MINI-CJW5-527F-VWVR

Bulletin has no description...

CVE-2026-62669 Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prior to 3.8.11, the Grav Login plugin login.regenerate2FASecret task checks only that the pending-session user exists rather than requiring $user-authorized. After submitting a victim's correct password, an attacker can...

MINI-5446-CPHF-8HR2

Bulletin has no description...

MINI-FWFW-CQ57-CRMH

Bulletin has no description...

MINI-W5V5-HCX9-4QFW

Bulletin has no description...

MINI-Q6JX-G245-GGXJ

Bulletin has no description...

MINI-J982-2M3F-5MMQ

Bulletin has no description...

MINI-437Q-62CW-VP8P

Bulletin has no description...

CVE-2026-70906

A flaw was found in OpenJDK. A remote attacker could cause a denial of service DoS by supplying a specially crafted font file. Processing the malicious font triggers an unrecoverable exception during a Foreign Function and Memory FFM API upcall, forcing the Java Virtual Machine JVM to terminate...

PYSEC-2026-3703 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

Impact Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes. Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review Patches No Workarounds No...

MINI-WQ3R-4QJW-PJF7

Bulletin has no description...

PT-2026-78487

Name of the Vulnerable Software and Affected Versions Grav Login Plugin versions prior to 3.8.11 Description The login.regenerate2FASecret task fails to verify if a user is authorized, checking only for the existence of a pending-session user. An attacker who has obtained a victim's password can...

CVE-2026-62291

creationtimestamp| type| source ---|---|--- 2026-08-18 22:58:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/62qlbwy56xq6j...

MINI-C3M5-9JRM-69JM

Bulletin has no description...

CVE-2026-71164

creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb7fpve52m 2026-08-19 09:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgfocbhk22y 2026-08-19 17:16:54+00:00| seen|...

MINI-P2Q6-RPWG-CCX6

Bulletin has no description...

CVE-2026-70883

creationtimestamp| type| source ---|---|--- 2026-08-18 22:22:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfawoe5iw25 2026-08-19 07:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtg7jmja5y2c 2026-08-19 17:47:31+00:00| seen|...

CVE-2026-62637

creationtimestamp| type| source ---|---|--- 2026-08-18 22:19:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqfzned2j 2026-08-19 05:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfyb77ug323 2026-08-19 17:21:17+00:00| seen|...

CVE-2026-62512

creationtimestamp| type| source ---|---|--- 2026-08-18 22:15:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfajeoibu2u 2026-08-19 03:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfqguv6yq25 2026-08-19 17:52:12+00:00| seen|...

CVE-2026-60971

creationtimestamp| type| source ---|---|--- 2026-08-18 22:12:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfadyquol23 2026-08-19 01:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfkc57in52u 2026-08-19 17:18:03+00:00| seen|...