CVE-2026-9829

creationtimestamp| type| source ---|---|--- 2026-06-06 09:09:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnmcl7ikej2t...

CVE-2026-9280

creationtimestamp| type| source ---|---|--- 2026-06-06 05:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlwlciikb2d 2026-06-12 05:03:40+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mo2xmhmahi26 2026-06-12 08:16:36+00:00| seen|...

CVE-2026-8991

creationtimestamp| type| source ---|---|--- 2026-06-06 05:24:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlvzfnvdo2d...

CVE-2026-7792

creationtimestamp| type| source ---|---|--- 2026-06-06 05:19:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlvqhaans2d 2026-06-12 12:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo3psjcyvp2i...

CVE-2026-7665

creationtimestamp| type| source ---|---|--- 2026-06-06 05:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlv6kfnev25 2026-06-11 11:00:12+00:00| published-proof-of-concept| Telegram/bfOUhtYO5knJKojifOKxt7hZq78r0zHfwCUUuIAza2Gk...

CVE-2026-7566

creationtimestamp| type| source ---|---|--- 2026-06-06 04:55:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnluesjtur24 2026-06-12 10:16:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mo3j3x37my24 2026-06-12 10:16:07+00:00| seen|...

CVE-2026-2500

creationtimestamp| type| source ---|---|--- 2026-06-06 04:43:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnltpsj7f42a 2026-06-12 18:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo4dwabh6h2w...

SUSE CVE-2026-7774

tarfile.datafilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall to write files outside the...

CVE-2026-8893

creationtimestamp| type| source ---|---|--- 2026-06-06 01:40:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnljhg2k7c2w...

CVE-2026-8900

creationtimestamp| type| source ---|---|--- 2026-06-06 01:29:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlivioaoq2p 2026-06-13 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo5piy5qvf2x...

CVE-2026-8608

creationtimestamp| type| source ---|---|--- 2026-06-06 01:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlitozqat2s 2026-06-14 22:16:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mobsba6pdt25...

CVE-2026-34123

creationtimestamp| type| source ---|---|--- 2026-06-06 00:59:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlh7apnjr27...

CVE-2026-10878

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument actionvalue results in command injection. The attack is possible to be carried out remotely. The exploit is now public and...

CVE-2026-6242 Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS

An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper handling of externally supplied parameters within formatting functions. An attacker may inject crafted format strings into event subscription requests or notification generation pa...

CVE-2026-6241

An authenticated format-string vulnerability affects TP-Link Tapo C520WS v2 (ONVIF AddScopes). User-controlled input is passed to formatting functions without proper sanitization, enabling injection of format specifiers that can manipulate memory handling. Exploitation may cause the ONVIF managem...

CVE-2026-6241 Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS

An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitization. An attacker can inject format specifiers into ONVIF scope parameters to manipulate memory...

CVE-2026-6240 Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenticated attacker can send a crafted malicious request containing an excessive number of identifiers ...

CVE-2026-6240 Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenticated attacker can send a crafted malicious request containing an excessive number of identifiers ...

CVE-2026-6239 Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processing. An authenticated attacker can send a specially crafted ONVIF request containing an excessive...

CVE-2026-6239 Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processing. An authenticated attacker can send a specially crafted ONVIF request containing an excessive...