CVE-2026-15767

creationtimestamp| type| source ---|---|--- 2026-07-14 23:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncwpgknr26 2026-07-16 04:45:14+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-16 11:37:06+00:00| seen|...

CVE-2026-54572

creationtimestamp| type| source ---|---|--- 2026-07-14 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncql57ag2c 2026-07-14 23:20:52+00:00| seen| https://bsky.app/profile/potato.software/post/3mqndun2muq2x 2026-07-15 00:24:24+00:00| seen|...

CVE-2026-48358

creationtimestamp| type| source ---|---|--- 2026-07-14 22:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7znrkic24 2026-07-15 10:18:15+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoim4w74e24 2026-07-16 08:37:07+00:00| seen|...

JLSEC-2026-737 TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's Finished...

TLS 1.3 post-handshake authentication PHA issue where a server could accept a client's Finished message without the client having sent a Certificate and CertificateVerify. The post-handshake-auth exemption that allows an empty/absent peer certificate was only intended for the initial handshake, b...

JLSEC-2026-725 A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare...

A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography PQC hybrid KeyShare processing. In the error handling path of TLSXKeyShareProcessPqcHybridClient in src/tls.c, the inner function TLSXKeyShareProcessPqcClientex frees a KyberKey object upon encountering an error. The call...

JLSEC-2026-757 Use-after-free in PQC hybrid key-share handling

Use-after-free in PQC hybrid key-share handling. This is an incomplete-fix follow-up to CVE-2026-5460 released in 5.9.1: a malicious TLS 1.3 server sending a truncated PQC hybrid KeyShare can still trigger the error cleanup path to operate on freed memory...

JLSEC-2026-705 Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in...

Protection mechanism failure in wolfCrypt post-quantum implementations ML-KEM and ML-DSA in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during...

EUVD-2026-44410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

CVE-2026-55944

creationtimestamp| type| source ---|---|--- 2026-07-14 21:08:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn4ha43uo2z 2026-07-14 22:02:11+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:43+00:00| seen|...

CVE-2026-55010

creationtimestamp| type| source ---|---|--- 2026-07-14 21:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn4dmzkrj2q 2026-07-14 22:02:06+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-14 23:00:35+00:00| exploited|...

CVE-2026-58617

creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqn2yvy7q72t 2026-07-14 22:02:40+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:02:12+00:00| seen|...

CVE-2026-47212

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12, TwilioRequestParser::doParse received the configured webhook secret but ignored the X-Twilio-Signature HMAC header, allowing unauthenticated POST requests to inje...

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

CVE-2011-3416

creationtimestamp| type| source ---|---|--- 2026-07-14 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqmz25xgrk2f...

CVE-2026-59891

creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyusdtuq25 2026-07-22 16:43:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrarfiguws2h 2026-07-22 16:43:35+00:00| seen|...

CVE-2026-47767

creationtimestamp| type| source ---|---|--- 2026-07-14 20:00:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyorqyxp2q 2026-07-16 15:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrkwx3e5w2d 2026-07-17 22:37:06+00:00| seen|...

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

CVE-2026-15410

A post-authentication Code Injection vulnerability (CVE-2026-15410) exists in the SonicWall SMA1000 Appliance Management Console (AMC) . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands under specific conditions. The vulnerability is ...

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...