46853 matches found
CVE-2026-16259
creationtimestamp| type| source ---|---|--- 2026-08-30 01:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubb3vfq6m2y 2026-08-30 07:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubsyrw63z2r...
PT-2026-83523
Name of the Vulnerable Software and Affected Versions SOGO Add Script to Individual Pages Header Footer versions prior to 4.0 Description The plugin fails to sanitize or escape custom header and footer script values saved via the post metabox. Additionally, it does not restrict these actions to...
Linux Distros Unpatched Vulnerability : CVE-2026-82467
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirmpassword, loginreturntorequestedlocation, and...
Linux Distros Unpatched Vulnerability : CVE-2026-82469
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh toke...
CVE-2026-53499
creationtimestamp| type| source ---|---|--- 2026-08-29 22:44:50+00:00| seen| https://bsky.app/profile/altdigitallatam.org/post/3muaxckwmzs2h...
CVE-2026-80693
creationtimestamp| type| source ---|---|--- 2026-08-29 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muafppnhtz2y...
CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...
CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...
CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...
CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...
CVE-2026-82468
Rodauth versions before 2.47.0 contain a cross-site request forgery (CSRF) protection bypass in the JSON request content type validation. An attacker can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation, forcing victims to aut...
CVE-2026-82468 Rodauth before 2.47.0 CSRF Protection Bypass via Content-Type
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...
CVE-2026-81096
creationtimestamp| type| source ---|---|--- 2026-08-29 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muacefzsts2j...
CVE-2026-80673
creationtimestamp| type| source ---|---|--- 2026-08-29 15:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua5vedyb525...
CVE-2026-82456
creationtimestamp| type| source ---|---|--- 2026-08-29 15:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5ha4t3b24 2026-08-29 16:07:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muab44l6oy25 2026-08-29 22:00:06+00:00| seen|...
CVE-2026-80630
creationtimestamp| type| source ---|---|--- 2026-08-29 14:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua47rk4ns2t...
CVE-2026-80609
creationtimestamp| type| source ---|---|--- 2026-08-29 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua3nu7kbs2u...
CVE-2026-82021
creationtimestamp| type| source ---|---|--- 2026-08-29 14:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua22qdo5h27 2026-08-29 17:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muagbmh2dz2u...