PT-2026-53084

Name of the Vulnerable Software and Affected Versions 7-Zip for Windows versions prior to 26.02 Description 7-Zip fails to preserve the Mark-of-the-Web MotW when extracting a specially crafted RAR5 archive. The software uses a guard to suppress archive-supplied Zone.Identifier streams, but it onl...

ALSA-2026:28553 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Command injection allows arbitrary code execution via malicious tag files CVE-2026-41411 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relate...

CVE-2026-50171

creationtimestamp| type| source ---|---|--- 2026-06-22 23:14:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzbq2x3423 2026-07-20 08:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2tmaqst62v...

CVE-2026-56348

creationtimestamp| type| source ---|---|--- 2026-06-22 23:01:55+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movykjgn3v2m 2026-06-22 23:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow37lsgda2w...

MINI-P8QM-XQ4C-3RJM

Bulletin has no description...

MINI-JVRX-FCWP-P2HX

Bulletin has no description...

MINI-GPMM-RW4X-HH77

Bulletin has no description...

MINI-W9RV-7FMV-JWXF

Bulletin has no description...

MINI-C7XQ-X8QR-P8RR

Bulletin has no description...

MINI-MW4X-JWRX-947H

Bulletin has no description...

MINI-47M7-FWWW-6M5J

Bulletin has no description...

MINI-4JFW-8GM5-2Q46

Bulletin has no description...

MINI-XC4R-8F55-R5JH

Bulletin has no description...

MINI-QMHV-9PVX-8Q4C

Bulletin has no description...

MINI-79X4-3QFG-HV7G

Bulletin has no description...

MINI-975G-5Q2J-6FGW

Bulletin has no description...

MINI-Q2Q4-X4FH-HJ3M

Bulletin has no description...

MINI-23V7-27X5-6276

Bulletin has no description...

CVE-2026-56324 Capgo - Rate Limit Bypass via User-Controlled device_id Parameter

Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channelself endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled deviceid parameter. Attackers can send multiple requests per second by changing deviceid values to flood the channeldevice...

GHSA-X93Q-X9PC-W5HW Paymenter has broken object level authorization via service reference manipulation on ticket creation

Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...