CVE-2026-81508 ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2026-81508

The ESF-IDF (Espressif Internet of Things Development Framework) versions 5.5.5 , 6.0.1 , and 6.1 are vulnerable to an out-of-bounds read in the BlueDroid A2DP sink function btc_a2dp_sink_handle_inc_media(). The root cause is that the function reads a timestamp field from a received media buffer ...

CVE-2026-78491

creationtimestamp| type| source ---|---|--- 2026-09-13 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvfwfkcnbd2f...

CVE-2026-7675

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:18+00:00| seen| https://t.me/shimiscyberworld/1145 2026-09-13 00:00:09+00:00| seen| https://t.me/shimiscyberworld/1145...

CVE-2026-78486

creationtimestamp| type| source ---|---|--- 2026-09-09 14:00:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6szc6tdupyg6j...

CVE-2026-68895

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:06+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:56+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:52:09+00:00|...

CVE-2026-80230

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-29 12:00:56+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwnrrpuyiy2z...

CVE-2026-67394

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:06+00:00| seen| https://t.me/captainsmok3rofficial/502 2026-09-01 04:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mugkfxftig2y 2026-09-01 13:53:24+00:00| seen|...

CVE-2026-54614: Use of Externally-Controlled Input to Select Classes or Code

DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feature in src/Controller/MailPreviewController.php accepts a route-controlled previewName value in findPreview and passes the resolved class from App::className to constructor...

CVE-2026-79784

creationtimestamp| type| source ---|---|--- 2026-08-25 16:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d3yed6gizjhmp 2026-08-25 17:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7cp6cl2o...

CVE-2026-70550

creationtimestamp| type| source ---|---|--- 2026-08-25 16:14:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a2aqosgh42arr 2026-09-01 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muhl4f5ksr2k...

CVE-2026-76639

creationtimestamp| type| source ---|---|--- 2026-08-25 11:00:03+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99549 2026-08-26 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-63587

creationtimestamp| type| source ---|---|--- 2026-08-25 08:55:44+00:00| seen| https://infosec.exchange/users/certvde/statuses/117155308741154477 2026-08-25 08:55:50+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mtvh4etatnk2...

CVE-2026-78477

creationtimestamp| type| source ---|---|--- 2026-08-25 06:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117154619350415458 2026-08-25 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtv5cuxhfr2w 2026-08-25 06:34:31+00:00| seen|...

CVE-2026-39975

creationtimestamp| type| source ---|---|--- 2026-08-24 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu2nkbaek2e 2026-08-24 20:08:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu4acx27o2f 2026-08-25 06:00:05+00:00| seen|...

CVE-2026-14668

creationtimestamp| type| source ---|---|--- 2026-08-24 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mttbdmkr4h23...

CVE-2026-18027

creationtimestamp| type| source ---|---|--- 2026-08-23 00:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c76ori3me6slh...

CVE-2026-62611

...

EUVD-2026-44416

Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

CVE-2026-48001

Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...