PT-2026-78475

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

VulnCheck KEV: CVE-2026-66582

Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...

VulnCheck KEV: CVE-2026-66613

Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...

Exploit for Code Injection in Anyscale Ray

CVE-2025-62593 — Ray Remote Code Execution unauthenticated...

CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now

Executive Summary CVE-2026-68820 is an actively exploited Windows vulnerability listed in CISA’s Known Exploited Vulnerabilities KEV Catalog, with a remediation deadline as suggested by CISA BOD 26-04. CISA BOD 26-04 introduces risk-based remediation timelines ranging from 3 to 14 days, increasin...

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificia...

VulnCheck KEV: CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

VulnCheck KEV: CVE-2026-73343

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

VulnCheck KEV: CVE-2026-66629

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...

Exploit for SQL Injection in Metabase

CVE-2026-72898 PoC : Metabase Unauthenticated SQL Injection...

PT-2026-73230

Three pressures shaped this week's queue. Perimeter and analytics software came under confirmed attack, with three fresh KEV entries carrying remediation deadlines that have already passed. Microsoft shipped one of the largest security releases in its history. PostgreSQL shipped the largest singl...

CGA-2CWV-5H34-CWF2

Bulletin has no description...

cve-analysis-lab

Vulnerability Research & CVE Analysis Lab Analyst: Harsha...

VulnCheck KEV: CVE-2026-58231

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BlackBerry QNX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of KEV...

GLSA-202608-05 : Apache HTTPD: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-05 Apache HTTPD: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Apache HTTPD. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

threat-intel-toolkit

Threat Intel Toolkit A reusable, shareable bundle for defen...

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the...

CVE-2026-68820

creationtimestamp| type| source ---|---|--- 2026-08-11 18:00:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98bf8749-f824-4eeb-982e-7eb87d11e75a 2026-08-11 18:18:05+00:00| seen| https://bsky.app/profile/suriq.io/post/3mst7yyfsko2o 2026-08-11...

grype v0.117.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...