MINI-X3JP-RVXM-WQR6

Bulletin has no description...

MINI-MFVR-WJCF-QGCW

Bulletin has no description...

EUVD-2026-51103

CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...

CVE-2026-7260

creationtimestamp| type| source ---|---|--- 2026-07-30 12:19:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ecr6xcbeftyzl 2026-07-30 12:49:14+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mruhzvp5622t 2026-07-30 13:29:27+00:00| seen|...

ECHO-B709-48C4-0C80

Bulletin has no description...

ECHO-C721-9C49-EC13

Bulletin has no description...

MINI-7HFF-H5VR-GH8Q

Bulletin has no description...

MINI-MW6J-JG6H-XV8X

Bulletin has no description...

MINI-PVGJ-67F2-4F73

Bulletin has no description...

CVE-2026-44091

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

CLEANSTART-2026-BA47995 Security fixes in istio-fips 1.26.8-r1

Package istio-fips version 1.26.8-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CVE-2026-47882

creationtimestamp| type| source ---|---|--- 2026-07-30 07:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4myfr6uwsma7w 2026-07-30 16:15:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...

GHSA-JR9P-4H4J-6C58

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/95796 2026-07-30 14:00:04+00:00| seen| Telegram/47AGWfAWFIwZKzQclsisfXazYjpo74QYaHVlY-riLjwoTE 2026-07-31 00:00:29+00:00| published-proof-of-concept|...

CVE-2026-44098 OS Command Injection in OCPP Agent via charge_box_id

This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the execution of arbitrary commands as the limited user charx-oa. Charging could be interrupted...

CVE-2026-44098

CVE-2026-44098 describes an unauthenticated OS command injection in an OCPP backend/agent stack accessible via firewall-bypass. An attacker can control the backend and execute arbitrary commands as the limited user charx-oa, potentially interrupting charging. The connected documents provide the v...

EUVD-2026-51026

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...

CVE-2026-44091

CVE-2026-44091 describes an unauthenticated remote attacker who can post a malicious ID to the MQTT Broker, causing the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss. The published CVSS metrics indicate a high severity: CVSS 4....

CVE-2026-67248

creationtimestamp| type| source ---|---|--- 2026-07-30 06:45:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/23bhethvirrjs 2026-08-04 14:26:13+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7rxlqal2c 2026-08-05 17:37:06+00:00| seen|...

CVE-2026-14305

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...

CVE-2026-14223

The Easy Appointments WordPress plugin before 3.12.28 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to read any customer's personal information by iterating an identifier...