CVE-2026-6896

creationtimestamp| type| source ---|---|--- 2026-07-08 22:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mq64mdoxis2a 2026-07-09 02:15:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mq6kthtf7u2i 2026-07-09 14:35:07+00:00| seen|...

CVE-2026-59802

creationtimestamp| type| source ---|---|--- 2026-07-08 21:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ty5zuw25 2026-07-09 00:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-59802...

CVE-2026-59879

creationtimestamp| type| source ---|---|--- 2026-07-08 21:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq63ma3dqe2i 2026-07-11 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqe7fxgexo2n...

CVE-2026-58253

creationtimestamp| type| source ---|---|--- 2026-07-08 21:30:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq62vboakv2l 2026-07-13 20:35:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkk5dc3c62e 2026-07-14 05:07:07+00:00| seen|...

Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Summary Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registered server action endpoint using a CORS-safelisted content typ...

CVE-2026-59924

creationtimestamp| type| source ---|---|--- 2026-07-08 19:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5vdahrxb2t 2026-07-20 22:35:25+00:00| published-proof-of-concept| https://github.com/lepture/mistune/security/advisories/GHSA-r4rv-85jg-w4mf...

CVE-2026-59938

creationtimestamp| type| source ---|---|--- 2026-07-08 19:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5v2c2eya2t...

CVE-2026-59923

creationtimestamp| type| source ---|---|--- 2026-07-08 19:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5tk2fuhz2t 2026-07-20 22:35:29+00:00| published-proof-of-concept| https://github.com/lepture/mistune/security/advisories/GHSA-8c25-4j27-2rv3...

CVE-2026-59937

creationtimestamp| type| source ---|---|--- 2026-07-08 19:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5sz3djzo2i...

CVE-2026-0278

creationtimestamp| type| source ---|---|--- 2026-07-08 19:03:37+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq5sp4zwv22m 2026-07-10 00:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-0278...

CVE-2026-0276

creationtimestamp| type| source ---|---|--- 2026-07-08 19:03:30+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq5sow2ip32c 2026-07-10 00:15:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-0276...

CVE-2026-59703

creationtimestamp| type| source ---|---|--- 2026-07-08 18:02:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5pbiipf427...

CVE-2026-57111

creationtimestamp| type| source ---|---|--- 2026-07-08 17:59:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5p4vvi7a24 2026-07-09 23:10:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaqx2ggqy2e...

CVE-2026-59874

creationtimestamp| type| source ---|---|--- 2026-07-08 17:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5opkl5622x 2026-07-11 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqecrablfk2f 2026-07-20 22:35:09+00:00| published-proof-of-concept|...

CVE-2026-29009

creationtimestamp| type| source ---|---|--- 2026-07-08 17:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n5jdpza2x 2026-07-09 04:02:39+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq6qsygvcf2s...

CVE-2026-59261

creationtimestamp| type| source ---|---|--- 2026-07-08 17:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5n2dzrvk2g 2026-07-14 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqn7qqgi3z25...

CVE-2026-42505

creationtimestamp| type| source ---|---|--- 2026-07-08 17:20:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5mx4lmyo2y 2026-07-09 12:00:57+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq7lkaehpi2d 2026-07-12 12:00:56+00:00| seen|...

MAL-2026-6988 Malicious code in @vite-tab/tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af865d1cf7d45f2b4c2a73eebcfcd1a1a6aba9a36f33bf8256ef4d7235903c @vite-tab/tab republishes Vite's codebase under a different name while impersonating the upstream project: package.json declares bin: vite:...

CVE-2026-58657

creationtimestamp| type| source ---|---|--- 2026-07-08 16:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ldyi3xf26 2026-09-17 00:31:25+00:00| seen| https://gist.github.com/alon710/9e473404cc3dda3bbd60707d9a5ddbdd 2026-09-17 00:35:03+00:00| published-proof-of-concept|...

CVE-2026-9074

creationtimestamp| type| source ---|---|--- 2026-07-08 16:42:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5kryt5gx2v 2026-07-08 17:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ohuyub52l 2026-07-11 04:07:06+00:00| seen|...