CVE-2025-13909

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

CVE-2025-13909

WSO2 Identity Server is reported to have a multi-tenant authentication flaw where requests using Email OTP, SMS OTP, or Magic Link as first factors do not adequately enforce tenant isolation. This can allow an attacker to disclose PII from other tenants (e.g., mobile numbers) due to cross-tenant ...

CVE-2025-13909 Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

GHSA-4VR5-P2GC-H23P

creationtimestamp| type| source ---|---|--- 2026-08-06 07:31:27+00:00| seen| https://gist.github.com/alon710/7cd2b59244b6ec677e9295bd453cf08b...

CVE-2026-19008 mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

EUVD-2026-53766

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

CVE-2026-19008

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

CVE-2026-19008

Technical details about CVE-2026-19008 are not publicly available in the provided documents. Monitor for updates.

GHSA-HXVH-4H3W-PRP9

creationtimestamp| type| source ---|---|--- 2026-08-06 05:31:22+00:00| seen| https://gist.github.com/alon710/75a8da6231b4389c07987c60b53a1e91...

CVE-2025-58486

creationtimestamp| type| source ---|---|--- 2026-08-06 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117046681751967940...

CVE-2026-17624

creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf5r3poxb2g 2026-08-07 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msirs6gned2t...

GHSA-48HR-524C-V5W3

creationtimestamp| type| source ---|---|--- 2026-08-06 03:31:34+00:00| seen| https://gist.github.com/alon710/3d7b500e615305ceff4644e15070fc7a...

CVE-2026-15979

creationtimestamp| type| source ---|---|--- 2026-08-06 03:15:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msf37wyfuu2n...

GHSA-279X-MWFV-VCQV

creationtimestamp| type| source ---|---|--- 2026-08-06 02:32:30+00:00| seen| https://gist.github.com/alon710/a043326ccca63ec501e83cde63d8a11d...

CVE-2026-8790

creationtimestamp| type| source ---|---|--- 2026-08-06 02:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msexuj54rz26...

SUSE CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

CVE-2026-11771

creationtimestamp| type| source ---|---|--- 2026-08-06 00:01:45+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mseqfyzbke2l...

Vulnerabilities in the sound/soc/stm/stm32_sai.c and sound/soc/stm/stm32_sai_sub.c modules of the Linux operating system’s SoC audio support, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the sound/soc/stm/stm32sai.c and sound/soc/stm/stm32saisub.c modules, which support audio functions in Linux-based SoC cores, are related to errors during link counter updates. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity...

GHSA-QQ9Q-X9W4-CHHJ

creationtimestamp| type| source ---|---|--- 2026-08-05 23:31:11+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5 2026-08-06 00:00:17+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5...

GHSA-42CJ-M3VJ-89WV

creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-06 00:00:18+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7...