CVE-2026-84000

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:16+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:49:22+00:00|...

CVE-2026-81390

creationtimestamp| type| source ---|---|--- 2026-09-08 22:02:11+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:02:01+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:47:09+00:00|...

CVE-2026-69359

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:58+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:47+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:22:13+00:00|...

CVE-2026-73023

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:44+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:32+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:25:33+00:00|...

CVE-2026-69710

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:33+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:26+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:51:34+00:00|...

CVE-2026-77505

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:31+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:25:31+00:00|...

CVE-2026-73006

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:06+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:01+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:19:25+00:00|...

CVE-2026-69510

creationtimestamp| type| source ---|---|--- 2026-09-08 22:00:56+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:50+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:18:17+00:00|...

CVE-2026-82004

creationtimestamp| type| source ---|---|--- 2026-09-08 20:14:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztl5x5n22t 2026-09-09 09:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3alfwss32g 2026-09-10 02:37:06+00:00| seen|...

CVE-2026-78509

creationtimestamp| type| source ---|---|--- 2026-09-08 20:13:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztjfduja2b 2026-09-08 20:19:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0352 2026-09-08 22:01:17+00:00| seen|...

CVE-2026-69730

creationtimestamp| type| source ---|---|--- 2026-09-08 20:11:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztexeiys2t 2026-09-08 20:19:39+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:00:58+00:00| seen|...

CVE-2026-69641

creationtimestamp| type| source ---|---|--- 2026-09-08 20:10:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztehbxin2f 2026-09-08 20:15:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0349 2026-09-08 22:02:20+00:00| seen|...

CVE-2026-69491

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztcdyiqv2j 2026-09-08 22:02:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 00:50:05+00:00| seen|...

CVE-2026-69431

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztbtcodf2f 2026-09-08 20:19:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 20:31:47+00:00| seen|...

Gitea: Remote Code Execution via diffpatch Git Hook Installation

Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...

GHSA-RCR6-4JQH-J84M Gitea: Remote Code Execution via diffpatch Git Hook Installation

Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...

CVE-2026-82060

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-79576

creationtimestamp| type| source ---|---|--- 2026-09-08 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzghqtpgw2j 2026-09-08 18:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmiuejgl2g 2026-09-08 18:08:34+00:00| seen|...

CVE-2026-86724

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...