USN-8555-1: Ubuntu Advantage Tools (pro client) vulnerabilities

Bilal Teke discovered that Ubuntu Advantage Tools exposed the Pro bearer token in command-line arguments when validating APT credentials. A local attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories. CVE-2026-9494 Frederick...

USN-8555-1 ubuntu-advantage-tools vulnerabilities

Bilal Teke discovered that Ubuntu Advantage Tools exposed the Pro bearer token in command-line arguments when validating APT credentials. A local attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories. CVE-2026-9494 Frederick...

CVE-2026-62308

creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:07+00:00| seen| https://t.me/GithubRedTeam/93314 2026-07-17 00:00:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93314...

CVE-2018-16385

creationtimestamp| type| source ---|---|--- 2026-07-16 12:00:07+00:00| seen| https://t.me/GithubRedTeam/93255 2026-07-16 19:00:08+00:00| seen| Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q 2026-07-17 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-15103

creationtimestamp| type| source ---|---|--- 2026-07-16 11:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr42qdens2n...

CVE-2026-58078

creationtimestamp| type| source ---|---|--- 2026-07-16 10:56:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr37ucybl2s...

CVE-2026-15005

creationtimestamp| type| source ---|---|--- 2026-07-16 10:43:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr2ii5oai2o...

CVE-2026-15392

A flaw was found in DBD::File. The completetablename method, responsible for building absolute table file paths, does not verify if the file is a symbolic link. This oversight allows a local attacker to create a symbolic link within the data directory that points to an arbitrary file outside of t...

CVE-2026-15445

creationtimestamp| type| source ---|---|--- 2026-07-16 08:34:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqtcdav2e2h...

CVE-2026-52204

creationtimestamp| type| source ---|---|--- 2026-07-16 08:34:06+00:00| seen| https://gist.github.com/this1slwl/d975073bb5feaafd09d9383e8351fb55...

CVE-2026-12684

creationtimestamp| type| source ---|---|--- 2026-07-16 08:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqshgmjzo2h...

CVE-2026-12585

creationtimestamp| type| source ---|---|--- 2026-07-16 08:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrvjhdwk2m...

CVE-2026-12869

creationtimestamp| type| source ---|---|--- 2026-07-16 08:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrh4tb4c2c...

CVE-2026-12978

creationtimestamp| type| source ---|---|--- 2026-07-16 07:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqr3rj5be2u...

CVE-2026-11866

creationtimestamp| type| source ---|---|--- 2026-07-16 07:52:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqwv3udz2h...

CVE-2026-53366

creationtimestamp| type| source ---|---|--- 2026-07-16 07:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqgthqbh2s 2026-07-16 17:31:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930842680877521 2026-07-20 17:28:37+00:00| seen|...

CVE-2026-12585 Abandoned Cart Lite for WooCommerce < 6.8.2 - Unauthenticated Account Takeover via Malleable Recovery-Link Token

The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing unauthenticated attackers to forge a recovery link that logs them in as another user when the automatic-login option is...

CVE-2026-12585

The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery tokens or bind them to the requesting account, allowing unauthenticated attackers to forge a recovery link that logs them in as another user when the automatic-login option is...

CVE-2026-48310

creationtimestamp| type| source ---|---|--- 2026-07-16 03:52:55+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqqdjzqrcy2v 2026-07-18 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqvvzojkgg2s...

CVE-2026-12753

creationtimestamp| type| source ---|---|--- 2026-07-16 03:47:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqda37w6o2n 2026-07-16 06:01:06+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqqkp7zi4p2j...