CVE-2026-63429: Missing Authentication for Critical Function

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, POST /api/upload has no authentication guard, no global guard, no form-context validation, no openToken requirement, and no session cookie check. Any anonymous internet user can upload files PDF, DOC/DOCX, XLS/XLSX, CSV, TXT, MP...

Malicious code in akrai-report-new (npm)

The akrai-report-new package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms...

CVE-2026-35048: Improper Input Validation

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the addslashes protection is bypassed because it checks for getmagicquotesgpc, a function removed i...

CVE-2026-58482: Cross-Site Request Forgery (CSRF)

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called ApprovalInbox lib/approval-inbox.ts. It is the network surface of the human-in-the-loop Approval Gate, which ApprovalGate uses to require explicit human approval for high-risk operations...

PT-2026-61740

Name of the Vulnerable Software and Affected Versions Grav CMS scheduler-webhook plugin affected versions not specified Description An authentication bypass exists in the scheduler-webhook plugin due to a short-circuit logic flaw during webhook token validation. This allows unauthenticated remote...

CVE-2026-64169

creationtimestamp| type| source ---|---|--- 2026-07-19 18:08:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzeq25lom2e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-64171

creationtimestamp| type| source ---|---|--- 2026-07-19 18:05:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzelkqwie23 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-64176

creationtimestamp| type| source ---|---|--- 2026-07-19 17:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqze7yij3u2j 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-64185

creationtimestamp| type| source ---|---|--- 2026-07-19 17:09:12+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqzbgngcud2e 2026-07-19 18:25:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqzfooiglt23 2026-08-03 09:19:48+00:00| seen|...

CVE-2026-63828

creationtimestamp| type| source ---|---|--- 2026-07-19 16:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqza3tbw2h2q 2026-08-06 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-02 23:00:05+00:00|...

CVE-2026-63825

creationtimestamp| type| source ---|---|--- 2026-07-19 16:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz7jw45el2a 2026-07-19 19:39:22+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116948334138717850 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-63833

creationtimestamp| type| source ---|---|--- 2026-07-19 16:20:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz6p2prrg2b 2026-07-20 18:42:55+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr3x55gnxp2l 2026-07-20 18:42:57+00:00| seen|...

CVE-2026-63819

creationtimestamp| type| source ---|---|--- 2026-07-19 15:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz5hrrrhl2e 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-63831

creationtimestamp| type| source ---|---|--- 2026-07-19 15:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz5dwlllj2s 2026-07-19 19:25:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116948280487732006 2026-07-20 06:00:26+00:00| seen|...

CVE-2026-63822

creationtimestamp| type| source ---|---|--- 2026-07-19 15:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz4zqhqnb2x 2026-08-06 04:47:10+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen...

CVE-2026-63830

creationtimestamp| type| source ---|---|--- 2026-07-19 15:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz4wqpayu2i 2026-08-06 04:47:25+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00| seen...

CVE-2026-63832

creationtimestamp| type| source ---|---|--- 2026-07-19 15:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqz4tvv23r2q 2026-07-19 19:52:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116948386407305637 2026-07-20 16:18:29+00:00| seen|...

CVE-2026-62227

creationtimestamp| type| source ---|---|--- 2026-07-19 15:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz2aobqa62d...

CVE-2026-16225

creationtimestamp| type| source ---|---|--- 2026-07-19 12:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqys4cjrqo2b...

CVE-2026-53376

creationtimestamp| type| source ---|---|--- 2026-07-19 12:11:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyqt2icze23 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...