CVE-2026-20255

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260612...

CVE-2026-50632

creationtimestamp| type| source ---|---|--- 2026-06-11 17:49:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrxqdwri25 2026-06-14 12:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moapueqzdn2p...

MINI-4GX2-8QXV-64X8

Bulletin has no description...

MINI-HVRM-FG87-3WX4

Bulletin has no description...

MINI-5VQV-CGR7-MVV6

Bulletin has no description...

CVE-2026-7870

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege...

CGA-9235-W657-FHJP

Bulletin has no description...

GHSA-6GXQ-GPR8-XGJP free5GC UDR has improper `ueId` validation in EE subscription handlers that allows arbitrary identifier persistence

Summary The free5GC UDR accepts arbitrary non-3GPP ueId values in the EE subscription creation and query flows because the regular expression used for validation ends with the catch-all alternative |.+. This causes the validation logic to accept any non-empty string rather than restricting input ...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation in the ueId validation process in EE subscription handlers. An attacker can cause unauthorized data creation and persistent data corruption by submitting arbitrary identifier values that bypass intended format...

MINI-7JCV-P5C3-V39X

Bulletin has no description...

MINI-9XPV-PWR3-GC84

Bulletin has no description...

MINI-9M6F-PH53-7HWX

Bulletin has no description...

guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation

Impact guzzlehttp/psr7 improperly interpreted malformed Host header values when constructing request URIs from inbound request data. This issue concerns inbound request parsing and server request construction. It does not require serializing a PSR-7 request, and it is not part of the normal...

MINI-VQCX-5MHQ-7995

Bulletin has no description...

CVE-2026-9750

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxhchwy25...

CVE-2026-41862

creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d 2026-06-24 00:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymtyjg6x2a 2026-06-24 00:16:48+00:00| seen|...

MINI-7MHJ-4FGH-6HVX

Bulletin has no description...

MINI-2Q7R-P6WH-2CWR

Bulletin has no description...

MINI-PWJ5-5M52-3MVW

Bulletin has no description...

CVE-2026-11850 Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a prior bounds check. When bvlen is 0 or 1, the subtraction wraps to a large value which is then...