CVE-2026-62547

creationtimestamp| type| source ---|---|--- 2026-07-22 01:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr77ehr2br2o 2026-07-23 18:20:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

MINI-CW66-6CGQ-GMHF

Bulletin has no description...

MINI-9Q4F-FMCJ-4VVF

Bulletin has no description...

CGA-VR57-42Q2-W973

Bulletin has no description...

ECHO-A954-A105-41DF

Bulletin has no description...

ECHO-5231-1622-6E83

Bulletin has no description...

PT-2026-63446

Name of the Vulnerable Software and Affected Versions Cal.com OSS affected versions not specified Description An authorization flaw exists during the creation of webhooks. An authenticated user can perform an unvalidated injection of the teamId variable to create a webhook for any team. This allo...

Plone 3.3.x < 4.3.10 / 5.0.x < 5.0.5 Multiple Vulnerabilities (HF 20160419)

The version of Plone installed on the remote host is 3.3.x prior to 4.3.10, 5.0.x prior to 5.0.5. It is, therefore, affected by the following vulnerabilities: - Plone does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav...

AlmaLinux 10 : perl-HTTP-Daemon (ALSA-2026:36189)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:36189 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description block...

CVE-2026-60298

creationtimestamp| type| source ---|---|--- 2026-07-21 23:52:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yuxnwyy2j 2026-07-23 16:51:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60253

creationtimestamp| type| source ---|---|--- 2026-07-21 23:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xgg7sde2a 2026-07-23 16:49:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 20:37:07+00:00| seen|...

CVE-2026-60246

creationtimestamp| type| source ---|---|--- 2026-07-21 23:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x3qju4e2r 2026-07-23 16:49:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 22:07:07+00:00| seen|...

DEBIAN-CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-60240

creationtimestamp| type| source ---|---|--- 2026-07-21 23:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wujpnrg2y 2026-07-23 16:49:11+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 00:07:07+00:00| seen|...

CVE-2026-60209

creationtimestamp| type| source ---|---|--- 2026-07-21 23:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6wga6kjz2v 2026-07-23 16:48:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 06:07:07+00:00| seen|...

CVE-2026-65317

creationtimestamp| type| source ---|---|--- 2026-07-21 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vywsrey23 2026-07-22 02:25:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bgwhw5z2o 2026-07-23 14:56:04+00:00| seen|...

CVE-2026-65055

creationtimestamp| type| source ---|---|--- 2026-07-21 23:00:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6vyc6vol23...

CVE-2026-25038

creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:18+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-v73x-hx65-6pf4...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-56820

Netty’s OcspClient vulnerability (CVE-2026-56820) allows a replay attack by not validating the CertificateID in OCSP responses. A forged or unrelated-but-signed OCSP response can be accepted for another certificate issued by the same CA, bypassing revocation checks. Affected versions: 4.2.0.Final...