CVE-2026-60638

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60637

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60621

creationtimestamp| type| source ---|---|--- 2026-07-23 17:21:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60604

creationtimestamp| type| source ---|---|--- 2026-07-23 17:21:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60558

creationtimestamp| type| source ---|---|--- 2026-07-23 17:19:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60528

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:42+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60384

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:27+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxpybzca2r 2026-07-29 11:37:07+00:00| seen|...

CVE-2026-60379

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrflgliea52z 2026-07-29 03:37:06+00:00| seen|...

CVE-2026-60374

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 18:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfxfcvfgh2j 2026-07-29 15:37:06+00:00| seen|...

CVE-2026-65906

creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j...

CVE-2026-65699 AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...

CVE-2026-61175

creationtimestamp| type| source ---|---|--- 2026-07-23 16:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcdqyu3n2v 2026-07-23 18:16:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60301

creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60271

creationtimestamp| type| source ---|---|--- 2026-07-23 16:50:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60252

creationtimestamp| type| source ---|---|--- 2026-07-23 16:49:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60143

creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-46999

creationtimestamp| type| source ---|---|--- 2026-07-23 16:45:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65696 Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...

CVE-2026-15617

Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...

EUVD-2026-48300

Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...