Release Information for Veeam Backup for AWS 10.1

Requirements Please confirm that you are running version Veeam Backup for AWS 10 build 10.0.0.232 or later before upgrading. You can find the currently installed build number Product version in the About section under Configuration | Support Information | Updates. After installing Veeam Backup fo...

CVE-2026-9568

creationtimestamp| type| source ---|---|--- 2026-05-26 23:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms4cwvm6l2e...

CVE-2026-42013

creationtimestamp| type| source ---|---|--- 2026-05-26 23:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xxz5sd2z 2026-06-29 11:40:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfrbkrxz2o...

CVE-2026-44831

creationtimestamp| type| source ---|---|--- 2026-05-26 22:38:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms2nvekgm2n...

CVE-2025-68709

creationtimestamp| type| source ---|---|--- 2026-05-26 22:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms23qt5qx2k...

CVE-2026-8453

creationtimestamp| type| source ---|---|--- 2026-05-26 22:26:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrzyr4tzc2e...

CVE-2025-68710

creationtimestamp| type| source ---|---|--- 2026-05-26 22:23:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrztac7fc2r...

CVE-2026-8834

creationtimestamp| type| source ---|---|--- 2026-05-26 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmryvo4x4r2s...

WordPress MinhNhut Link Gateway plugin <= 3.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by san6051 - COFFSec in WordPress Plugin MinhNhut Link Gateway versions = 3.6.1...

CVE-2026-3294

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full...

CVE-2026-47202

creationtimestamp| type| source ---|---|--- 2026-05-26 19:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrrozbwsk2h...

CVE-2026-9567

creationtimestamp| type| source ---|---|--- 2026-05-26 19:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrqu5ude32c...

CVE-2026-44728

creationtimestamp| type| source ---|---|--- 2026-05-26 19:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrqc64tq32e 2026-05-28 01:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuv42kalp2o...

CVE-2026-24191

creationtimestamp| type| source ---|---|--- 2026-05-26 19:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrotgewhw2i...

CVE-2025-33221

creationtimestamp| type| source ---|---|--- 2026-05-26 19:01:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrojvcp4x2h...

CVE-2026-8854

creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmroi3y73g2e...

CVE-2026-24194

creationtimestamp| type| source ---|---|--- 2026-05-26 19:00:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroh2mqor2i...

CVE-2026-24190

creationtimestamp| type| source ---|---|--- 2026-05-26 18:58:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmroeegm7z2n...

Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers

Summary The Typebot viewer packages/embeds/js renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author can set a link URL to javascript:PAYLOAD, which executes in the visitor's browser context when clicked. Since the viewer is typically embedded...

WordPress Google+ Link Name plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by MAJidox in WordPress Plugin Google+ Link Name versions = 1.0...