CVE-2026-70910

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70946

creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70724

creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70950

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62471

creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 17:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muag4ciqfx2m...

CVE-2026-61273

creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60413

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70675

creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:40+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71111

creationtimestamp| type| source ---|---|--- 2026-08-19 17:20:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61231

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtplyjd3a62y...

CVE-2026-44256

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.4.0 until 4.14.6 and 5.0.0-beta2, api/api/middlewares.py decodes the Basic authentication username before credential validation and passes it to the access logger without neutralizing control...

CVE-2026-60850

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70707

creationtimestamp| type| source ---|---|--- 2026-08-19 16:50:26+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60590

creationtimestamp| type| source ---|---|--- 2026-08-19 16:48:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71035

creationtimestamp| type| source ---|---|--- 2026-08-19 16:47:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

Oracle Critical Patch Update, August 2026 Security Update Review

Oracle released its August edition of Critical Patch Update. The update received patches for 943 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party...

MobSF's CSRF checks not enforced after Django migration

SummaryDjango's CsrfViewMiddleware exists only in the deprecated MIDDLEWARECLASSES ignored since Django 2.0. The active MIDDLEWARE tuple does not include it. All authenticated web POST endpoints delete scan, upload, download APK, change password, manage users accept requests without CSRF tokens...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified 262 vulnerabilities in various Oracle products, including Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports Developer, Oracle Fusion Middleware, Orac...

PT-2026-80659

Summary Django's CsrfViewMiddleware exists only in the deprecated MIDDLEWARE CLASSES ignored since Django 2.0. The active MIDDLEWARE tuple does not include it. All authenticated web POST endpoints delete scan, upload, download APK, change password, manage users accept requests without CSRF tokens...

traefik -- Multiple vulnerabilities

The traefik project releases a new version addressing multiple vulnerabilities: GHSA-5w68-77r2-r64c Complete authentication bypass in the digestAuth middleware GHSA-g55h-rg46-x9c5 TLS option confusion in multi-host routers can bypass mTLS for protected hosts GHSA-j994-9gqj-9hwq Same-host Ingress...