CVE-2026-59124

creationtimestamp| type| source ---|---|--- 2026-08-11 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst5v2mngf2u 2026-08-11 19:00:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:31+00:00| seen|...

CVE-2026-5057

ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

BIT-OPENBAO-2026-39396 OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, ExtractPluginFromImage in OpenBao's OCI plugin downloader extracts a plugin binary from a container image by streaming decompressed tar data via io.Copy with no upper bound on the number of bytes written. ...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

CVE-2026-50151

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...

CVE-2026-50657

creationtimestamp| type| source ---|---|--- 2026-07-14 22:02:43+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:02:15+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-16 12:00:06+00:00| seen|...

CVE-2026-50658

creationtimestamp| type| source ---|---|--- 2026-07-14 22:02:42+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:02:14+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-16 13:50:35+00:00| seen|...

CVE-2026-57091

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:53+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:35+00:00| seen|...

CVE-2026-49170

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:51+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:35+00:00| seen|...

CVE-2026-49176

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:59+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:35+00:00| seen|...

CVE-2026-50382

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:02:09+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:35+00:00| seen|...

CVE-2026-49807

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:47+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:34+00:00| seen|...

CVE-2026-50687

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:05:02+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:33+00:00| seen|...

CVE-2026-50477

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:03+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...

CVE-2026-50459

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:03+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...

CVE-2026-58545

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:53+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:06+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:33+00:00| seen|...

CVE-2026-50436

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:02+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...

CVE-2026-50377

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:01+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:31+00:00| seen|...

CVE-2026-50354

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:51+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:00+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:31+00:00| seen|...

CVE-2026-58614

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:51+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:06+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:30+00:00| seen|...