization check before returning the appointment record. Any party who knows or obtains...