EUVD-2026-60088

stoatchat before 0.15.0 contains a missing authorization vulnerability in the Subscribe message handler that allows authenticated attackers to enumerate members and monitor profile updates of private servers without membership. Attackers can subscribe to any server's member-update topic by sendin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100577 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up...

laravel-threat-detection v1.7.0

Laravel Threat Detection Passive intrusion detection for Laravel — see every SQL injection, XSS, scanner, and bot probe hitting your app, logged with full context. It's an IDS, not a WAF: it never blocks, filters, or modifies a request. Drop it into any Laravel 10–13 app and it starts scanning...

MINI-5XM2-GHQJ-46G6

Bulletin has no description...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, scuttle, cluster-api-helm-controller-fips, crossplane-provider-aws-secretsmanager, crossplane-provider-aws-medialive, haproxy-ingress-fips, jsonnet-bundler, spicedb-operator, karma, crossplane-provider-aws-ecr-fips, s5cmd,...

Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of...

GO-2026-6008 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, gitlab-operator, tigera-operator, tigera-operator-fips, datadog-agent, datadog-agent-fips...

GO-2026-6009 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, gitlab-operator, tigera-operator, tigera-operator-fips, datadog-agent, datadog-agent-fips...

GO-2024-2656 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2024-3290 vulnerabilities

Vulnerabilities for packages: hubble...

GO-2026-5421 vulnerabilities

Vulnerabilities for packages: falco-no-driver...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: kargo, k8sgateway, splunk-otel-collector, jaeger, k3s, vale, kubeflow-pipelines, coredns, argo-workflows, kine, opentelemetry-collector-contrib, kserve, verticadb-operator, aws-otel-collector, k8sgpt, datadog-agent, nats, amazon-cloudwatch-agent, argo-rollouts,...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server and WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server and KCCI WebSphere Liberty Server which are included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-8408 DESCRIPTION: IBM WebSphere Application Server is affected by ...

CVE-2026-49827

creationtimestamp| type| source ---|---|--- 2026-08-13 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117088441310734712 2026-08-13 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msxquljl252n 2026-08-13 14:01:31+00:00| seen|...

CVE-2026-72673: Incorrect Authorization

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Synthetics private locations can be shared with more than one space, and deleting one removes it from every space it is...

EUVD-2026-56918

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

EUVD-2026-55810

A flaw was found in the TrustyAI Service TAS deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data and configurations, and inject arbitrary...

CVE-2026-68361

The CVE-2026-68361 entry describes a race in the Linux kernel hwmon Corsair PSU driver where hid_hw_stop() does not stop device IO, allowing a use-after-free between hid_input_report() and the completion after hid_device_io_start() in corsairpsu_probe(). This can occur if probe fails after IO sta...

CVE-2026-68359

The CVE-2026-68359 entry concerns the Linux kernel hwmon driver for nzxt-smart2. A race occurs because hid_hw_stop() does not halt device IO, allowing hid_input_report() to race with the code after hid_device_io_start() in the driver probe. If probe fails after IO start, this can lead to a Use-Af...

CVE-2026-68340 hwmon: occ: validate poll response sensor blocks

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...