CVE-2026-59095

creationtimestamp| type| source ---|---|--- 2026-07-02 23:35:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp74a3psv23 2026-07-03 15:09:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtc2izjy2c...

CVE-2026-54998

creationtimestamp| type| source ---|---|--- 2026-07-02 23:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6hj5djk2o 2026-07-03 00:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mppaiuuxbg2b 2026-07-03 05:04:36+00:00| seen|...

CVE-2026-50722

creationtimestamp| type| source ---|---|--- 2026-07-02 23:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpp6derudq22 2026-07-03 02:21:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mppifgegwx2x 2026-07-03 06:27:12+00:00| seen|...

CVE-2026-11896

creationtimestamp| type| source ---|---|--- 2026-07-02 22:20:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2vp73e32d...

CVE-2026-12122

creationtimestamp| type| source ---|---|--- 2026-07-02 22:16:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2oz6fe227...

CVE-2026-59099

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsoeoil2t 2026-07-03 00:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaxex7xh24 2026-07-03 15:09:49+00:00| seen|...

CVE-2026-58460

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsah7qp2a 2026-07-03 16:55:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqz753emf2w...

CVE-2026-57679

creationtimestamp| type| source ---|---|--- 2026-07-02 21:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyy457if2r 2026-07-03 00:35:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppchwjyrl2b 2026-07-03 00:36:00+00:00| seen|...

CVE-2026-57621

creationtimestamp| type| source ---|---|--- 2026-07-02 21:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyuisubn2x...

CVE-2026-27436

creationtimestamp| type| source ---|---|--- 2026-07-02 21:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyqwklut2d...

CVE-2026-57624

creationtimestamp| type| source ---|---|--- 2026-07-02 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyjrzddk2e...

Missing Authorization

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Missing Authorization via the POST /api/tunnel/tailscale-install route handler, which accepts a JSON body containing a sudoPassword field and pipes it, along with the contents o...

CVE-2026-5348

creationtimestamp| type| source ---|---|--- 2026-07-02 20:07:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoth3xfxh2o...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-28322

creationtimestamp| type| source ---|---|--- 2026-07-02 19:37:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mporrnzimn22...

CVE-2026-55950

creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...

CVE-2024-14037

creationtimestamp| type| source ---|---|--- 2026-07-02 19:15:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpoqlg2xhx27 2026-07-02 19:25:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpor5j4quo2v 2026-07-02 20:20:45+00:00| seen|...

CVE-2026-55119

creationtimestamp| type| source ---|---|--- 2026-07-02 18:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpopif3kwk2a 2026-07-03 07:27:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzgy6epo2n 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-55110

creationtimestamp| type| source ---|---|--- 2026-07-02 18:51:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpop7glvx22w 2026-07-03 07:07:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppydky5l42i 2026-07-08 11:01:21+00:00| seen|...

Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Summary EntriesController::actionSaveEntry performs entry-edit permission checks before request-controlled author changes are applied to the model. The subsequent author mutation path accepts attacker-supplied authors / author parameters and allows the change when the current user is one of the o...