CVE-2026-19401

creationtimestamp| type| source ---|---|--- 2026-08-27 08:23:07+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm...

CVE-2026-80551

creationtimestamp| type| source ---|---|--- 2026-08-27 08:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2g2etdac25 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74752

creationtimestamp| type| source ---|---|--- 2026-08-27 08:00:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ewomzgq24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74746

creationtimestamp| type| source ---|---|--- 2026-08-27 07:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2eesm3jj2e 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

WordPress Slim SEO plugin < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure vulnerability

Contributor+ Arbitrary Post Meta Disclosure vulnerability discovered by Shivamani Vastrala in WordPress Plugin Slim SEO versions 4.9.11...

CVE-2026-74737

creationtimestamp| type| source ---|---|--- 2026-08-27 07:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2dsuodje24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-15990

creationtimestamp| type| source ---|---|--- 2026-08-27 04:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmxp2jw2o...

CVE-2026-80212

creationtimestamp| type| source ---|---|--- 2026-08-27 02:29:30+00:00| seen| https://bsky.app/profile/hsbt.org/post/3mtzshizd5k2u 2026-08-30 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mucdrzvkb22r...

CVE-2026-76784

creationtimestamp| type| source ---|---|--- 2026-08-27 02:15:28+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtzrohda632e 2026-08-27 16:21:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mu3axdwp7c2e...

SUSE CVE-2026-68525

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...

CVE-2026-81279: Missing Authorization

Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...

CVE-2026-65931: Missing Authorization

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...

PT-2026-82444

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

PT-2026-82474

Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...

CVE-2026-37071: Improper Privilege Management

Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming th...

CVE-2026-80207: Missing Authentication for Critical Function

APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxies every /api request to the...

CVE-2026-32566: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

The vulnerability of the SQLite driver software used by Adminer for database management allows a hacker to gain access to delete any files they desire.

The vulnerability of the SQLite driver software used by Adminer for database management involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to gain access and delete any files by sending a specially crafted POST request...

CVE-2026-77035: Authorization Bypass Through User-Controlled Key

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...