CVE-2026-2680

CVE-2026-2680 describes a Reflected XSS in the A3factura web platform, affecting the endpoint a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes with the vulnerable parameter customerVATNumber . The issue could allow an attacker to execute arbitrary code in a victim’s browser. The CVSSv4...

CVE-2026-20733

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03...

CVE-2026-27773

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06...

CVE-2026-27976

creationtimestamp| type| source ---|---|--- 2026-02-26 01:10:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpz6q2ipj2u 2026-02-26 06:23:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqknx2s562s 2026-03-06 13:40:09+00:00| seen|...

PT-2026-22143

Reflected Cross-Site Scripting XSS on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es//incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser...

Fleet 安全特征问题漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...

CVE-2026-25736

creationtimestamp| type| source ---|---|--- 2026-02-25 20:10:18+00:00| seen| https://gist.github.com/alon710/3c404d6776ba547e659e45aab0d6bdf9 2026-02-25 21:41:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpnjbpjni2z...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

USN-8029-3 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

USN-8029-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

MINI-X3G9-5XQH-4XQ6

Bulletin has no description...

CVE-2026-26983

creationtimestamp| type| source ---|---|--- 2026-02-24 05:38:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflhaflruq2x 2026-02-25 01:08:09+00:00| seen| https://gist.github.com/alon710/cf6e093924dbe3a17530e5f8abbb07c8 2026-03-30 07:02:33+00:00| seen|...

CVE-2026-25500 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, logstash, ruby3.2-rack, ruby3.2-rails, ruby3.4-rails, ruby4.0-rack, ruby3.4-rack, ruby3.3-rails, ruby3.3-rack, ruby4.0-rails...

Tattile Cameras 1.181.5 Use of Default Credentials

Summary Tattile is an Italian manufacturer specializing in advanced ANPR/ALPR, traffic‑enforcement, and machine‑vision camera systems used across intelligent transportation networks, tolling infrastructures, access‑control environments, and industrial automation. Their portfolio includes...

CVE-2026-23694

creationtimestamp| type| source ---|---|--- 2026-02-23 21:22:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfklitnecv2k...

MINI-2385-PF9R-H7M8

Bulletin has no description...

DEBIAN-CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

UBUNTU-CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

CVE-2026-2967 Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...

CVE-2026-2967

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/netbuiltin.c of the component TCP Sequence Number Handler. The manipulation leads to improper verification of source of a communication channel. The attack may be initiate...